Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/4A0F30568F5911EA93F10235C4F9AE02.roa
File:                     4A0F30568F5911EA93F10235C4F9AE02.roa (raw, json)
Hash identifier:          8HElKcz+5s7pEV7qaTxMhYJToUvDd94prWpL3m2spyQ=
Subject key identifier:   EB:5D:EE:9A:69:62:53:8F:69:23:F2:9F:94:CB:85:28:B2:85:F9:C9
Certificate issuer:       /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Certificate serial:       32F7
Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/4A0F30568F5911EA93F10235C4F9AE02.roa
Signing time:             Tue 22 Nov 2022 10:40:39 +0000
ROA not before:           Tue 22 Nov 2022 10:40:39 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     38264
IP address blocks:        58.27.128.0/17 maxlen: 17
                          58.27.128.0/24 maxlen: 24
                          58.27.129.0/24 maxlen: 24
                          58.27.130.0/24 maxlen: 24
                          58.27.131.0/24 maxlen: 24
                          58.27.132.0/22 maxlen: 22
                          58.27.132.0/24 maxlen: 24
                          58.27.133.0/24 maxlen: 24
                          58.27.134.0/24 maxlen: 24
                          58.27.135.0/24 maxlen: 24
                          58.27.136.0/22 maxlen: 22
                          58.27.140.0/24 maxlen: 24
                          58.27.141.0/24 maxlen: 24
                          58.27.142.0/24 maxlen: 24
                          58.27.144.0/22 maxlen: 23
                          58.27.144.0/23 maxlen: 24
                          58.27.148.0/22 maxlen: 22
                          58.27.148.0/24 maxlen: 24
                          58.27.149.0/24 maxlen: 24
                          58.27.150.0/23 maxlen: 23
                          58.27.152.0/21 maxlen: 22
                          58.27.160.0/21 maxlen: 22
                          58.27.160.0/24 maxlen: 24
                          58.27.164.0/24 maxlen: 24
                          58.27.168.0/21 maxlen: 22
                          58.27.168.0/23 maxlen: 23
                          58.27.170.0/24 maxlen: 24
                          58.27.171.0/24 maxlen: 24
                          58.27.172.0/24 maxlen: 24
                          58.27.176.0/20 maxlen: 20
                          58.27.184.0/22 maxlen: 22
                          58.27.188.0/24 maxlen: 24
                          58.27.189.0/24 maxlen: 24
                          58.27.190.0/24 maxlen: 24
                          58.27.192.0/19 maxlen: 19
                          58.27.192.0/21 maxlen: 21
                          58.27.192.0/24 maxlen: 24
                          58.27.193.0/24 maxlen: 24
                          58.27.194.0/23 maxlen: 23
                          58.27.195.0/24 maxlen: 24
                          58.27.196.0/23 maxlen: 24
                          58.27.198.0/24 maxlen: 24
                          58.27.199.0/24 maxlen: 24
                          58.27.200.0/22 maxlen: 22
                          58.27.200.0/24 maxlen: 24
                          58.27.201.0/24 maxlen: 24
                          58.27.202.0/24 maxlen: 24
                          58.27.203.0/24 maxlen: 24
                          58.27.204.0/22 maxlen: 22
                          58.27.204.0/24 maxlen: 24
                          58.27.205.0/24 maxlen: 24
                          58.27.206.0/24 maxlen: 24
                          58.27.207.0/24 maxlen: 24
                          58.27.208.0/20 maxlen: 20
                          58.27.208.0/22 maxlen: 22
                          58.27.208.0/24 maxlen: 24
                          58.27.209.0/24 maxlen: 24
                          58.27.210.0/24 maxlen: 24
                          58.27.211.0/24 maxlen: 24
                          58.27.212.0/22 maxlen: 22
                          58.27.212.0/24 maxlen: 24
                          58.27.215.0/24 maxlen: 24
                          58.27.216.0/24 maxlen: 24
                          58.27.217.0/24 maxlen: 24
                          58.27.218.0/24 maxlen: 24
                          58.27.219.0/24 maxlen: 24
                          58.27.220.0/24 maxlen: 24
                          58.27.221.0/24 maxlen: 24
                          58.27.222.0/24 maxlen: 24
                          58.27.223.0/24 maxlen: 24
                          58.27.224.0/19 maxlen: 19
                          58.27.224.0/20 maxlen: 20
                          58.27.224.0/24 maxlen: 24
                          58.27.225.0/24 maxlen: 24
                          58.27.226.0/24 maxlen: 24
                          58.27.227.0/24 maxlen: 24
                          58.27.228.0/24 maxlen: 24
                          58.27.229.0/24 maxlen: 24
                          58.27.230.0/24 maxlen: 24
                          58.27.231.0/24 maxlen: 24
                          58.27.232.0/21 maxlen: 21
                          58.27.232.0/22 maxlen: 22
