Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/42399FB660DD11EEA43D833BC4F9AE02.roa
File:                     42399FB660DD11EEA43D833BC4F9AE02.roa (raw, json)
Hash identifier:          Yu0bwWfA/VCVWWg+BIxkyGaJP88poITerrM2PMbgcGc=
Subject key identifier:   00:E9:8E:96:87:A7:BD:F5:7F:21:7A:79:87:AE:C4:F0:74:FC:EF:12
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       34C0
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/42399FB660DD11EEA43D833BC4F9AE02.roa
Signing time:             Mon 02 Oct 2023 04:38:49 +0000
ROA not before:           Mon 02 Oct 2023 04:38:49 +0000
ROA not after:            Wed 31 Jan 2024 00:00:00 +0000
asID:                     131090
IP address blocks:        61.7.128.0/24 maxlen: 24
                          61.7.129.0/24 maxlen: 24
                          61.7.130.0/24 maxlen: 24
                          61.7.131.0/24 maxlen: 24
                          61.7.132.0/24 maxlen: 24
                          61.7.133.0/24 maxlen: 24
                          61.7.134.0/24 maxlen: 24
                          61.7.135.0/24 maxlen: 24
                          61.7.136.0/24 maxlen: 24
                          61.7.137.0/24 maxlen: 24
                          61.7.138.0/24 maxlen: 24
                          61.7.139.0/24 maxlen: 24
                          61.7.140.0/24 maxlen: 24
                          61.7.141.0/24 maxlen: 24
                          61.7.142.0/23 maxlen: 23
                          61.7.142.0/24 maxlen: 24
                          61.7.143.0/24 maxlen: 24
                          61.7.144.0/20 maxlen: 24
                          61.7.160.0/21 maxlen: 24
                          61.7.168.0/24 maxlen: 24
                          61.7.169.0/24 maxlen: 24
                          61.7.170.0/24 maxlen: 24
                          61.7.171.0/24 maxlen: 24
                          61.7.172.0/24 maxlen: 24
                          61.7.173.0/24 maxlen: 24
                          61.7.174.0/24 maxlen: 24
                          61.7.175.0/24 maxlen: 24
                          61.7.176.0/24 maxlen: 24
                          61.7.177.0/24 maxlen: 24
                          61.7.178.0/24 maxlen: 24
                          61.7.179.0/24 maxlen: 24
                          61.7.180.0/24 maxlen: 24
                          61.7.181.0/24 maxlen: 24
                          61.7.182.0/24 maxlen: 24
                          61.7.183.0/24 maxlen: 24
                          61.7.184.0/24 maxlen: 24
                          61.7.185.0/24 maxlen: 24
                          61.7.186.0/24 maxlen: 24
                          61.7.187.0/24 maxlen: 24
                          61.7.188.0/24 maxlen: 24
                          61.7.189.0/24 maxlen: 24
                          61.7.190.0/24 maxlen: 24
                          61.7.191.0/24 maxlen: 24
                          103.10.228.0/22 maxlen: 22
                          103.10.228.0/24 maxlen: 24
                          103.10.229.0/24 maxlen: 24
                          103.10.230.0/24 maxlen: 24
                          103.10.231.0/24 maxlen: 24
                          110.77.128.0/17 maxlen: 24
                          110.78.128.0/21 maxlen: 24
                          110.78.136.0/24 maxlen: 24
                          110.78.137.0/24 maxlen: 24
                          110.78.138.0/24 maxlen: 24
                          110.78.139.0/24 maxlen: 24
                          110.78.140.0/24 maxlen: 24
                          110.78.141.0/24 maxlen: 24
                          110.78.142.0/24 maxlen: 24
                          110.78.143.0/24 maxlen: 24
                          110.78.144.0/24 maxlen: 24
                          110.78.145.0/24 maxlen: 24
                          110.78.146.0/24 maxlen: 24
                          110.78.147.0/24 maxlen: 24
                          110.78.148.0/24 maxlen: 24
                          110.78.149.0/24 maxlen: 24
                          110.78.150.0/24 maxlen: 24
                          110.78.151.0/24 maxlen: 24
                          110.78.152.0/24 maxlen: 24
                          110.78.153.0/24 maxlen: 24
                          110.78.154.0/24 maxlen: 24
                          110.78.155.0/24 maxlen: 24
                          110.78.156.0/24 maxlen: 24
                          110.78.157.0/24 maxlen: 24
                          110.78.158.0/24 maxlen: 24
                          110.78.159.0/24 maxlen: 24
                          110.78.160.0/21 maxlen: 21
                          110.78.160.0/24 maxlen: 24
                          110.78.161.0/24 maxlen: 24
                          110.78.162.0/24 maxlen: 24
                          110.78.163.0/24 maxlen: 24
