Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/A170819C0F8B11ED903B0769C4F9AE02.roa
File:                     A170819C0F8B11ED903B0769C4F9AE02.roa (raw, json)
Hash identifier:          +YvLcAQPSiOfT2ObkoZNOLr7gmdAKELsCd6gJZi2Tp8=
Subject key identifier:   EA:29:70:28:C4:F4:E0:03:78:E5:34:58:AE:27:56:8A:5F:6C:66:BC
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       92
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/A170819C0F8B11ED903B0769C4F9AE02.roa
Signing time:             Fri 29 Jul 2022 22:13:10 +0000
ROA not before:           Fri 29 Jul 2022 22:13:10 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     136923
IP address blocks:        203.32.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jul 29 22:13:10 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62e45b76-a005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:93:c2:0b:73:aa:70:b3:49:7c:b9:60:6a:e4:
                    b1:bc:ce:fc:6f:4d:76:64:69:22:c3:08:4d:5a:03:
                    53:24:ad:6a:a3:4a:4b:d4:ff:4d:57:85:47:fb:10:
                    4c:ec:24:99:e4:dd:0e:68:78:a2:29:14:15:8a:f8:
                    aa:31:df:b3:9c:aa:5d:73:9f:c7:73:61:f1:c6:d4:
                    eb:c9:08:80:97:4e:a8:c6:c9:b4:90:a6:14:63:10:
                    4c:f3:b6:ce:99:86:e2:4c:89:d3:c8:22:ee:99:8c:
                    75:bb:a1:28:dd:05:6b:ea:62:96:f1:be:97:84:ff:
                    9f:f7:49:7d:3b:d2:06:f7:fb:09:81:72:0c:18:eb:
                    9e:6e:8b:df:3f:16:6e:53:a3:f7:c8:da:33:db:99:
                    b2:19:8b:6a:d3:e7:1b:c9:75:69:76:7a:d0:34:32:
                    e1:aa:df:b0:fe:2f:99:f0:ac:7f:0a:9c:05:c2:3a:
                    f6:5d:78:9c:00:bc:f9:d1:68:ed:56:fa:c1:a5:ef:
                    b0:e8:79:34:a9:59:cb:d4:e5:92:37:6e:6b:8e:ad:
                    69:9e:ee:64:cb:96:ac:06:ab:36:cf:12:5f:0a:35:
                    29:cb:7c:98:0d:9f:d6:af:c8:b6:9b:ec:c3:5b:3a:
                    23:25:cf:2a:ba:a5:32:9a:03:96:63:27:09:76:29:
                    f6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:29:70:28:C4:F4:E0:03:78:E5:34:58:AE:27:56:8A:5F:6C:66:BC
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/A170819C0F8B11ED903B0769C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.32.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:5f:42:81:bf:df:a6:29:36:b0:e0:c3:23:fb:c4:2a:42:8c:
         d2:b8:50:f8:de:c1:8f:48:b0:df:df:14:58:cc:86:f9:ee:89:
         e0:54:a6:df:72:7d:34:30:53:61:c9:e8:54:ec:2f:40:d1:e9:
         c7:ac:d1:9b:e0:3d:a9:ef:a2:31:fc:b5:72:07:0f:78:08:54:
         14:b3:cc:d4:d0:8d:03:73:61:f9:5e:bb:b0:ae:ae:9d:20:e4:
         30:8c:14:a9:87:41:c6:b0:65:99:f7:3e:e0:22:06:fa:9f:fb:
         8e:ca:30:57:9c:fd:74:35:55:63:ea:ea:3a:18:73:93:81:42:
         7f:b1:a2:06:65:86:dd:e0:5b:83:55:66:59:69:b9:27:ae:79:
         d9:55:d2:42:1b:c4:8e:fe:98:53:25:c9:94:ee:33:f2:dd:8f:
         b7:7a:3b:5b:fb:5a:5a:34:1b:b1:12:1c:12:62:82:ff:62:aa:
         f2:c5:c9:cd:88:e1:ae:1b:df:80:fa:68:19:2b:8b:b2:35:23:
         9e:cf:62:a0:34:f4:5d:d5:82:48:94:52:d2:15:11:de:50:8d:
         51:7e:bc:57:cc:f1:95:20:1a:b1:b7:12:4e:96:6b:0f:eb:86:
         5a:cd:96:0b:43:f4:62:58:2a:3b:12:91:28:90:b4:d1:15:a3:
         4c:dd:5d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-ams.rpki-client.org