Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/4D3D0D4E6F4611EA8B859062C4F9AE02.roa
File:                     4D3D0D4E6F4611EA8B859062C4F9AE02.roa (raw, json)
Hash identifier:          ep2OkOGS6n6UBcYgEBKsznv+GmhS9ML+ImwqbD8rr5U=
Subject key identifier:   1C:9A:D4:78:95:79:B7:FA:35:53:6B:54:DF:C0:23:C8:C6:E9:91:47
Certificate issuer:       /CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B
Certificate serial:       09A6
Authority key identifier: A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/4D3D0D4E6F4611EA8B859062C4F9AE02.roa
Signing time:             Thu 30 May 2024 21:27:49 +0000
ROA not before:           Thu 30 May 2024 21:27:49 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     38456
IP address blocks:        175.176.244.0/24 maxlen: 24
                          175.176.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 10 Oct 2024 04:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2470 (0x9a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B
        Validity
            Not Before: May 30 21:27:49 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6658ef54-3f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:e5:46:9a:89:7c:71:aa:a2:7b:24:a1:d6:
                    58:7a:4e:2b:0d:51:ca:1c:9c:85:80:6a:62:33:48:
                    84:32:d8:dd:97:d0:c8:a2:2c:ef:a3:e7:93:bf:4a:
                    1b:51:dd:31:2a:e8:62:9a:97:83:d9:17:b2:c3:a0:
                    49:da:a1:c7:7b:88:19:c8:a8:be:9a:15:48:82:c6:
                    b1:b7:ac:c5:dd:57:a4:56:d8:32:e2:ac:35:26:c2:
                    65:2d:d7:f3:ec:61:59:02:53:54:77:d7:3c:f7:90:
                    80:cf:70:9d:c7:9d:75:fb:e1:9b:88:f7:fa:18:c5:
                    61:05:ad:ac:39:9f:71:3e:cc:5b:e6:fa:cc:e7:6f:
                    a9:7c:fd:33:e6:fc:f2:5b:33:bb:06:84:9e:07:82:
                    62:0a:d2:dc:bc:c0:52:de:29:81:e3:f8:7d:e6:3a:
                    c0:c4:39:5c:7b:12:3d:87:ae:9f:50:12:9e:f7:d8:
                    e3:71:c8:01:43:42:f4:2b:10:fe:b4:93:8e:6a:16:
                    2b:9c:1a:ec:e2:7c:aa:7e:b0:f7:6d:c3:f3:de:63:
                    2c:65:b4:41:fa:7e:6b:16:92:2e:41:68:69:8d:eb:
                    bc:21:e6:5d:9a:c7:c3:00:fd:57:e1:f7:4b:1d:75:
                    ee:d7:b3:28:1a:50:74:c2:a4:ef:fd:46:57:32:3b:
                    d5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9A:D4:78:95:79:B7:FA:35:53:6B:54:DF:C0:23:C8:C6:E9:91:47
            X509v3 Authority Key Identifier:
                keyid:A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/4D3D0D4E6F4611EA8B859062C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.176.244.0/24
                  175.176.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:48:cf:38:8b:39:05:7a:2a:da:4b:a0:4e:97:1f:49:df:a3:
         27:4e:4c:7d:16:55:27:a6:8b:27:6a:91:6d:a8:7e:07:b2:2b:
         11:f5:c3:b6:af:47:e8:37:8c:dd:ac:1d:2a:b2:69:73:2d:20:
         a8:5a:2a:68:88:8c:8c:3c:81:0b:0a:98:f6:9b:45:30:5d:cd:
         9a:10:3d:0d:3a:84:a7:a3:c3:cc:da:0f:c9:81:01:63:44:40:
         79:37:7a:41:f0:60:80:9c:c4:a6:d3:54:75:10:fa:2b:e0:fe:
         82:5b:c9:90:07:73:58:f7:85:04:25:16:9a:35:a2:1a:3d:f2:
         da:f4:b9:31:7d:c4:ce:0f:17:0c:ab:0e:d8:2c:d5:d8:ab:4f:
         c7:0c:8f:44:f7:35:c7:37:72:4b:ee:f2:5a:dd:7f:2d:bf:f5:
         9c:d6:bf:c7:45:d2:94:85:bb:4e:69:d2:80:f6:a1:ed:70:1e:
         80:12:7b:18:58:25:e8:dd:3b:3a:c4:ac:01:b4:92:71:e8:fa:
         da:f8:c4:32:33:43:2e:63:0c:c9:3a:b3:c8:db:32:65:e2:ae:
         d1:ca:e8:4c:2d:54:8c:49:64:d5:9d:5b:4b:b0:db:b7:9a:8d:
         84:a3:05:ce:37:40:de:92:6f:a6:4e:37:84:24:d6:84:cd:cd:
         26:34:cf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 07:48:30 2024 by rpki-client on console-fra.rpki-client.org