                          58.27.232.0/24 maxlen: 24
                          58.27.233.0/24 maxlen: 24
                          58.27.234.0/24 maxlen: 24
                          58.27.235.0/24 maxlen: 24
                          58.27.236.0/23 maxlen: 24
                          58.27.238.0/24 maxlen: 24
                          58.27.239.0/24 maxlen: 24
                          58.27.240.0/21 maxlen: 21
                          58.27.240.0/24 maxlen: 24
                          58.27.241.0/24 maxlen: 24
                          58.27.242.0/24 maxlen: 24
                          58.27.243.0/24 maxlen: 24
                          58.27.244.0/24 maxlen: 24
                          58.27.245.0/24 maxlen: 24
                          58.27.246.0/24 maxlen: 24
                          58.27.247.0/24 maxlen: 24
                          58.27.248.0/22 maxlen: 22
                          58.27.248.0/24 maxlen: 24
                          58.27.249.0/24 maxlen: 24
                          58.27.250.0/24 maxlen: 24
                          58.27.251.0/24 maxlen: 24
                          58.27.252.0/22 maxlen: 23
                          58.27.255.0/24 maxlen: 24
                          110.36.0.0/14 maxlen: 15
                          110.36.0.0/18 maxlen: 24
                          110.36.64.0/18 maxlen: 24
                          110.36.128.0/18 maxlen: 24
                          110.36.192.0/18 maxlen: 24
                          110.37.0.0/18 maxlen: 24
                          110.37.64.0/18 maxlen: 24
                          110.37.128.0/18 maxlen: 24
                          110.37.192.0/18 maxlen: 24
                          110.38.0.0/16 maxlen: 24
                          110.39.0.0/16 maxlen: 24
                          2402:fd00::/32 maxlen: 32
                          2402:fd00:100::/44 maxlen: 44
                          2402:fd00:110::/48 maxlen: 48
                          2402:fd00:111::/48 maxlen: 48
                          2402:fd00:4000::/40 maxlen: 40
                          2402:fd00:6000::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13047 (0x32f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
        Validity
            Not Before: Nov 22 10:40:39 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=637ca726-dc46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0f:3d:20:0c:c2:2d:4b:c3:86:e8:47:0a:fd:
                    bb:8d:ce:25:82:65:da:59:e5:f9:60:85:ea:c3:f6:
                    34:d1:e9:6a:9a:e5:06:0f:ac:71:72:fd:5b:f3:aa:
                    fa:d0:b4:de:28:27:d3:14:4c:3b:f3:19:bd:1d:42:
                    c2:37:b2:72:98:5f:45:99:db:47:d5:a0:e6:f9:64:
                    8b:1a:0c:ba:b6:e5:29:4d:d1:3e:a6:00:04:6e:ea:
                    0e:3a:f9:e7:74:9a:ac:22:50:00:54:a4:5c:f5:41:
                    dc:15:84:05:32:85:f3:b3:48:db:e3:91:e6:43:56:
                    f0:fc:29:7d:ec:77:98:7f:3b:ca:b3:1c:83:bc:87:
                    6f:86:c0:c6:c7:54:39:c4:14:a4:7b:46:e0:d0:e5:
                    26:65:4f:db:d0:d0:03:64:0f:22:3c:95:05:b5:50:
                    65:dd:69:44:42:1c:8b:87:d5:21:31:e9:f9:da:2a:
                    ae:c5:72:20:ee:66:de:30:f1:6f:08:bb:40:4f:50:
                    19:09:9b:c1:7d:fc:8c:14:92:1d:65:ce:95:ce:1e:
                    ce:d4:7d:63:69:c6:47:bf:82:ad:30:24:12:8f:6c:
                    f9:9d:13:3f:a5:f3:d0:46:2a:50:b6:d4:dd:ee:c8:
                    a7:43:d2:a2:a3:17:03:9d:d8:86:d2:3d:99:00:ab:
                    21:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5D:EE:9A:69:62:53:8F:69:23:F2:9F:94:CB:85:28:B2:85:F9:C9
            X509v3 Authority Key Identifier:
                keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/4A0F30568F5911EA93F10235C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.27.128.0/17
                  110.36.0.0/14
                IPv6:
                  2402:fd00::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:63:ba:89:f0:8c:d2:83:e7:c7:73:f1:65:d3:92:36:20:de:
         08:af:87:12:7f:ba:3a:59:d4:1b:09:39:a9:02:87:70:02:9b:
         81:47:88:b8:61:f9:e1:60:1c:e5:47:cd:b0:2c:ba:a2:48:4f:
         86:e2:14:5c:8d:90:91:9c:57:27:f3:08:e6:3a:c1:8c:9c:d0:
         c1:c1:8a:fb:90:47:0a:f6:9b:51:5f:2b:f7:25:fc:5e:af:9e:
         6f:1a:20:7d:10:4b:f0:c7:5b:f6:dc:bf:37:3d:dc:79:a8:b5:
         d9:55:8b:e0:e5:6c:3e:0b:b9:54:3a:f4:ce:0d:2d:6c:c7:2b:
         a6:1b:b3:f4:87:96:39:f8:02:a7:6a:1c:b4:29:2e:95:a1:a7:
         19:cf:0d:bf:9b:24:1c:86:13:1d:ba:5e:c6:fb:2a:d1:0e:95:
         76:c8:d3:bc:aa:88:9c:72:78:04:49:96:e5:37:91:d8:c8:ac:
         45:0e:be:ae:50:84:64:da:23:15:36:20:58:70:a6:ec:7d:6b:
         95:3f:82:59:21:7d:4b:65:5e:56:43:1d:dd:a1:be:75:77:8b:
         fc:83:ff:88:f6:d9:17:58:ba:50:dd:ad:11:66:06:0e:c8:82:
         79:ed:a6:af:6c:c9:87:03:f5:35:c5:b8:3c:2c:4e:9f:a1:f1:
         29:2f:6e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-ams.rpki-client.org