                          110.78.164.0/24 maxlen: 24
                          110.78.165.0/24 maxlen: 24
                          110.78.166.0/24 maxlen: 24
                          110.78.167.0/24 maxlen: 24
                          110.78.168.0/24 maxlen: 24
                          110.78.169.0/24 maxlen: 24
                          110.78.170.0/24 maxlen: 24
                          110.78.171.0/24 maxlen: 24
                          110.78.172.0/24 maxlen: 24
                          110.78.173.0/24 maxlen: 24
                          110.78.174.0/24 maxlen: 24
                          110.78.175.0/24 maxlen: 24
                          110.78.176.0/24 maxlen: 24
                          110.78.177.0/24 maxlen: 24
                          110.78.178.0/24 maxlen: 24
                          110.78.179.0/24 maxlen: 24
                          110.78.180.0/24 maxlen: 24
                          110.78.181.0/24 maxlen: 24
                          110.78.182.0/24 maxlen: 24
                          110.78.183.0/24 maxlen: 24
                          110.78.184.0/24 maxlen: 24
                          110.78.185.0/24 maxlen: 24
                          110.78.186.0/24 maxlen: 24
                          110.78.187.0/24 maxlen: 24
                          110.78.188.0/24 maxlen: 24
                          110.78.189.0/24 maxlen: 24
                          110.78.190.0/24 maxlen: 24
                          110.78.191.0/24 maxlen: 24
                          116.58.224.0/24 maxlen: 24
                          116.58.225.0/24 maxlen: 24
                          116.58.226.0/24 maxlen: 24
                          116.58.227.0/24 maxlen: 24
                          116.58.228.0/24 maxlen: 24
                          116.58.229.0/24 maxlen: 24
                          116.58.230.0/24 maxlen: 24
                          116.58.231.0/24 maxlen: 24
                          116.58.232.0/24 maxlen: 24
                          116.58.233.0/24 maxlen: 24
                          116.58.234.0/24 maxlen: 24
                          116.58.235.0/24 maxlen: 24
                          116.58.236.0/24 maxlen: 24
                          116.58.237.0/24 maxlen: 24
                          116.58.238.0/24 maxlen: 24
                          116.58.239.0/24 maxlen: 24
                          116.58.240.0/24 maxlen: 24
                          116.58.241.0/24 maxlen: 24
                          116.58.242.0/24 maxlen: 24
                          116.58.243.0/24 maxlen: 24
                          116.58.244.0/24 maxlen: 24
                          116.58.245.0/24 maxlen: 24
                          116.58.246.0/24 maxlen: 24
                          116.58.247.0/24 maxlen: 24
                          116.58.248.0/24 maxlen: 24
                          116.58.249.0/24 maxlen: 24
                          116.58.250.0/24 maxlen: 24
                          116.58.251.0/24 maxlen: 24
                          116.58.252.0/24 maxlen: 24
                          116.58.253.0/24 maxlen: 24
                          116.58.254.0/24 maxlen: 24
                          116.58.255.0/24 maxlen: 24
                          119.42.64.0/24 maxlen: 24
                          119.42.65.0/24 maxlen: 24
                          119.42.66.0/24 maxlen: 24
                          119.42.67.0/24 maxlen: 24
                          119.42.68.0/24 maxlen: 24
                          119.42.69.0/24 maxlen: 24
                          119.42.70.0/24 maxlen: 24
                          119.42.71.0/24 maxlen: 24
                          119.42.72.0/24 maxlen: 24
                          119.42.73.0/24 maxlen: 24
                          119.42.74.0/24 maxlen: 24
                          119.42.75.0/24 maxlen: 24
                          119.42.76.0/24 maxlen: 24
                          119.42.77.0/24 maxlen: 24
                          119.42.78.0/24 maxlen: 24
                          119.42.79.0/24 maxlen: 24
                          119.42.80.0/24 maxlen: 24
                          119.42.81.0/24 maxlen: 24
                          119.42.82.0/24 maxlen: 24
                          119.42.83.0/24 maxlen: 24
                          119.42.84.0/24 maxlen: 24
                          119.42.85.0/24 maxlen: 24
                          119.42.86.0/24 maxlen: 24
                          119.42.87.0/24 maxlen: 24
                          119.42.88.0/24 maxlen: 24
                          119.42.89.0/24 maxlen: 24
                          119.42.90.0/24 maxlen: 24
                          119.42.91.0/24 maxlen: 24
                          119.42.92.0/24 maxlen: 24
                          119.42.93.0/24 maxlen: 24
                          119.42.94.0/24 maxlen: 24
