Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2D130CE8CBEF11EA9FBE4515C4F9AE02.roa
File:                     2D130CE8CBEF11EA9FBE4515C4F9AE02.roa (raw, json)
Hash identifier:          jclRi2mTqJvfyqWJ1ZpFgHHjwZTNWnOYTKJxmvOF6Bk=
Subject key identifier:   04:F1:5B:56:8D:45:77:CA:E6:84:B5:A2:44:AB:E5:D2:DA:AF:ED:F8
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0A45
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2D130CE8CBEF11EA9FBE4515C4F9AE02.roa
Signing time:             Sun 14 May 2023 22:14:23 +0000
ROA not before:           Sun 14 May 2023 22:14:23 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     140936
IP address blocks:        2406:840:edd0::/44 maxlen: 48

Validation:               Failed, certificate revoked on Fri 10 May 2024 13:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2629 (0xa45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 14 22:14:23 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64615d3f-0039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:51:09:d7:2a:34:88:01:b9:03:4f:ca:67:37:
                    6a:1f:49:75:d1:4c:94:ce:f1:ed:6e:f5:3a:5c:cb:
                    17:1e:a8:4e:69:b4:4c:29:c4:65:67:aa:95:7d:c6:
                    83:bc:e4:34:72:31:e6:63:42:6d:e3:47:1b:ad:5c:
                    1c:a0:0d:82:a8:bb:17:22:14:d6:ad:ea:dd:fd:5b:
                    2d:ab:6b:21:d5:e4:58:f6:f6:93:be:99:f3:61:1c:
                    e0:bf:0b:2e:fd:a8:67:8a:67:45:06:be:ca:9e:22:
                    a7:0d:24:d5:5a:21:e0:cc:25:e0:20:0a:52:af:72:
                    bb:76:f5:ad:f0:cf:91:4b:e8:30:37:d1:dd:bc:e4:
                    67:22:dd:43:65:f1:3b:a6:75:87:d6:04:95:55:5f:
                    9d:ad:96:e2:f6:b1:bd:69:87:8c:d3:5e:cc:e7:d5:
                    53:8f:32:ff:c8:02:25:b7:fc:34:da:2f:fd:50:b5:
                    a2:67:43:8e:2c:14:17:6c:ed:06:5d:91:ce:98:c9:
                    83:dd:b7:c5:ab:c6:21:69:96:a4:b8:33:36:cc:b9:
                    4f:fa:cc:70:82:b5:fc:53:ba:89:82:5f:29:1c:65:
                    8e:98:15:ae:d1:3a:49:18:42:f4:77:31:59:01:45:
                    cd:12:9a:a8:90:1a:58:e4:6f:75:9d:d6:de:bf:d2:
                    c6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F1:5B:56:8D:45:77:CA:E6:84:B5:A2:44:AB:E5:D2:DA:AF:ED:F8
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2D130CE8CBEF11EA9FBE4515C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:edd0::/44

    Signature Algorithm: sha256WithRSAEncryption
         7a:68:eb:48:9d:92:ff:b1:cb:4a:ed:b0:2b:14:77:ec:bb:21:
         fe:be:f9:b9:21:45:a9:42:96:00:3e:60:06:bf:3e:47:a5:1f:
         f1:c9:91:46:f4:e0:72:87:a0:af:0f:07:d4:96:e2:b6:71:ae:
         00:da:6e:31:f2:ce:82:2d:ac:92:69:6e:b3:27:bc:f4:7f:34:
         65:33:6f:49:62:b7:15:4e:8c:a7:e9:a1:fb:a8:0d:4a:28:0c:
         1c:66:0f:d1:9b:d1:a5:9c:a0:7f:7c:77:08:a3:72:6d:24:43:
         99:61:63:26:f3:94:31:82:f8:34:93:ac:17:3e:60:02:a2:0f:
         fe:36:23:96:c3:33:44:c0:4f:43:fe:df:23:e7:2b:a4:6f:c1:
         90:45:fd:8e:8b:e6:49:e5:91:73:dc:b0:87:6c:c2:f2:68:f3:
         48:5c:58:83:25:aa:c1:7a:cc:99:4a:8d:b2:35:6c:fa:57:47:
         43:a4:7f:09:ea:12:f1:71:ca:3a:56:ec:8c:52:c5:38:37:e7:
         3d:87:ab:5f:ee:0e:ae:94:be:1e:1d:2c:91:80:4a:b5:c0:59:
         4e:34:1e:74:fd:af:ad:4a:fd:2e:f6:1d:05:81:2e:3c:d3:82:
         b4:bc:53:ad:58:54:92:85:b1:27:6e:28:72:59:d1:f6:0f:13:
         df:f7:57:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-ams.rpki-client.org