Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/5DA6319C3B4011EDB614AF09C4F9AE02.roa
File:                     5DA6319C3B4011EDB614AF09C4F9AE02.roa (raw, json)
Hash identifier:          2saRrOlG1LlWhmDBFuLU3MkOf5/E3rq4Nk2GeAg9Uv0=
Subject key identifier:   3F:BB:C0:3F:7B:74:04:A1:65:DA:EB:1E:65:5E:B0:CF:76:E6:C6:AF
Certificate issuer:       /CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
Certificate serial:       91
Authority key identifier: 1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/5DA6319C3B4011EDB614AF09C4F9AE02.roa
Signing time:             Sun 11 Dec 2022 06:14:42 +0000
ROA not before:           Sun 11 Dec 2022 06:14:41 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     135097
IP address blocks:        103.176.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
        Validity
            Not Before: Dec 11 06:14:41 2022 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=63957551-b8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:9c:c4:64:65:32:0d:c3:1f:38:f8:89:60:
                    9e:5e:32:ab:0d:78:85:7d:16:e0:c1:11:5f:8a:12:
                    c9:8d:49:cd:08:96:13:af:cf:99:ba:79:73:63:87:
                    d7:3d:cb:eb:f2:7c:de:d7:56:71:67:10:8d:93:b4:
                    cf:31:ee:38:6d:ad:05:6c:ee:12:7c:b3:a7:34:cd:
                    31:c3:59:00:64:b8:a8:b7:d6:92:6b:64:c5:15:c3:
                    5d:04:2e:81:b5:49:77:3b:8e:86:fb:c6:bc:de:12:
                    cd:d5:47:8c:15:61:f9:66:f1:bd:5d:7f:ed:a7:f7:
                    bd:c0:c0:6b:0c:1a:b7:40:27:c8:f6:d0:62:ea:fe:
                    cd:a1:f0:fe:59:41:66:3a:f7:b3:56:4d:f5:8b:6a:
                    be:ba:ff:b7:22:04:8b:88:7d:fb:bc:cd:71:a1:59:
                    ba:a9:51:63:97:45:db:cf:eb:ab:c5:82:0b:2f:10:
                    8c:1c:0b:e0:48:f5:a7:42:c9:30:26:f5:0b:99:a2:
                    0e:4e:be:66:f2:80:ea:1a:d0:9d:9b:5f:a3:c6:af:
                    5e:7e:b7:78:df:58:d3:bc:35:96:2d:24:c0:9e:fa:
                    19:1e:e7:f7:87:53:45:eb:0a:83:2f:db:c3:8d:0b:
                    6b:ea:5c:ff:61:55:e3:d0:52:52:12:10:2b:9f:25:
                    5a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BB:C0:3F:7B:74:04:A1:65:DA:EB:1E:65:5E:B0:CF:76:E6:C6:AF
            X509v3 Authority Key Identifier:
                keyid:1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/5DA6319C3B4011EDB614AF09C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:fd:54:83:5b:54:52:c3:73:4f:ff:6a:73:32:56:9a:50:a9:
         80:60:4b:d9:48:d7:36:b9:3a:73:63:56:99:4f:02:91:35:5d:
         37:91:e2:18:49:c6:08:4a:fc:7d:e5:19:27:00:2d:5c:10:82:
         e8:82:ae:fc:66:56:ab:15:2e:0b:a9:4f:2b:c0:89:24:a5:8b:
         4e:85:99:f2:0e:a3:dc:e0:42:73:9f:53:b8:7b:f5:16:91:8d:
         6f:bf:f7:57:eb:89:4c:dd:2f:fe:fe:2b:8f:63:15:62:77:1d:
         47:f1:e6:00:2d:1c:a2:ab:fc:80:85:72:3d:60:22:e1:56:db:
         f2:3c:e3:9c:57:04:9d:38:b1:c9:1a:43:23:a6:f3:ca:28:b5:
         c6:33:9c:54:62:d5:ce:4e:73:1a:7c:89:bb:18:ea:fc:88:79:
         92:4b:6f:a3:6c:8f:f6:55:6d:e5:8b:db:b2:cb:41:1b:f4:3a:
         06:d5:62:78:f5:62:6e:33:41:d7:e1:9f:e8:20:2f:89:7b:7e:
         e9:d6:98:31:89:8c:dd:06:86:06:f8:81:b0:8b:2b:8a:0d:c6:
         44:b8:fc:40:8e:ab:c3:65:28:b7:91:46:14:45:da:a6:41:a1:
         23:ff:b8:83:51:54:b0:5e:5a:e4:20:e1:2d:fd:6e:b4:fe:ae:
         84:a4:ad:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:05 2023 by rpki-client on console-fra.rpki-client.org