                          119.42.95.0/24 maxlen: 24
                          119.42.96.0/24 maxlen: 24
                          119.42.97.0/24 maxlen: 24
                          119.42.98.0/24 maxlen: 24
                          119.42.99.0/24 maxlen: 24
                          119.42.100.0/24 maxlen: 24
                          119.42.101.0/24 maxlen: 24
                          119.42.102.0/24 maxlen: 24
                          119.42.103.0/24 maxlen: 24
                          119.42.104.0/24 maxlen: 24
                          119.42.105.0/24 maxlen: 24
                          119.42.106.0/24 maxlen: 24
                          119.42.107.0/24 maxlen: 24
                          119.42.108.0/24 maxlen: 24
                          119.42.109.0/24 maxlen: 24
                          119.42.110.0/24 maxlen: 24
                          119.42.111.0/24 maxlen: 24
                          119.42.112.0/24 maxlen: 24
                          119.42.113.0/24 maxlen: 24
                          119.42.114.0/24 maxlen: 24
                          119.42.115.0/24 maxlen: 24
                          119.42.116.0/24 maxlen: 24
                          119.42.117.0/24 maxlen: 24
                          119.42.118.0/24 maxlen: 24
                          119.42.119.0/24 maxlen: 24
                          119.42.120.0/24 maxlen: 24
                          119.42.121.0/24 maxlen: 24
                          119.42.122.0/24 maxlen: 24
                          119.42.123.0/24 maxlen: 24
                          119.42.124.0/24 maxlen: 24
                          119.42.125.0/24 maxlen: 24
                          119.42.126.0/24 maxlen: 24
                          119.42.127.0/24 maxlen: 24
                          2001:c38:b000::/36 maxlen: 36
                          2001:c38:b010::/47 maxlen: 47

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13504 (0x34c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
        Validity
            Not Before: Oct  2 04:38:49 2023 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=651a4959-be64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:da:02:24:bc:6f:f6:b3:9f:62:64:b7:18:
                    6e:cb:ca:0c:be:7d:35:04:28:ca:d4:d3:4f:a3:d4:
                    2f:be:22:92:cd:22:66:6c:ec:fa:33:f0:9b:61:d2:
                    ed:1c:39:54:89:ca:75:a4:15:7c:dc:a4:d8:99:f5:
                    74:7e:33:8d:3f:eb:98:40:ab:4a:ac:3d:e2:a8:64:
                    8d:f3:97:65:79:f8:9f:17:33:8e:42:47:b5:ef:55:
                    ed:8b:95:af:2f:66:8d:a5:42:4a:be:d2:10:0f:b6:
                    a7:b6:ed:05:a6:dc:35:81:b3:59:2f:76:5a:ee:3e:
                    5b:85:99:6a:f6:74:40:b3:27:37:f3:3e:05:ff:4d:
                    a9:17:44:30:da:1d:5d:34:9d:5e:e1:e7:51:2c:67:
                    ac:c6:e6:08:48:a5:48:ca:93:2e:d8:35:0b:ff:f1:
                    0f:25:38:15:e5:79:7f:ba:5a:39:db:5a:c0:7e:57:
                    e8:86:9c:9b:54:30:c7:ac:e4:89:be:c3:4b:a3:ee:
                    57:89:34:1c:0d:bb:d2:38:dc:94:e5:63:c0:0a:06:
                    3c:60:4b:55:39:33:4f:98:d5:a2:ee:80:77:4e:c9:
                    82:f1:4d:13:8a:d4:7d:5d:25:6f:84:a6:38:d6:79:
                    8e:1a:ea:62:ae:89:3d:82:a4:e5:f8:eb:c4:1c:9c:
                    41:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E9:8E:96:87:A7:BD:F5:7F:21:7A:79:87:AE:C4:F0:74:FC:EF:12
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/42399FB660DD11EEA43D833BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.7.128.0/18
                  103.10.228.0/22
                  110.77.128.0/17
                  110.78.128.0/18
                  116.58.224.0/19
                  119.42.64.0/18
                IPv6:
                  2001:c38:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9d:9c:6e:0a:14:4b:ff:8f:8f:4f:c4:53:9d:63:67:98:0b:83:
         6d:67:2b:da:30:c1:31:78:ac:fc:2e:26:26:20:1f:1e:49:8b:
         2f:40:c5:7e:db:8d:96:3c:1e:bb:17:79:3f:fa:41:80:7c:0d:
         74:21:c5:db:f4:ea:17:47:0e:f2:2b:62:ac:59:a4:de:ce:f2:
         78:24:10:4c:4c:ec:5d:d1:d0:0b:e4:a1:dd:04:b4:5a:da:fb:
         0a:a2:b7:8b:74:81:0e:c7:41:5c:ef:79:6e:06:9d:d9:c9:08:
         0a:fc:05:73:b7:fb:51:b7:a2:7c:8c:2c:40:13:08:d0:67:b4:
         86:38:0c:af:32:4f:c1:39:8e:a7:ac:ec:6c:3a:14:05:4e:b2:
         37:db:c1:b3:71:07:ee:49:ae:9f:4d:a4:f1:e6:03:ed:4c:60:
         cd:56:2d:09:3b:f1:b1:9d:71:af:e6:8d:ea:57:b4:f7:7f:12:
         9a:28:cd:91:fd:85:a7:02:08:91:f9:8c:4f:44:be:c4:01:74:
         bf:f5:d5:0d:4e:74:44:8f:40:65:f6:47:a0:17:83:78:b6:76:
         1e:ee:3d:28:b6:65:73:0b:29:15:15:1b:a6:c2:7b:5a:20:8f:
         62:b2:21:7a:1f:f6:42:bd:c4:fd:bc:f2:b0:c4:18:d8:b5:de:
         91:d3:4f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 08:01:30 2023 by rpki-client on console-fra.rpki-client.org