Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/3D066BBE0E8411EAACBFE119C4F9AE02.roa
File:                     3D066BBE0E8411EAACBFE119C4F9AE02.roa (raw, json)
Hash identifier:          RgVa9J4oTjmAFO6jq8d9h4oflLUzI7PNRIX/S3GJqRE=
Subject key identifier:   5F:3E:13:ED:78:AB:F8:80:61:B3:51:3A:DC:8A:01:C2:BA:E4:F2:4B
Certificate issuer:       /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
Certificate serial:       0B89
Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/3D066BBE0E8411EAACBFE119C4F9AE02.roa
Signing time:             Mon 15 May 2023 11:45:46 +0000
ROA not before:           Mon 15 May 2023 11:45:46 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     137967
IP address blocks:        103.117.192.0/22 maxlen: 22
                          103.117.192.0/23 maxlen: 23
                          103.117.192.0/24 maxlen: 24
                          103.117.193.0/24 maxlen: 24
                          103.117.194.0/23 maxlen: 23
                          103.117.194.0/24 maxlen: 24
                          103.117.195.0/24 maxlen: 24
                          2403:1e40::/32 maxlen: 36
                          2403:1e40::/48 maxlen: 48
                          2403:1e40:100::/48 maxlen: 48
                          2403:1e40:150::/48 maxlen: 48
                          2403:1e40:151::/48 maxlen: 48
                          2403:1e40:152::/48 maxlen: 48
                          2403:1e40:168::/48 maxlen: 48
                          2403:1e40:70ff::/48 maxlen: 48
                          2403:1e40:80ff::/48 maxlen: 48
                          2403:1e40:90ff::/48 maxlen: 48
                          2403:1e40:97ff::/48 maxlen: 48
                          2403:1e40:fffd::/48 maxlen: 48
                          2403:1e40:fffe::/48 maxlen: 48
                          2403:1e40:ffff::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2953 (0xb89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
        Validity
            Not Before: May 15 11:45:46 2023 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=64621b6a-774d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:41:c0:25:a1:c7:e4:9c:bc:34:fa:47:1a:
                    38:7f:57:28:03:6b:fd:cb:46:66:60:e6:29:da:13:
                    f4:f4:b0:be:fc:92:33:3d:7c:af:07:b7:7d:eb:73:
                    48:2e:9a:d6:41:ac:f1:42:27:bb:72:19:9c:79:e1:
                    f5:60:c8:29:c7:e6:92:cb:11:76:97:c2:bc:2b:75:
                    4f:51:ab:34:ca:65:a6:84:3e:e9:14:71:88:a1:b5:
                    3c:05:e2:63:4c:bb:61:99:76:b7:17:d5:88:02:30:
                    bd:f8:d8:d0:2e:fa:62:bb:0a:f4:30:ed:87:15:ab:
                    12:98:da:fc:98:97:7e:68:31:3d:8f:e0:5f:98:62:
                    d0:57:af:7b:00:a1:75:bf:91:5a:04:3b:9f:62:6e:
                    94:e0:a5:ec:38:26:65:2d:8e:af:0a:1e:34:57:69:
                    a1:be:cd:62:e4:85:4a:06:f4:5a:3e:42:f7:1e:0e:
                    01:f2:f5:4c:fd:b2:5c:84:df:47:3d:b0:08:9d:63:
                    04:e6:02:83:23:7b:2e:b1:fe:59:da:6f:a5:d4:06:
                    71:a4:86:9e:eb:a1:7a:50:fc:07:a7:53:08:2e:82:
