Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/C1C58F44A7DE11EFB9558C21C4F9AE02.roa
File: C1C58F44A7DE11EFB9558C21C4F9AE02.roa (raw, json)
Hash identifier: qM5fD+7lmyQBPTjdQQ7AlSItZAux6uGTvGqORgpnRbU=
Subject key identifier: 34:28:14:39:E6:1A:DE:FB:33:BE:F9:CE:96:EB:84:3C:0F:E6:66:0A
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0C27
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/C1C58F44A7DE11EFB9558C21C4F9AE02.roa
Signing time: Thu 21 Nov 2024 08:06:00 +0000
ROA not before: Thu 21 Nov 2024 08:06:00 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 139.190.32.0/19 maxlen: 24
139.190.68.0/22 maxlen: 24
139.190.80.0/21 maxlen: 24
139.190.88.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Nov 2024 12:48:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3111 (0xc27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Nov 21 08:06:00 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=673ee9e7-d66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:75:e7:e7:b4:93:9b:80:a2:ba:d0:59:5b:
9a:ac:ab:79:e2:96:cf:07:72:de:e6:d9:47:80:e6:
c7:5b:00:ba:d2:c2:73:01:5e:ba:72:e1:01:ba:75:
e0:85:33:29:24:a6:72:3d:c2:0b:fc:3b:af:a1:10:
92:4c:25:3d:ee:c8:d3:0a:3f:6a:53:56:0b:e8:36:
7c:93:47:f9:2e:17:b0:4a:aa:cc:a4:55:c8:08:1c:
e9:86:7d:41:41:b2:40:81:57:e0:7e:b3:11:52:7d:
e2:75:c0:b0:9d:14:ca:a4:66:cf:38:04:f9:dc:03:
f9:4a:8d:7e:d5:c0:a6:5b:68:c7:33:17:b3:b1:58:
26:3e:8e:ef:7b:34:8a:c0:0d:5c:84:d7:55:ed:d3:
7c:9d:8c:59:f9:4b:6d:9e:cf:53:e2:7f:e8:84:d9:
45:8e:bb:07:93:83:fa:23:7d:01:2e:48:67:ec:fa:
1b:6d:ab:9c:1c:c4:09:8f:54:43:3f:fb:05:7e:17:
28:11:07:54:bb:53:13:59:0f:0d:35:9a:85:c5:27:
ca:3b:b3:fc:13:f7:fc:5d:2d:e8:53:0f:8b:80:22:
21:06:c5:a1:1e:25:de:59:d2:14:34:0a:88:84:c6:
5b:a6:50:a6:4d:dc:c2:10:7b:a5:69:34:ed:84:00:
b5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:28:14:39:E6:1A:DE:FB:33:BE:F9:CE:96:EB:84:3C:0F:E6:66:0A
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/C1C58F44A7DE11EFB9558C21C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.32.0/19
139.190.68.0/22
139.190.80.0/20
Signature Algorithm: sha256WithRSAEncryption
06:31:6b:66:c2:04:49:ad:14:31:73:d0:f6:0c:f4:e9:45:5d:
59:5b:f1:93:92:de:f7:10:6b:7d:29:30:d4:a3:6e:6d:22:b0:
24:90:bb:73:9c:fb:d6:91:0d:e8:0c:76:5f:63:4c:8e:2e:69:
f1:4c:59:5a:4c:db:52:ea:1f:90:2f:eb:39:51:54:ae:6e:ee:
83:0e:f5:5a:34:17:a1:28:aa:0c:d8:25:f2:fc:cc:86:74:7f:
e7:a0:9e:de:00:a0:7b:09:f9:e8:33:b2:4d:93:31:2c:d2:d2:
c6:06:f3:5f:0a:7c:f0:1a:2d:dd:6a:f5:04:20:26:85:01:0d:
93:4f:01:ed:8d:0c:b3:32:46:a4:88:58:3c:d8:ad:c9:f7:56:
7a:50:b7:e8:3a:4b:35:ce:7d:4e:a6:6c:a1:80:8c:ce:78:60:
2d:82:74:cb:c0:6c:1c:5c:e2:58:cd:57:f0:80:cb:fe:b8:7f:
fb:7b:7a:d7:f0:9e:64:ce:55:bd:1c:49:5d:f6:77:56:e3:22:
28:49:4c:e6:fa:93:08:e8:9b:56:63:b3:14:ce:29:07:26:0f:
71:44:f1:43:ac:42:6b:ed:55:99:2f:1a:01:92:fe:fe:5e:66:
f0:6e:7d:d9:cb:cd:79:2d:35:7a:c1:7a:0f:d5:5e:a4:bd:6a:
ea:5b:d0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 15:20:17 2024 by rpki-client on console.sobornost.net