Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/CBD060C2571C11EE9C2C9143C4F9AE02.roa
File:                     CBD060C2571C11EE9C2C9143C4F9AE02.roa (raw, json)
Hash identifier:          6N1MoeU/31hWj82bFtZgmHHBIzJa5/lCKodL3FoUc6M=
Subject key identifier:   DE:63:4F:6E:6A:C2:DE:2F:BB:2D:A3:92:A8:DC:A5:AD:A4:5B:DC:64
Certificate issuer:       /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA
Certificate serial:       0A
Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/CBD060C2571C11EE9C2C9143C4F9AE02.roa
Signing time:             Sat 23 Sep 2023 05:46:31 +0000
ROA not before:           Sat 23 Sep 2023 05:46:31 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     202662
IP address blocks:        103.158.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Dec 2023 06:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA
        Validity
            Not Before: Sep 23 05:46:31 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=650e7bb7-807c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:28:c6:60:cd:83:7b:3d:54:7f:26:53:f8:c2:
                    7e:ff:d8:e7:a7:10:06:c1:60:0d:e8:7f:0b:2b:e8:
                    b1:3e:7b:41:35:24:33:05:04:b1:3e:15:50:c6:a4:
                    83:6b:68:b3:c3:3d:c1:89:12:b1:7c:83:78:75:e3:
                    4e:b4:12:52:a1:5b:a0:c6:70:95:9f:43:22:a8:97:
                    e3:d4:2d:52:0c:3d:6a:2f:2d:1f:89:b3:9e:48:a4:
                    e1:82:31:71:c2:60:cd:4c:3d:29:db:db:d7:cb:2f:
                    0b:7a:f5:40:01:06:48:73:56:6e:23:c5:7c:01:0a:
                    cf:c7:35:b8:33:9b:43:34:15:80:f4:37:26:82:6b:
                    4a:79:50:d3:2a:36:c5:df:5c:11:13:d9:2b:e5:6b:
                    52:b1:cf:29:bb:d8:3a:7c:26:cd:38:ab:67:d2:55:
                    ac:63:cc:c5:5a:fc:4b:c5:84:e8:98:68:c8:bf:e1:
                    20:b9:bb:7c:08:39:8d:c2:02:b5:62:01:02:26:a7:
                    8f:f9:83:1d:82:d4:4e:ac:82:a1:f8:5a:98:a5:91:
                    90:8f:fd:b3:0e:fb:93:93:95:65:5d:f1:53:ea:b2:
                    23:81:b0:89:7f:26:3e:6b:c7:48:4e:25:6b:cd:03:
                    37:76:3a:f4:2f:90:91:d7:e2:dc:83:7d:56:90:e4:
                    4f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:63:4F:6E:6A:C2:DE:2F:BB:2D:A3:92:A8:DC:A5:AD:A4:5B:DC:64
            X509v3 Authority Key Identifier:
                keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/CBD060C2571C11EE9C2C9143C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:85:30:7e:15:4f:73:03:c7:6e:a1:fb:8b:f6:8c:43:5d:41:
         9a:d9:c5:3a:09:f6:8b:bf:1e:21:54:15:31:72:9d:ea:ff:66:
         72:f0:56:b2:55:5c:21:56:87:9d:94:35:d9:58:7b:e6:47:99:
         7a:c0:07:b6:b6:3a:8a:94:7e:37:63:5f:d9:92:eb:05:59:a4:
         f1:12:1b:46:4d:39:e2:36:1c:83:5c:ab:23:c7:d9:ca:ec:7e:
         5d:cf:b7:51:df:51:fc:48:0f:9e:2f:19:43:cf:34:94:4f:e3:
         5b:2f:85:3e:8d:e1:c6:45:b3:48:51:43:15:c9:f2:4d:2f:31:
         9b:02:09:90:04:77:41:44:20:87:25:ac:59:7e:d6:7f:ec:28:
         67:c8:8d:76:01:9d:69:a5:c1:7c:84:8e:bb:7a:0f:57:74:48:
         8a:ed:ae:d9:42:34:ab:6a:d5:e6:11:c4:08:bd:2e:65:ae:b6:
         86:05:78:82:61:84:e3:ef:70:61:70:ad:33:2b:da:fb:18:62:
         e3:0b:d0:fc:43:eb:10:6f:51:a2:42:d5:b1:62:f3:f3:63:e3:
         9d:99:9c:82:24:9a:88:4b:f4:3e:e8:81:23:be:e1:78:b0:6e:
         2e:82:c7:94:d5:14:49:98:a9:7b:e0:6a:7a:70:f6:dc:12:4f:
         b4:da:08:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:02 2024 by rpki-client on console-fra.rpki-client.org