Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/69445176ECA411ED8FDDC54AC4F9AE02.roa
File:                     69445176ECA411ED8FDDC54AC4F9AE02.roa (raw, json)
Hash identifier:          xUa6GR8kZLAnHQiXzUyLdWVj8SHKbcHIll81jzXMciQ=
Subject key identifier:   CD:78:7F:3B:33:CB:B5:40:58:B1:AA:0E:EC:5D:27:1B:87:9E:4E:BE
Certificate issuer:       /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Certificate serial:       0ACA
Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/69445176ECA411ED8FDDC54AC4F9AE02.roa
Signing time:             Fri 02 Jun 2023 20:31:40 +0000
ROA not before:           Fri 02 Jun 2023 20:31:40 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     150744
IP address blocks:        103.196.233.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 05 Sep 2023 04:14:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2762 (0xaca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
        Validity
            Not Before: Jun  2 20:31:40 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=647a51ac-f409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:57:e3:65:55:ee:6e:a7:59:a0:cd:74:9b:c2:
                    8e:3b:e1:93:6d:42:86:2c:b6:94:0a:24:94:33:39:
                    f1:18:e2:81:6f:9f:aa:01:bd:d5:61:f0:40:7d:f6:
                    02:3d:c2:a4:3c:8a:76:c2:19:2f:3d:b3:9b:e9:c8:
                    44:d7:da:dd:4a:a2:ab:df:8a:ce:5b:f4:46:55:53:
                    b1:5e:b7:c9:52:15:3c:9d:26:bc:cc:40:31:ba:ef:
                    1b:15:04:8c:c3:38:04:9b:12:5e:89:94:dd:c2:46:
                    34:73:0f:94:3d:2b:df:60:cd:02:05:c8:76:64:7f:
                    db:47:5c:7c:f4:47:88:91:24:8f:b7:35:80:75:4f:
                    31:71:3b:6d:c4:74:d0:bb:63:54:26:66:f5:f1:71:
                    81:bb:c8:10:67:0e:ad:bf:2d:f7:b7:be:be:b3:16:
                    4c:be:5c:82:c6:a3:29:48:50:a8:15:89:f3:f1:a9:
                    10:f7:42:a9:e6:5c:0e:8f:bb:44:31:a1:9e:b0:d2:
                    9f:80:75:74:77:4a:5f:3f:98:6f:59:8b:2e:61:09:
                    71:46:61:da:13:cc:37:c1:82:99:58:3e:78:b8:75:
                    c9:95:dd:0a:37:d9:ce:ea:39:d0:dd:50:d8:30:93:
                    0b:13:db:ca:18:1a:ca:09:05:f1:89:42:42:c6:88:
                    99:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:78:7F:3B:33:CB:B5:40:58:B1:AA:0E:EC:5D:27:1B:87:9E:4E:BE
            X509v3 Authority Key Identifier:
                keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/69445176ECA411ED8FDDC54AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:57:66:58:0f:99:e7:86:e8:5f:cd:a9:db:67:ca:2f:61:ec:
         3d:7e:29:07:cb:88:ba:5b:82:fd:86:80:88:46:1e:75:f8:2c:
         0b:2a:3e:68:7b:e9:ea:aa:96:e8:df:38:7b:6d:12:0d:8a:76:
         2b:fd:c7:0c:62:75:1f:c4:b9:05:e6:7b:d8:67:80:d2:53:e5:
         92:af:65:8f:c0:16:86:a1:53:ef:6a:44:40:68:07:43:15:5d:
         84:7c:89:a2:9d:7b:e0:3e:c3:68:a2:5e:8d:b9:dc:9f:2a:a6:
         75:c2:31:c3:b6:80:97:fb:dc:8c:36:7f:39:44:8c:c9:13:a7:
         e4:42:25:f3:eb:69:21:5e:ea:70:18:06:aa:25:cf:35:3c:a7:
         ca:48:f5:02:aa:29:79:44:4b:6a:0e:95:9b:64:26:b3:c8:ea:
         28:68:58:1c:04:14:c0:76:7d:21:4b:0e:4c:4a:66:09:22:8c:
         87:a0:08:28:4f:fd:9d:5b:55:cd:2a:3f:4a:6e:42:67:3e:36:
         b0:36:55:47:c5:11:53:1e:57:53:94:ed:f3:79:ea:30:87:e1:
         ef:fc:85:2a:8a:4b:64:7d:93:14:58:c5:8c:1b:71:85:2c:8a:
         27:d7:66:02:c0:99:67:a9:70:f9:81:0c:2c:8e:c3:bf:34:ae:
         7f:c4:89:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:51 2024 by rpki-client on console-fra.rpki-client.org