Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/01C4485AFA2611ED8B043815C4F9AE02.roa
File:                     01C4485AFA2611ED8B043815C4F9AE02.roa (raw, json)
Hash identifier:          4MuigBMy44HGfmrMUh6fga/d3Fg8f+u7dKk123dh5OU=
Subject key identifier:   6D:CF:86:EB:67:E7:DC:F5:41:DD:38:2F:57:82:E1:71:99:5C:48:D0
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0201
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/01C4485AFA2611ED8B043815C4F9AE02.roa
Signing time:             Thu 01 Jun 2023 06:54:51 +0000
ROA not before:           Thu 01 Jun 2023 06:54:51 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     212219
IP address blocks:        203.32.26.0/24 maxlen: 24
                          203.32.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 26 Aug 2023 06:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jun  1 06:54:51 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=647840ba-d7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:73:b1:fa:fc:77:f7:b0:03:de:f8:69:3c:
                    78:65:07:a2:d0:79:fb:40:f7:59:82:7e:12:ad:73:
                    31:e7:fd:2c:6a:94:f8:95:73:25:8f:2f:8c:40:0e:
                    63:82:af:c7:52:71:86:4f:09:15:b2:c3:82:dc:f7:
                    d4:bd:fc:10:d5:d2:24:1a:71:4f:71:c7:c4:37:7c:
                    0b:2e:58:56:81:c7:7f:c1:24:c5:87:4e:8c:6b:55:
                    8f:fc:00:4d:fd:2c:f2:ad:d2:3e:82:b0:5a:3c:6e:
                    09:b9:80:36:a1:c5:25:58:d4:22:dc:66:51:45:77:
                    0f:0c:3a:38:b1:e0:d5:77:69:0f:e3:2e:41:87:2a:
                    08:f7:8d:ab:c8:a3:64:b9:1b:6f:87:15:9c:94:8e:
                    91:79:a3:77:9f:43:fa:e0:36:ba:c7:c6:09:e2:73:
                    4b:29:24:a1:1f:28:78:c9:7d:f3:61:78:c5:d5:e4:
                    c8:0b:4a:8f:17:9d:2f:94:df:f5:0f:af:36:59:38:
                    43:a2:9b:f7:7a:c9:b0:78:87:84:0e:36:6c:9d:97:
                    a6:ba:f1:7f:0e:03:b3:b0:d5:3a:b2:60:f1:4f:98:
                    f7:c9:37:b8:67:1c:c0:cc:c4:61:4c:49:6d:ba:08:
                    89:c2:09:eb:19:b3:1a:97:f3:ab:3b:7c:43:28:06:
                    98:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CF:86:EB:67:E7:DC:F5:41:DD:38:2F:57:82:E1:71:99:5C:48:D0
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/01C4485AFA2611ED8B043815C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.32.26.0/24
                  203.32.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:d8:b8:f1:b3:15:be:a5:7f:6a:a4:d5:13:f9:2e:3a:ac:fd:
         4e:eb:c5:82:f9:44:ed:77:be:95:86:90:aa:11:66:4f:5c:29:
         55:77:67:ef:d1:e5:53:b3:cd:74:a7:c1:67:38:ed:f4:08:da:
         d4:c8:d1:97:da:12:ab:8f:f2:07:09:0f:15:24:03:4a:08:83:
         95:9f:ed:7f:05:42:5b:30:29:74:1a:ac:b3:93:5c:7d:a8:84:
         9c:af:21:76:db:7a:75:a4:46:de:3a:75:1c:b3:dc:e9:07:e2:
         13:d2:d8:4a:c6:67:e5:75:b5:72:e3:42:88:21:1f:ae:9b:87:
         72:8f:33:56:37:71:5c:2e:22:a8:df:f2:7c:27:6b:2b:33:9c:
         81:81:0d:9f:74:11:59:a8:eb:25:fc:8c:38:98:52:80:1e:57:
         d0:86:5d:32:dd:0c:a5:98:d0:4f:dd:ee:aa:fe:88:ab:c3:51:
         65:74:83:1d:08:1f:e2:59:81:bd:dd:70:7a:61:cc:fc:c1:50:
         6a:73:5a:b0:46:90:8b:4d:e8:51:6b:0d:be:01:60:78:b0:b6:
         56:e9:e3:5c:37:a7:7b:2b:6d:42:91:8d:91:6f:e7:4d:31:b4:
         e5:66:cd:0e:69:48:eb:aa:fe:82:8b:3c:23:31:e9:ab:c4:51:
         9a:2f:ab:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:46 2024 by rpki-client on console-ams.rpki-client.org