Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/6097B302659911ED8981D533C4F9AE02.roa
File:                     6097B302659911ED8981D533C4F9AE02.roa (raw, json)
Hash identifier:          omT2d0cPLspNjzWNIaOX1/k+9Bgv/NSy/WfyxCgITNw=
Subject key identifier:   EF:00:6D:33:0C:57:65:57:EA:A6:49:CD:D0:82:15:5C:9F:AA:32:E8
Certificate issuer:       /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial:       078C
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/6097B302659911ED8981D533C4F9AE02.roa
Signing time:             Thu 06 Apr 2023 22:39:42 +0000
ROA not before:           Thu 06 Apr 2023 22:39:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        103.112.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 06 Dec 2023 17:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1932 (0x78c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
        Validity
            Not Before: Apr  6 22:39:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=642f4a2d-a604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:43:35:35:9f:2f:bc:b4:0b:64:41:cd:fc:18:
                    f0:68:bd:49:4a:d2:96:8e:96:f4:61:a8:47:91:d3:
                    65:4d:e5:56:7f:80:d9:5e:d7:53:d3:93:1e:c4:24:
                    06:52:cb:32:c5:8c:15:c9:34:45:f4:71:c7:64:f7:
                    40:2b:e7:21:78:af:1f:7c:96:2b:40:f2:e9:2e:22:
                    de:6a:c9:8e:13:09:3b:cd:86:9f:87:7b:69:eb:ea:
                    b6:f3:a1:95:0a:7d:35:7f:1c:aa:28:c2:8e:c2:8c:
                    2b:06:ee:36:e2:e9:28:5e:e6:72:55:cd:7c:86:ad:
                    1c:2c:d7:b0:aa:3f:c2:8c:e2:ed:ed:51:33:0f:d0:
                    4b:b0:72:90:9e:86:a6:35:ff:a9:77:79:99:a8:08:
                    78:2c:7f:c0:6c:81:d9:6a:20:72:59:ab:4a:58:4c:
                    0c:21:79:4a:b9:2f:cc:0b:3d:22:57:ff:ab:67:25:
                    a2:20:c5:21:a0:0c:2f:f0:7a:6c:cd:14:8f:65:1d:
                    92:85:9e:f3:26:c8:84:e1:59:59:59:97:66:02:19:
                    2a:b9:40:0e:7b:43:e8:59:59:b3:fa:35:fe:bd:05:
                    7b:9f:ba:f0:91:75:6f:b9:67:64:c1:e2:2b:28:a7:
                    a4:36:57:5b:ea:8f:a9:ae:0d:75:ca:35:94:a7:0e:
                    bb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:00:6D:33:0C:57:65:57:EA:A6:49:CD:D0:82:15:5C:9F:AA:32:E8
            X509v3 Authority Key Identifier:
                keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/6097B302659911ED8981D533C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:78:9e:e4:42:28:a4:0e:86:9e:2d:09:88:21:c3:d2:8f:0a:
         07:de:8b:25:28:17:91:37:d8:37:6d:5e:25:52:ad:da:86:7e:
         a0:aa:3c:82:70:a1:e7:8e:80:fd:5c:43:1b:d4:25:3a:33:e0:
         88:a6:ee:18:d2:da:da:5c:99:f4:b0:81:26:9d:67:13:e7:2a:
         a5:ff:44:98:5c:8f:1b:f9:7a:a4:ad:76:c5:ee:32:c9:ae:1e:
         98:57:be:49:4a:68:b9:63:54:30:a2:8c:52:94:f7:98:f1:9b:
         36:91:53:63:35:9e:cd:e3:b7:20:e7:7f:f8:c4:3f:a9:a6:a1:
         ae:84:6b:21:0b:61:2a:82:77:20:0b:0e:a8:48:d1:2f:75:c4:
         e0:41:81:80:ea:a5:13:84:fb:a7:9c:5e:cb:96:83:cb:cd:d8:
         46:2a:3a:d0:36:6d:81:32:d2:7a:bd:15:0c:85:57:f8:b0:3f:
         7b:5f:5b:dc:d8:f1:3a:c0:fe:45:fc:b3:6e:96:10:e5:ae:0e:
         c0:48:9a:b1:5b:6f:91:a5:a8:70:01:51:fc:ec:1c:44:98:a5:
         eb:9c:c1:56:9e:a8:24:90:eb:b4:d9:94:3c:be:44:25:c2:f3:
         f8:1c:ac:fb:80:1b:1b:f8:1b:7a:31:5a:a3:77:ef:71:0c:6e:
         1f:0b:50:17
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzhGMjcxMTAvBgNVBAUTKEQxQTM2Q0Q4RUQyMzU1MDgyNzYxQTNEQjEzRUREMzBE
RkRBMkNGRDAwHhcNMjMwNDA2MjIzOTQyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDJmNGEyZC1hNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzUM1NZ8vvLQLZEHN/BjwaL1JStKWjpb0YahHkdNlTeVWf4DZXtdT05MexCQG
UssyxYwVyTRF9HHHZPdAK+cheK8ffJYrQPLpLiLeasmOEwk7zYafh3tp6+q286GV
Cn01fxyqKMKOwowrBu424ukoXuZyVc18hq0cLNewqj/CjOLt7VEzD9BLsHKQnoam
Nf+pd3mZqAh4LH/AbIHZaiByWatKWEwMIXlKuS/MCz0iV/+rZyWiIMUhoAwv8Hps
zRSPZR2ShZ7zJsiE4VlZWZdmAhkquUAOe0PoWVmz+jX+vQV7n7rwkXVvuWdkweIr
KKekNldb6o+prg11yjWUpw67NQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO8AbTMM
V2VX6qZJzdCCFVyfqjLoMB8GA1UdIwQYMBaAFNGjbNjtI1UIJ2Gj2xPt0w39os/Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEYyNy83RjUyMjlBOEIw
OTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZRZ25ZYVBiRS0zVERmMml6
OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBhTnMyTzBqVlFnbllhUGJFLTNURGYyaXo5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzhGMjcvN0Y1MjI5QThCMDkyMTFFQUI1REJFQzU4QzRGOUFFMDIvNjA5N0IzMDI2
NTk5MTFFRDg5ODFENTMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABncAAwDQYJKoZIhvcNAQELBQADggEBAEt4nuRCKKQOhp4t
CYghw9KPCgfeiyUoF5E32DdtXiVSrdqGfqCqPIJwoeeOgP1cQxvUJToz4Iim7hjS
2tpcmfSwgSadZxPnKqX/RJhcjxv5eqStdsXuMsmuHphXvklKaLljVDCijFKU95jx
mzaRU2M1ns3jtyDnf/jEP6mmoa6EayELYSqCdyALDqhI0S91xOBBgYDqpROE+6ec
XsuWg8vN2EYqOtA2bYEy0nq9FQyFV/iwP3tfW9zY8TrA/kX8s26WEOWuDsBImrFb
b5GlqHABUfzsHESYpeucwVaeqCSQ67TZlDy+RCXC8/gcrPuAGxv4G3oxWqN373EM
bh8LUBc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:26 2024 by rpki-client on console-ams.rpki-client.org