Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0EA431FC118D11ED8317D731C4F9AE02.roa
File:                     0EA431FC118D11ED8317D731C4F9AE02.roa (raw, json)
Hash identifier:          r/X0oP8eWKhJY9UaB8FcQIsIxFEBBNYPDxswQubwz0I=
Subject key identifier:   74:B5:42:C5:1B:1F:F1:6B:4B:76:91:20:2C:75:57:4B:B2:02:F1:BC
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       087D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0EA431FC118D11ED8317D731C4F9AE02.roa
Signing time:             Mon 01 Aug 2022 11:28:26 +0000
ROA not before:           Mon 01 Aug 2022 11:28:26 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     42831
IP address blocks:        115.167.104.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2173 (0x87d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Aug  1 11:28:26 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=62e7b8d9-4106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:5f:1f:14:fb:d0:6e:9f:4b:6a:08:14:41:
                    5e:20:73:ec:ef:32:bb:d5:5a:ab:6e:86:3e:32:9d:
                    8d:f0:3a:83:7f:3c:8f:07:ba:a7:8e:06:2a:e6:06:
                    f4:80:30:2e:02:32:e4:45:01:33:11:a2:ce:90:9f:
                    81:76:f4:c2:21:9b:24:c0:a1:f5:2c:53:d9:19:cb:
                    1c:ca:58:49:08:fb:71:b2:d0:09:b3:47:60:25:02:
                    85:83:1a:4e:f3:dd:c5:96:d4:11:ac:69:51:5b:83:
                    bc:5e:d3:88:2f:a4:3b:41:7e:00:b7:51:03:8e:11:
                    69:3f:b2:0c:a4:f7:b2:f5:5c:c8:b7:f0:ae:bf:d6:
                    41:97:e8:55:c1:56:8b:ee:60:11:09:34:1c:d2:57:
                    70:14:ed:dd:a0:9e:fb:48:4f:30:74:33:ca:7a:9a:
                    1a:27:1c:cd:99:fa:e9:ab:2a:b8:f8:36:27:71:c6:
                    5b:fc:a0:96:94:bb:b3:90:69:b9:16:96:bf:49:d7:
                    e2:64:3d:d6:d3:ee:e2:4b:7a:6b:74:a9:fb:c3:ce:
                    12:ea:53:96:7b:a1:97:dc:e4:61:eb:84:a3:4e:bc:
                    54:0c:a8:be:c9:9f:65:ca:07:da:3a:ef:d2:ef:3f:
                    92:dd:f1:b4:8a:04:12:d2:9d:bf:39:b0:e3:2e:c4:
                    2e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B5:42:C5:1B:1F:F1:6B:4B:76:91:20:2C:75:57:4B:B2:02:F1:BC
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0EA431FC118D11ED8317D731C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:b4:5e:67:cd:45:52:b5:fd:c3:f1:7c:b2:7d:0c:48:2f:68:
         f8:55:9c:89:0f:3d:29:9a:64:cd:db:5f:fe:37:e5:16:29:50:
         21:b4:2c:58:42:76:1a:90:3a:05:e6:1e:8f:f0:b7:54:8b:84:
         f9:7d:c9:6c:46:c7:94:da:10:63:09:1f:91:49:84:00:b1:e5:
         ea:8d:31:73:8c:7f:43:12:39:7c:97:31:85:47:5b:42:e2:1c:
         b4:23:66:1b:bb:3c:ea:5d:3e:3c:af:11:11:2a:5f:fc:34:f2:
         86:e0:c8:bb:3f:ad:f1:6e:81:9a:7c:9c:18:c3:4d:3b:38:62:
         39:1f:22:a8:8d:c7:2a:e9:0e:31:e9:b3:d2:c3:4d:19:c2:75:
         aa:69:5a:e8:92:73:6d:9f:d1:0b:9a:19:29:4b:73:0a:ce:4f:
         9d:91:62:98:20:ea:6e:e8:9b:9c:b6:02:9a:39:4f:79:53:54:
         37:4a:ba:17:fd:79:9f:84:cc:b3:44:96:cf:1a:dd:da:7a:ec:
         66:72:ba:c3:da:19:14:d2:f3:3b:50:5f:18:dd:f3:12:8d:0b:
         9c:a6:d2:e8:e8:b2:60:e3:e0:28:a5:55:5e:74:e4:e9:be:48:
         8a:bf:cd:40:55:48:86:87:ec:af:5e:27:77:10:e4:c6:2d:fc:
         47:a5:64:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-fra.rpki-client.org