Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a353a3a2f34382d3438203d3e203134363138.roa
File:                     326130323a356265303a353a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          Hbs9ZoUBaRzFCKj1YU1WnknrcsT+Mh4nS75jvAX67KQ=
Subject key identifier:   61:FF:9B:D2:F0:06:C1:3E:40:42:05:53:45:21:FD:6B:46:64:5E:42
Certificate issuer:       /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial:       0EB6259CC6CDB0FCE163ECFAEA790871711CDE17
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a353a3a2f34382d3438203d3e203134363138.roa
Signing time:             Thu 17 Aug 2023 08:53:51 +0000
ROA not before:           Thu 17 Aug 2023 08:48:51 +0000
ROA not after:            Thu 15 Aug 2024 08:53:51 +0000
asID:                     14618
IP address blocks:        2a02:5be0:5::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 17 Aug 2023 10:07:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b6:25:9c:c6:cd:b0:fc:e1:63:ec:fa:ea:79:08:71:71:1c:de:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
        Validity
            Not Before: Aug 17 08:48:51 2023 GMT
            Not After : Aug 15 08:53:51 2024 GMT
        Subject: CN=61FF9BD2F006C13E404205534521FD6B46645E42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:5b:c7:4c:7b:f2:2d:d0:fa:81:8a:58:67:
                    7a:fe:c5:5f:89:d3:d1:59:2f:81:3d:73:d7:b2:c2:
                    78:5b:9a:9d:95:dd:88:13:f8:b3:86:3f:56:cb:ef:
                    f4:75:8f:71:25:63:97:ff:ee:6f:f1:29:0b:f7:91:
                    a1:43:b0:89:80:b3:69:29:33:3d:3f:34:43:ab:ad:
                    30:13:f0:31:a3:5a:41:9a:d0:4c:e1:ec:b1:d0:81:
                    69:53:b0:a7:81:a5:46:0e:9c:29:5d:6e:14:b9:96:
                    f1:f8:e0:f2:14:cb:fe:ca:c4:08:7e:02:52:b5:74:
                    ac:2f:87:ad:ec:c5:6d:9b:88:70:e1:e7:56:b7:86:
                    c2:ae:d0:8b:45:2a:e8:d9:f8:f4:26:83:85:a6:d2:
                    93:ec:e9:25:31:6c:3c:0f:58:26:40:54:65:89:4d:
                    4b:9b:db:95:27:17:c8:87:b6:fb:05:18:82:d8:5b:
                    f5:7c:5d:12:6c:17:3d:2c:00:3d:9a:7f:81:92:55:
                    14:85:a3:29:91:db:fb:bc:90:4a:45:80:d2:79:6c:
                    93:00:8a:ed:27:55:54:63:fb:33:47:f8:d5:9a:5b:
                    71:22:2d:a6:68:63:5f:b0:89:e7:02:a3:7a:4e:eb:
                    fa:6a:4a:d8:ed:4b:47:29:03:1f:c0:2a:1d:98:65:
                    3f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FF:9B:D2:F0:06:C1:3E:40:42:05:53:45:21:FD:6B:46:64:5E:42
            X509v3 Authority Key Identifier:
                keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a353a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:5be0:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:4d:3f:56:d0:be:03:71:84:11:38:e7:90:49:66:30:15:00:
         d3:e9:de:8c:24:48:b4:c5:6a:4d:fe:8f:67:7a:7e:69:a8:b5:
         d8:c9:ad:83:d1:47:b7:d9:4f:3c:cd:c0:a3:1a:63:57:ff:84:
         43:b0:2d:1d:bd:05:1f:ef:1d:09:78:fa:7b:89:06:17:a8:01:
         31:6e:07:3e:5a:10:93:97:b9:76:79:12:e6:58:c8:54:b4:0a:
         21:ed:1b:58:7a:35:3d:91:bd:84:9b:4c:39:16:aa:f9:e0:ae:
         38:a7:8d:e6:c3:43:1b:a2:1d:12:64:a2:df:8d:98:69:79:3e:
         cc:7f:39:10:4b:f3:63:af:68:0f:83:a1:c5:0e:49:86:a2:64:
         17:fb:08:e2:4f:43:4c:bc:90:5d:1c:a6:97:2f:aa:ee:25:91:
         8c:3f:8f:05:ff:cd:ac:71:17:67:31:16:ef:f5:9a:07:b7:ef:
         57:7d:8c:2a:95:83:9c:05:f9:d2:49:a1:9d:2e:07:49:07:3a:
         a7:6d:37:54:45:51:55:9c:e4:10:16:5d:3e:50:38:db:bd:23:
         e5:ad:05:3e:04:44:f3:29:5d:1f:1c:bb:41:ee:60:9d:7f:c7:
         ea:6a:b3:2d:7f:e8:c5:1f:8c:d8:e8:e7:88:a5:86:cd:f9:cf:
         17:12:22:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:51 2024 by rpki-client on console-ams.rpki-client.org