Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C1ECDA845EE11ECA5A2A35AC4F9AE02.roa
File:                     6C1ECDA845EE11ECA5A2A35AC4F9AE02.roa (raw, json)
Hash identifier:          HHsLtFRhHQy7grh8fayS1uFa/x/CvIyO3ndnGhCCLPs=
Subject key identifier:   64:51:FF:B1:FC:0D:05:37:8E:B3:C6:A8:D0:43:B5:6F:A6:FF:0A:4D
Certificate issuer:       /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial:       0426
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C1ECDA845EE11ECA5A2A35AC4F9AE02.roa
Signing time:             Sat 29 Oct 2022 01:51:26 +0000
ROA not before:           Sat 29 Oct 2022 01:51:26 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     21859
IP address blocks:        103.155.110.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1062 (0x426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
        Validity
            Not Before: Oct 29 01:51:26 2022 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=635c871e-9d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cd:70:6b:2a:60:b2:cd:71:64:68:e0:39:27:
                    3a:5c:f7:43:28:00:46:5c:1c:8f:d6:b0:c2:c2:3f:
                    04:11:96:a5:63:6b:61:ba:60:c2:d1:61:76:91:2e:
                    a4:78:9d:25:46:97:1b:82:56:d7:fc:1f:3a:af:93:
                    1c:66:9a:77:1d:dc:0c:91:f7:68:98:15:b9:5e:7e:
                    c4:fb:16:ee:9a:8b:92:a0:fa:60:68:89:bc:7a:f9:
                    10:b4:90:4a:92:8d:97:3c:4c:9d:0a:4b:2d:ea:11:
                    7a:4b:0e:94:11:4b:9f:ef:6b:71:f8:1c:37:fe:b0:
                    d3:05:f2:cd:fb:20:3a:90:1c:ab:c4:95:53:07:2e:
                    b3:e9:22:81:b9:3e:38:f4:ca:fe:4c:45:3f:10:90:
                    71:43:3f:97:8d:2a:1e:2c:f5:e7:40:26:d2:07:51:
                    3a:00:86:0f:17:a0:0f:56:0e:03:c8:e5:a9:f7:25:
                    e0:4e:61:07:d0:ef:6a:ef:0c:b0:5d:ce:b8:68:dd:
                    d1:aa:f0:a5:5c:8d:a9:a8:e2:95:d7:cb:d1:ce:54:
                    ec:d9:55:62:cf:9d:2f:0a:76:d3:33:1b:ca:02:ce:
                    6f:04:ac:72:89:52:9a:ff:14:9c:39:bf:97:ff:28:
                    d1:3c:f2:62:70:eb:85:5a:3d:58:ae:ff:2c:e2:5c:
                    f6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:51:FF:B1:FC:0D:05:37:8E:B3:C6:A8:D0:43:B5:6F:A6:FF:0A:4D
            X509v3 Authority Key Identifier:
                keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C1ECDA845EE11ECA5A2A35AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:9b:30:f9:9b:23:f1:26:69:33:44:e1:c0:ec:29:63:ce:45:
         35:d6:af:86:98:17:97:36:50:58:29:04:a6:23:e0:11:f2:01:
         fa:a2:bd:dc:c0:c4:10:6a:71:21:42:fe:40:fe:fd:d7:e7:1b:
         e9:60:3c:1a:dd:47:5c:98:80:d7:31:7e:0e:31:86:1a:d6:3f:
         52:6f:a9:5e:49:3b:74:5d:4d:b2:32:14:be:67:13:21:15:57:
         e5:73:d2:c5:cb:cd:4c:f0:8f:9c:13:72:d2:70:aa:e7:7a:69:
         38:1a:7d:cd:c5:7f:2a:63:73:f8:ad:c2:52:ff:93:bc:f7:ed:
         fd:ed:8b:cd:5c:1a:2c:05:ba:30:07:57:72:7d:78:3e:d1:00:
         66:c1:b1:50:a9:4b:c7:b1:bd:6d:86:75:bb:e7:c2:7b:bf:20:
         1b:cf:3a:01:12:84:fa:88:e1:0e:d4:0a:bf:d3:8b:7d:45:4c:
         c8:d6:14:8a:39:61:a3:33:60:7e:9e:44:94:be:55:95:3a:02:
         43:b8:d8:b2:09:63:f5:9e:4a:a4:46:80:e7:59:35:fa:15:cb:
         17:db:6d:e3:14:82:5b:cd:19:e3:18:c0:53:1f:d2:78:71:9f:
         20:db:aa:ea:56:9b:df:1b:cd:97:43:0d:48:2a:45:fb:a1:d3:
         20:cd:03:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 10:13:26 2023 by rpki-client on console-fra.rpki-client.org