Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/B4E99EB04ADC11EE9154D945C4F9AE02.roa
File:                     B4E99EB04ADC11EE9154D945C4F9AE02.roa (raw, json)
Hash identifier:          uwsyQuKkPUUrVxbS4AjNCS1eGvymdNxtdo/pmhsXZ4k=
Subject key identifier:   75:AB:8E:EE:81:CF:1D:9D:2E:E4:4C:07:3A:BB:89:23:C5:4B:3C:87
Certificate issuer:       /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial:       04C8
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/B4E99EB04ADC11EE9154D945C4F9AE02.roa
Signing time:             Tue 05 Sep 2023 12:54:57 +0000
ROA not before:           Tue 05 Sep 2023 12:54:57 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     834
IP address blocks:        43.254.167.0/24 maxlen: 24
                          43.255.121.0/24 maxlen: 24
                          43.255.122.0/23 maxlen: 24
                          43.255.156.0/24 maxlen: 24
                          103.24.216.0/23 maxlen: 24
                          103.231.58.0/23 maxlen: 24
                          103.240.198.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 07 Sep 2023 04:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1224 (0x4c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
        Validity
            Not Before: Sep  5 12:54:57 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64f72521-e176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:c0:17:6a:5e:8e:30:c5:0d:03:1a:f7:ee:
                    5c:8d:46:76:69:bd:83:c7:37:af:3e:68:5d:b1:99:
                    17:d3:2a:1f:db:4e:fb:f1:1e:23:aa:7f:cc:b2:f1:
                    7d:2f:4c:b5:d4:10:d7:0d:04:ce:89:98:f3:17:67:
                    0d:06:b1:1f:7a:38:95:ea:1f:19:32:65:89:35:31:
                    a0:9d:95:f4:c1:f6:22:6f:c4:0e:1a:30:d0:47:37:
                    5b:20:96:f2:b7:72:d0:98:37:27:61:05:df:10:02:
                    17:77:a6:6a:6d:17:e5:c1:9b:d4:d8:08:c2:08:6d:
                    59:21:99:29:7d:86:2d:39:df:5a:ce:e5:d2:0a:35:
                    b6:be:1c:d9:6c:e1:2c:ab:a6:ee:f7:3d:47:2a:68:
                    2c:b2:8a:34:ea:8b:6b:fa:04:04:de:39:d4:74:1e:
                    3a:e2:8b:e5:55:a3:76:e6:5f:84:56:b3:47:23:ee:
                    89:8a:58:90:45:39:6b:b1:4f:43:90:ae:83:7c:8c:
                    7b:1c:bc:ea:cf:fa:4e:55:43:84:86:8d:7e:2d:1c:
                    8e:8a:50:2f:33:71:87:31:e6:22:0e:a1:9a:ab:95:
                    63:85:58:d7:5f:04:b0:79:24:bc:95:84:04:e0:94:
                    0d:48:21:fd:ee:43:fe:99:95:4a:bd:a7:77:96:7f:
                    8b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AB:8E:EE:81:CF:1D:9D:2E:E4:4C:07:3A:BB:89:23:C5:4B:3C:87
            X509v3 Authority Key Identifier:
                keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/B4E99EB04ADC11EE9154D945C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.167.0/24
                  43.255.121.0-43.255.123.255
                  43.255.156.0/24
                  103.24.216.0/23
                  103.231.58.0/23
                  103.240.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:c7:cc:1c:e7:a3:12:ee:15:f4:c7:4f:28:36:a1:f3:5b:5d:
         a7:19:c6:bf:d3:96:49:2c:70:d3:a3:e0:d4:ff:a7:19:b4:05:
         ec:38:ef:4a:bf:10:0d:38:24:ef:a2:61:5a:58:71:89:1c:57:
         1c:a7:b8:53:fa:ba:94:93:95:e8:05:95:e3:23:bf:31:a5:b7:
         d5:b5:95:f5:7c:eb:8a:49:63:96:f7:3c:8e:e7:fa:53:14:8e:
         e8:25:f8:ac:c5:6b:3a:a8:17:66:6a:7d:57:0a:5b:6b:c9:13:
         00:a0:a8:c0:ab:6c:94:f5:3c:d7:91:fe:b5:dc:d1:99:20:36:
         e4:50:6f:2a:72:54:55:18:b5:8e:0a:65:35:90:24:52:78:1b:
         44:cd:49:e6:a0:f2:fe:2e:d2:76:bc:58:0b:46:b4:31:7c:f5:
         9f:6c:ac:fd:a9:61:bb:d1:73:9d:58:4b:b4:d5:0f:19:d5:20:
         87:62:b8:7c:d7:58:ec:5b:0d:6a:09:57:18:31:47:b2:38:13:
         61:fa:5e:06:31:81:cc:bd:65:8c:d4:d0:f1:2d:6e:9b:c2:01:
         34:43:7e:18:ec:a3:0f:40:1d:e7:22:f3:a1:ee:49:8c:1d:a8:
         7b:a8:e5:35:37:01:1d:b9:75:f8:0d:39:ae:c4:60:20:1b:37:
         4b:76:c8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:02 2024 by rpki-client on console-fra.rpki-client.org