Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/A532C612E2EE11EFB033476CC4F9AE02.roa
File: A532C612E2EE11EFB033476CC4F9AE02.roa (raw, json)
Hash identifier: +xM2DVJwL8ax1xCOE0ujW9kF2UqXGg/tCv11IzDsFxc=
Subject key identifier: C1:DF:0A:B8:A4:84:67:F5:F5:68:F9:09:48:A1:7F:12:BA:7C:8D:AF
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0DF2
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/A532C612E2EE11EFB033476CC4F9AE02.roa
Signing time: Tue 04 Feb 2025 11:53:27 +0000
ROA not before: Tue 04 Feb 2025 11:53:27 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 139.190.29.0/24 maxlen: 24
139.190.30.0/24 maxlen: 24
139.190.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Feb 2025 11:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3570 (0xdf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Feb 4 11:53:27 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67a1ffb7-7013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9b:c1:c2:8c:ed:dc:37:33:98:8c:90:ba:07:
af:1e:60:cf:df:d4:23:3c:0b:9d:13:f4:e8:d8:5b:
ce:ae:7a:4d:d3:a0:ee:e2:05:28:f4:3a:65:2e:7d:
6d:fc:d0:27:37:30:a6:a7:f9:a3:20:d1:1d:f3:73:
63:85:9d:d2:2f:5c:57:a9:35:61:d3:3c:a9:6d:bb:
76:09:d5:10:e9:45:28:d8:63:fb:fe:8f:43:dd:72:
1a:77:8a:05:4f:60:07:47:8d:9e:9c:9e:05:22:49:
b3:d9:45:d7:37:40:31:0b:17:69:09:ba:ce:01:2a:
da:e7:b0:61:91:de:b0:ee:46:b6:80:7d:77:67:19:
9d:61:b8:1b:70:2f:b7:58:f6:de:26:11:6c:04:01:
9b:76:f2:d4:a0:e3:4c:79:1d:49:2d:a4:16:0c:fa:
ed:8f:1c:89:56:33:f0:af:c5:e2:d9:d6:6b:6c:f3:
46:5b:4f:91:94:3f:0a:6e:67:65:0a:c6:d0:42:7e:
a6:16:2f:89:df:2b:82:65:b3:f2:9b:08:c6:de:1a:
73:5f:7b:99:c9:5f:7e:2a:0b:d4:98:84:d5:04:e8:
3c:25:ad:02:0d:40:be:55:24:90:c0:6d:4b:74:f3:
00:d1:9c:eb:60:96:97:e5:7d:1c:a7:75:8f:f9:12:
ff:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DF:0A:B8:A4:84:67:F5:F5:68:F9:09:48:A1:7F:12:BA:7C:8D:AF
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/A532C612E2EE11EFB033476CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.29.0-139.190.31.255
Signature Algorithm: sha256WithRSAEncryption
18:8b:78:8b:f0:f7:ce:3e:21:7b:1a:99:53:c4:95:ed:49:e1:
9b:75:01:62:1d:e3:a4:d7:34:2d:42:0f:68:5e:e3:85:e8:01:
b3:44:2c:28:ea:93:02:ad:2b:ca:15:d7:25:4e:e2:f4:5d:68:
83:a0:bd:34:39:6c:4c:b4:50:da:24:09:c2:e9:f9:e5:0a:92:
18:e3:aa:33:41:9b:a1:d3:2f:0b:dc:3c:5f:3a:7f:48:4f:ba:
c6:85:7d:ad:98:8d:20:8a:d7:aa:9a:b9:20:ae:3c:e9:09:5f:
63:32:02:28:0b:b5:10:2b:ba:36:ad:7b:9b:40:e1:9f:14:96:
9f:44:17:7b:ec:b3:72:30:de:07:9c:0c:86:3b:3a:f2:72:5c:
9c:a6:22:37:08:3b:e0:bd:ba:4d:67:35:45:1f:64:d0:62:c2:
b3:9e:ba:20:53:22:a1:4f:9f:39:5d:85:f3:aa:a8:14:83:e2:
1c:a1:f9:af:3d:3b:9e:b5:2f:3e:90:4e:62:06:7e:81:f5:b7:
ad:e3:f8:53:43:52:df:ce:2f:12:5b:93:02:8b:c4:65:70:c3:
42:c6:60:5a:e8:1d:22:b4:77:c3:40:9c:22:69:3a:aa:04:42:
85:08:8a:e0:11:12:78:c9:23:5f:2d:38:20:b1:9a:f7:bd:fe:
3b:a3:e2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 6 07:21:10 2025 by rpki-client on console.sobornost.net