Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/9F7B7DC0038A11EFA85A4555C4F9AE02.roa
File: 9F7B7DC0038A11EFA85A4555C4F9AE02.roa (raw, json)
Hash identifier: W+mxHVJ9GM+NuSRRBaFu1XKIWsT7dvDf3lkUd9WpQt8=
Subject key identifier: DE:15:5C:49:65:30:84:15:74:E7:E8:41:91:E1:AB:8E:EB:30:0A:5E
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0A35
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/9F7B7DC0038A11EFA85A4555C4F9AE02.roa
Signing time: Fri 26 Apr 2024 05:05:39 +0000
ROA not before: Fri 26 Apr 2024 05:05:39 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 54702
IP address blocks: 139.190.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Apr 2024 11:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2613 (0xa35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Apr 26 05:05:39 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=662b3623-722e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:02:90:82:4a:01:61:f6:37:ec:01:e3:5a:
02:14:50:df:c0:3c:70:bb:45:63:92:1c:49:33:ab:
4b:2c:e5:b9:e8:ae:40:85:07:48:c8:60:5c:fd:41:
71:3b:5c:33:83:be:22:33:f5:b6:92:a8:d3:aa:70:
7e:5b:c3:82:0e:8c:9b:78:cd:aa:8a:57:97:a2:24:
77:8f:cb:05:1a:ce:f5:c9:52:72:85:d9:48:8a:3f:
7d:32:cc:97:7e:d2:b3:3c:a1:bc:e4:e4:36:50:b7:
83:21:f4:94:1d:ee:2a:2a:92:b6:c2:34:a4:de:0d:
a3:54:6b:d6:7b:20:06:8a:65:46:13:07:06:3a:63:
24:2a:1c:f7:8a:e2:14:07:60:62:b4:ac:be:a7:e0:
3a:b6:6a:02:99:0f:c9:f3:f5:5c:9c:70:04:47:99:
f1:0a:80:32:5c:1c:cd:d5:91:20:eb:87:36:d2:05:
60:99:69:66:01:86:32:8e:31:29:f7:b5:07:ff:25:
34:e7:7e:ea:be:61:4a:50:5c:e0:6c:20:0a:4c:6a:
75:85:2b:2b:41:8a:e7:46:3f:16:8d:a9:66:35:87:
4e:07:36:43:89:c3:3a:25:e9:e7:2f:a2:6a:05:38:
90:0d:26:aa:f1:c5:dd:d9:78:f5:da:2a:e3:68:19:
6f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:15:5C:49:65:30:84:15:74:E7:E8:41:91:E1:AB:8E:EB:30:0A:5E
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/9F7B7DC0038A11EFA85A4555C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.239.0/24
Signature Algorithm: sha256WithRSAEncryption
31:b8:87:a2:92:51:d1:b7:bc:cd:b1:47:36:bf:f6:81:ca:ef:
35:4b:42:99:d9:10:ea:81:08:b1:e0:4b:38:75:f6:75:4b:dd:
89:23:c7:b7:32:f1:80:65:ab:eb:dc:e5:e0:76:bb:7d:55:eb:
7a:7d:18:c5:61:16:fa:17:fa:d1:99:8e:46:1d:b5:59:0b:f0:
02:d8:1f:08:af:00:83:44:ea:66:95:da:0b:ae:a2:28:92:40:
d4:33:70:53:b9:db:92:5b:78:2e:e8:c9:ec:35:2a:f5:b1:58:
67:02:05:81:e6:67:28:d7:b1:71:d5:64:94:cc:96:94:89:88:
79:51:d5:17:a9:8c:82:1d:c1:2f:be:8f:d8:c2:01:41:73:60:
b5:38:eb:b5:2a:79:f9:2c:21:d2:0c:12:00:21:3a:9e:4d:3e:
db:ad:8f:8c:b8:6c:67:5e:8e:84:ee:3b:c7:a7:3e:e3:c9:e6:
ae:b5:7d:4d:e5:e7:bd:d7:65:9d:7b:77:74:47:6c:75:91:85:
d8:7a:3f:4f:1c:59:4f:03:b4:8a:d3:e5:8b:a3:d2:d1:7a:65:
08:9a:23:82:46:30:67:4e:da:40:7f:eb:55:1b:a9:c6:99:15:
4f:f5:34:7f:cb:84:eb:d2:d4:dd:8a:b2:69:dc:8b:7d:80:92:
95:39:32:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 14:43:23 2024 by rpki-client on console.sobornost.net