                    a7:6a:23:61:83:d3:a1:fa:60:74:60:92:4b:b6:f4:
                    f2:74:63:bc:55:fc:0c:fb:05:96:e0:d9:d4:2c:52:
                    01:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3E:13:ED:78:AB:F8:80:61:B3:51:3A:DC:8A:01:C2:BA:E4:F2:4B
            X509v3 Authority Key Identifier:
                keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/3D066BBE0E8411EAACBFE119C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.192.0/22
                IPv6:
                  2403:1e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:0a:ff:97:9a:75:c5:81:f5:02:96:de:2b:0b:31:bd:21:d0:
         98:30:cb:c7:d9:fe:dc:07:20:ef:9a:45:3a:43:cc:03:b5:83:
         21:8b:e6:dc:ca:dc:9e:97:a1:aa:14:8e:31:ab:8b:f5:27:bf:
         63:1b:fd:22:6d:31:2b:ae:fe:d6:25:16:86:3e:6d:00:e4:c0:
         b5:50:3c:db:5a:a4:91:c6:8e:cf:9c:07:95:2d:32:7f:8b:42:
         d0:f0:86:b7:10:d8:59:af:02:55:48:0e:1e:dd:2d:a3:3d:b2:
         39:1c:f4:bb:ef:16:d3:71:ba:d2:ae:e6:b6:a2:da:05:b9:75:
         e7:f0:d4:f6:40:4b:92:c4:2f:68:58:d4:37:84:a9:85:e7:f4:
         ba:4d:68:57:f4:b2:8c:47:52:b9:9a:4a:4a:5f:9e:f4:b3:3e:
         44:65:fe:b0:32:c1:be:fb:22:f2:e9:07:55:06:d4:af:96:0e:
         58:5f:ab:7c:c1:6e:68:97:49:d7:32:04:5f:5d:f9:7b:08:c1:
         34:48:0c:78:64:34:bc:3a:8b:90:d6:ff:72:b6:8f:5f:1a:f6:
         98:3f:f7:fc:6e:23:28:54:0a:c7:d4:0e:e1:0a:41:f7:08:b8:
         32:c5:fe:4a:fc:ca:4c:73:e2:af:1c:c0:30:5a:86:ec:f6:55:
         3c:c9:55:c7
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ5NUMxMTAvBgNVBAUTKDc4QkVEQkVEQzA0NTlCOTAwQzI4Mjg5MkYxM0IxNzgy
QTk1NjA0MjkwHhcNMjMwNTE1MTE0NTQ2WhcNMjMwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDYyMWI2YS03NzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqt9BwCWhx+ScvDT6Rxo4f1coA2v9y0ZmYOYp2hP09LC+/JIzPXyvB7d963NI
LprWQazxQie7chmceeH1YMgpx+aSyxF2l8K8K3VPUas0ymWmhD7pFHGIobU8BeJj
TLthmXa3F9WIAjC9+NjQLvpiuwr0MO2HFasSmNr8mJd+aDE9j+BfmGLQV697AKF1
v5FaBDufYm6U4KXsOCZlLY6vCh40V2mhvs1i5IVKBvRaPkL3Hg4B8vVM/bJchN9H
PbAInWME5gKDI3susf5Z2m+l1AZxpIae66F6UPwHp1MILoKnaiNhg9Oh+mB0YJJL
tvTydGO8VfwM+wWW4NnULFIBOQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFF8+E+14
q/iAYbNROtyKAcK65PJLMB8GA1UdIwQYMBaAFHi+2+3ARZuQDCgokvE7F4KpVgQp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDk1Qy81NTkxODAwNEUy
QUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01QU1LQ2lTOFRzWGdxbFdC
Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VMN2I3Y0JGbTVBTUtDaVM4VHNYZ3FsV0JDay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTQ5NUMvNTU5MTgwMDRFMkFEMTFFOUI0QTI3NTQ2QzRGOUFFMDIvM0QwNjZCQkUw
RTg0MTFFQUFDQkZFMTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJndcAwDQQCAAIwBwMFACQDHkAwDQYJKoZIhvcNAQELBQAD
ggEBAGIK/5eadcWB9QKW3isLMb0h0Jgwy8fZ/twHIO+aRTpDzAO1gyGL5tzK3J6X
oaoUjjGri/Unv2Mb/SJtMSuu/tYlFoY+bQDkwLVQPNtapJHGjs+cB5UtMn+LQtDw
hrcQ2FmvAlVIDh7dLaM9sjkc9LvvFtNxutKu5rai2gW5defw1PZAS5LEL2hY1DeE
qYXn9LpNaFf0soxHUrmaSkpfnvSzPkRl/rAywb77IvLpB1UG1K+WDlhfq3zBbmiX
SdcyBF9d+XsIwTRIDHhkNLw6i5DW/3K2j18a9pg/9/xuIyhUCsfUDuEKQfcIuDLF
/kr8ykxz4q8cwDBahuz2VTzJVcc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-ams.rpki-client.org