Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/EE689902640411EE9439EC14C4F9AE02.roa
File:                     EE689902640411EE9439EC14C4F9AE02.roa (raw, json)
Hash identifier:          6HN7F/aQU4+MNeipvocfbpIjL1Z7JCcMhZt9J+91Tjg=
Subject key identifier:   C7:18:6C:BC:4B:7B:86:17:C7:7A:09:6E:F8:39:57:09:FE:AB:D3:74
Certificate issuer:       /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial:       BC
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/EE689902640411EE9439EC14C4F9AE02.roa
Signing time:             Fri 06 Oct 2023 04:58:04 +0000
ROA not before:           Fri 06 Oct 2023 04:58:04 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     400377
IP address blocks:        103.230.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
        Validity
            Not Before: Oct  6 04:58:04 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=651f93dc-20a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fa:89:2e:82:32:b8:17:97:e8:38:36:cc:c7:
                    41:d6:6c:97:f0:6c:35:3a:4b:48:fa:15:35:75:90:
                    b2:2c:2e:a5:c0:fa:4c:52:9d:2b:d9:99:79:2a:d3:
                    90:8b:bf:56:a6:1a:0e:3d:ce:a8:17:c6:e7:43:a2:
                    f4:cd:c6:3f:6b:f1:00:eb:9e:bc:a9:a4:33:e3:0e:
                    cc:fd:93:82:4a:2c:a4:79:33:66:17:29:51:78:b9:
                    4d:21:cc:81:3e:51:4d:4a:4b:eb:bb:a0:9d:23:12:
                    0a:6d:ad:b5:07:3e:51:fc:22:a2:2c:ba:47:e6:a3:
                    bb:f7:e5:a8:89:74:1e:5d:6f:1f:8c:6f:15:90:a1:
                    41:91:bb:a6:63:9c:ea:67:97:a5:6f:1d:68:11:b1:
                    de:13:e7:79:67:c7:fa:ad:4f:93:35:72:35:21:55:
                    cb:55:d7:01:a1:31:f1:bf:33:38:c1:59:03:ac:df:
                    c0:04:aa:ec:43:fd:fb:f2:dd:0d:d3:cf:a6:3a:d4:
                    fc:a3:dc:d9:ca:dd:52:6f:a2:77:a2:8e:ec:80:08:
                    11:d2:a1:b5:b6:1e:f1:05:99:7b:ca:b2:99:a8:29:
                    ec:d8:43:95:01:d5:70:70:a4:55:55:6d:f5:9f:40:
                    4d:e7:f3:54:20:e4:62:7c:6a:5b:66:12:73:da:dd:
                    2d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:18:6C:BC:4B:7B:86:17:C7:7A:09:6E:F8:39:57:09:FE:AB:D3:74
            X509v3 Authority Key Identifier:
                keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/EE689902640411EE9439EC14C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:f5:e9:ca:e0:1e:71:d5:55:82:ad:52:cb:03:98:37:86:61:
         e3:bd:29:8c:d9:a8:46:d4:3e:a8:96:0d:e3:a7:b7:89:1f:d0:
         90:7f:f8:79:79:b1:e4:6f:f7:13:50:61:69:e1:ec:ca:85:8f:
         38:a3:7d:b0:80:a1:a9:d8:b9:6a:4b:f4:65:43:e4:ef:06:ad:
         02:52:60:5f:9b:b6:d0:3f:7a:1c:f9:2d:b5:fe:f4:d7:8b:91:
         87:74:00:e2:de:78:ae:f1:94:ad:96:74:a2:8b:e0:17:14:4c:
         1a:ac:83:86:fd:61:62:e8:1d:53:80:72:cf:da:f9:2d:78:ea:
         73:4a:0e:62:c8:31:60:b1:c5:ff:3d:9d:f6:e7:ac:6a:a0:76:
         a6:e3:52:f2:7c:2b:ae:7b:99:bd:7f:6a:93:7b:a5:cb:bd:9e:
         68:b7:ee:03:70:c3:78:7d:08:70:67:e2:68:2b:ea:e4:c0:c3:
         4b:f8:72:f0:c2:48:4e:af:80:20:24:6b:a1:07:0f:b0:74:ec:
         fd:ab:18:9f:a8:f1:7a:f0:3f:85:c5:83:6d:eb:7f:02:46:c7:
         4c:aa:d9:e4:91:2d:07:97:8b:a8:be:ab:7e:ad:54:ba:17:63:
         f0:82:4a:84:ec:20:fa:a0:7b:57:a2:78:f7:30:af:0c:0f:74:
         09:71:36:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 02:19:47 2023 by rpki-client on console-fra.rpki-client.org