Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a353a3a2f34382d3438203d3e203339353838.roa
File:                     326130323a356265303a353a3a2f34382d3438203d3e203339353838.roa (raw, json)
Hash identifier:          aKRrwCip1uWhoLlql3vrmIsthdhWk+Y8h1Uee0k1Kcg=
Subject key identifier:   C5:9D:40:18:69:2F:29:65:08:11:E8:29:5E:5C:CD:6D:30:16:C3:63
Certificate issuer:       /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial:       490786715019B3E5E0AF2A93769CD6138F6FE706
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a353a3a2f34382d3438203d3e203339353838.roa
Signing time:             Thu 17 Aug 2023 08:53:30 +0000
ROA not before:           Thu 17 Aug 2023 08:48:30 +0000
ROA not after:            Thu 15 Aug 2024 08:53:30 +0000
asID:                     39588
IP address blocks:        2a02:5be0:5::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 17 Aug 2023 10:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:07:86:71:50:19:b3:e5:e0:af:2a:93:76:9c:d6:13:8f:6f:e7:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
        Validity
            Not Before: Aug 17 08:48:30 2023 GMT
            Not After : Aug 15 08:53:30 2024 GMT
        Subject: CN=C59D4018692F29650811E8295E5CCD6D3016C363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e1:3f:26:22:36:93:e5:c7:33:38:c5:f7:fd:
                    7d:cd:cf:8d:20:3d:f7:cd:53:d2:7c:00:c3:45:c4:
                    12:db:a4:0b:1f:7c:c6:f6:ec:e4:40:5d:3c:ee:e6:
                    5e:92:71:f4:be:37:ff:a0:de:a6:bb:81:4d:05:51:
                    f7:89:74:e1:53:6d:91:43:4e:c3:e1:df:7e:db:ae:
                    19:ef:b9:12:39:71:7c:dd:a2:fb:a4:4c:ed:f1:c9:
                    72:71:97:86:1e:9d:57:70:eb:c1:c2:22:03:b0:2a:
                    8a:5a:be:88:0d:73:81:52:f7:72:80:2a:7d:f6:e0:
                    23:9a:2a:95:94:fc:9e:d3:6c:74:ff:52:1c:61:b0:
                    74:fe:e9:c2:28:4c:8f:8f:52:3d:b6:85:8f:1e:a4:
                    d0:15:82:6d:f6:bc:2f:00:eb:b5:0e:92:cc:a6:b0:
                    e0:75:3c:a1:fe:21:0b:ea:0e:67:be:f9:d3:fb:5a:
                    6b:d1:4e:e3:e4:7f:c1:4e:45:14:61:14:4e:01:dd:
                    d3:6a:5d:23:37:39:79:8a:86:21:89:4f:33:e4:f6:
                    92:27:1b:9d:79:84:1d:83:aa:3d:30:ed:f2:8d:73:
                    92:83:c1:a5:90:45:19:a7:3e:85:05:ed:d4:3b:35:
                    9c:61:68:ac:16:10:3c:75:8b:63:d1:94:3d:87:09:
                    d7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9D:40:18:69:2F:29:65:08:11:E8:29:5E:5C:CD:6D:30:16:C3:63
            X509v3 Authority Key Identifier:
                keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a353a3a2f34382d3438203d3e203339353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:5be0:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:e8:f8:0d:59:b1:84:9e:4b:b8:3a:00:ff:fe:bc:bb:1c:63:
