Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a353a3a2f34382d3438203d3e203136353039.roa
File:                     326130323a356265303a353a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          Kw4oxYnrf+iiCAk7r5xHvbq8PyBVba6OzWCGlsIjcz4=
Subject key identifier:   4D:BE:F2:FE:27:EB:A6:15:82:00:3F:5A:A5:2C:FD:6E:AA:B3:6E:64
Certificate issuer:       /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial:       716581F30B4DF0A7487DC577A615FC086A30037F
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a353a3a2f34382d3438203d3e203136353039.roa
Signing time:             Thu 17 Aug 2023 08:53:40 +0000
ROA not before:           Thu 17 Aug 2023 08:48:40 +0000
ROA not after:            Thu 15 Aug 2024 08:53:40 +0000
asID:                     16509
IP address blocks:        2a02:5be0:5::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 17 Aug 2023 10:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:65:81:f3:0b:4d:f0:a7:48:7d:c5:77:a6:15:fc:08:6a:30:03:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
        Validity
            Not Before: Aug 17 08:48:40 2023 GMT
            Not After : Aug 15 08:53:40 2024 GMT
        Subject: CN=4DBEF2FE27EBA61582003F5AA52CFD6EAAB36E64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6a:a2:6e:c8:f8:f0:ba:2b:09:2a:c6:44:f6:
                    9a:11:f8:95:19:26:8e:d9:c7:d3:b8:71:75:45:c6:
                    57:b7:fc:67:86:90:68:e2:ac:80:e6:ac:44:3c:09:
                    fe:56:77:bb:1f:b1:1c:4d:18:d7:c0:0a:1e:f5:a8:
                    bc:1a:76:0e:ef:b8:64:2b:39:a9:c2:d6:6d:d5:d5:
                    2d:ae:f6:27:e0:39:3f:ad:18:e0:04:4b:c8:85:e6:
                    3b:3e:2a:85:b3:34:4b:97:01:d4:76:0e:58:bf:56:
                    f4:b7:60:a8:40:3b:6d:34:1b:33:ba:e1:82:1e:85:
                    5e:87:9a:98:e7:68:4b:9c:62:40:d8:93:b6:7f:2c:
                    e6:3f:0f:cb:66:b1:36:9f:51:e6:37:9f:9d:46:c3:
                    6a:49:aa:ea:30:c5:03:4d:ed:5e:26:b4:7c:8e:db:
                    94:60:83:69:71:09:eb:38:f9:cb:67:e5:60:86:96:
                    24:c3:a8:1c:f5:83:f2:be:f7:26:cf:f8:c7:fa:86:
                    c6:a7:41:dc:92:9e:0e:be:d7:35:dc:83:cd:be:9f:
                    32:64:50:9c:1c:81:31:c8:80:06:c2:6b:3c:54:45:
                    a4:0e:b4:64:b3:1d:8f:02:33:ca:70:e4:89:54:c6:
                    8b:be:fd:80:de:c3:9e:3e:f7:8f:d6:9b:2f:12:26:
                    02:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BE:F2:FE:27:EB:A6:15:82:00:3F:5A:A5:2C:FD:6E:AA:B3:6E:64
            X509v3 Authority Key Identifier:
                keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a353a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:5be0:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:0b:5e:a0:af:e5:93:c0:07:7f:4f:65:f9:e2:3c:4b:38:43:
         62:ce:1d:59:d4:ed:b7:26:3a:46:95:01:40:cb:ad:41:95:8b:
         36:0b:6c:80:0f:9f:67:b1:d4:c9:cc:8c:86:0f:0c:31:b0:1c:
         c7:14:08:f4:ac:64:27:ce:88:6d:28:d5:f4:72:2b:4a:02:3c:
         5c:60:30:86:f8:33:6a:0e:67:df:92:53:37:2d:5a:22:ff:c4:
         63:8e:20:ce:04:b0:3a:8d:42:d7:b5:7c:c6:a3:96:6c:7a:df:
         82:77:f1:e2:75:96:12:3c:d9:4c:1b:f6:1f:50:9e:05:04:35:
         1b:2f:98:32:a3:c1:8f:b9:23:81:fc:a9:4c:e1:cf:b2:4b:43:
         cc:7b:34:93:f5:c3:34:bb:91:eb:f1:b0:36:d7:3e:82:59:c3:
         5f:78:4d:98:43:f1:db:6d:11:84:04:b9:86:cb:be:ce:fa:c1:
         79:cf:cd:26:c7:81:10:81:ca:4d:59:21:ef:97:b9:bf:ec:af:
         10:6a:c8:b5:b0:12:27:c5:1a:c7:07:e0:3a:71:da:11:c6:eb:
         8a:4b:e7:b6:56:e6:1b:fd:eb:6c:74:a5:86:22:40:df:c2:76:
         30:8f:cc:dc:72:ba:30:da:ba:89:e7:a8:ec:1f:0e:3b:65:30:
         0e:81:a3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org