         e2:da:e8:ed:ef:49:fd:a7:4f:74:21:c2:09:59:98:88:55:f7:
         b7:a5:33:8f:54:13:13:90:68:f3:c0:ed:9e:3e:ed:e8:a3:83:
         3a:fb:6c:11:d4:e3:ed:23:58:04:ff:22:30:22:b3:a5:cc:4d:
         44:ea:50:a5:19:26:a2:83:50:22:d5:06:ac:02:f0:4c:85:5b:
         cf:61:ac:a1:a8:27:6d:18:59:a2:cc:c8:58:b6:8b:a9:26:c8:
         a1:fb:28:8e:9e:37:5a:39:de:b5:7c:75:a3:72:d8:92:fa:89:
         7e:f7:ed:67:24:f9:6b:05:e6:e4:5e:b5:77:6f:be:4a:3f:30:
         ba:30:20:c2:58:a8:19:b8:f4:3d:ba:10:cc:1d:6f:2a:08:14:
         f0:10:f4:82:77:13:76:97:a9:b2:0e:62:ef:6f:3d:50:0f:14:
         9a:4b:a9:5c:3d:ee:5f:5d:2d:ff:e5:31:e3:ab:36:43:86:0c:
         ce:4f:0f:b8:4e:91:06:86:b9:37:1a:43:2b:55:e2:b3:73:59:
         6d:1e:ef:c5:1e:95:43:1c:b1:7d:03:f3:3b:b3:1e:15:88:94:
         16:40:df:69:62:4c:80:f1:84:8a:e2:1a:64:b3:69:a1:ee:34:
         f8:be:44:66
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgIUSQeGcVAZs+XgryqTdpzWE49v5wYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWVhZDEwYmU3ZWMyOTUzMzZlNGI1NjgwZTBkMzkzYjY3
N2MzNjQ5YTAeFw0yMzA4MTcwODQ4MzBaFw0yNDA4MTUwODUzMzBaMDMxMTAvBgNV
BAMTKEM1OUQ0MDE4NjkyRjI5NjUwODExRTgyOTVFNUNDRDZEMzAxNkMzNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd4T8mIjaT5cczOMX3/X3Nz40g
PffNU9J8AMNFxBLbpAsffMb27ORAXTzu5l6ScfS+N/+g3qa7gU0FUfeJdOFTbZFD
TsPh337brhnvuRI5cXzdovukTO3xyXJxl4YenVdw68HCIgOwKopavogNc4FS93KA
Kn324COaKpWU/J7TbHT/UhxhsHT+6cIoTI+PUj22hY8epNAVgm32vC8A67UOksym
sOB1PKH+IQvqDme++dP7WmvRTuPkf8FORRRhFE4B3dNqXSM3OXmKhiGJTzPk9pIn
G515hB2Dqj0w7fKNc5KDwaWQRRmnPoUF7dQ7NZxhaKwWEDx1i2PRlD2HCdfLAgMB
AAGjggH9MIIB+TAdBgNVHQ4EFgQUxZ1AGGkvKWUIEegpXlzNbTAWw2MwHwYDVR0j
BBgwFoAUXq0Qvn7ClTNuS1aA4NOTtnfDZJowDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzMvNUVBRDEwQkU3RUMyOTUzMzZFNEI1NjgwRTBEMzkz
QjY3N0MzNjQ5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3lu
YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hxMFF2bjdDbFRO
dVMxYUE0Tk9UdG5mRFpKby5jZXIwgY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUH
MAuGcXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTJB
OTgwMDAwLzMvMzI2MTMwMzIzYTM1NjI2NTMwM2EzNTNhM2EyZjM0MzgyZDM0Mzgy
MDNkM2UyMDMzMzkzNTM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqAlvgAAUwDQYJKoZIhvcNAQEL
BQADggEBACXo+A1ZsYSeS7g6AP/+vLscY+La6O3vSf2nT3QhwglZmIhV97elM49U
ExOQaPPA7Z4+7eijgzr7bBHU4+0jWAT/IjAis6XMTUTqUKUZJqKDUCLVBqwC8EyF
W89hrKGoJ20YWaLMyFi2i6kmyKH7KI6eN1o53rV8daNy2JL6iX737Wck+WsF5uRe
tXdvvko/MLowIMJYqBm49D26EMwdbyoIFPAQ9IJ3E3aXqbIOYu9vPVAPFJpLqVw9
7l9dLf/lMeOrNkOGDM5PD7hOkQaGuTcaQytV4rNzWW0e78UelUMcsX0D8zuzHhWI
lBZA32liTIDxhIriGmSzaaHuNPi+RGY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org