Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1E15E61C9BC111EDA901FB84C4F9AE02.roa
File:                     1E15E61C9BC111EDA901FB84C4F9AE02.roa (raw, json)
Hash identifier:          155NavO70q0A0SNGcb3fnhRNV9temgYt68VGU36/hTo=
Subject key identifier:   8C:C1:42:32:3B:4D:B5:68:75:8D:14:3E:34:FE:E2:5D:AC:55:31:1F
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0A72
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1E15E61C9BC111EDA901FB84C4F9AE02.roa
Signing time:             Tue 24 Jan 2023 08:28:45 +0000
ROA not before:           Tue 24 Jan 2023 08:28:45 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     7411
IP address blocks:        202.92.18.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2674 (0xa72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jan 24 08:28:45 2023 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=63cf96bd-3eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3c:b9:ca:a8:e5:94:82:b8:58:96:b9:4f:76:
                    16:52:38:38:01:85:d8:cc:f4:94:95:67:d1:93:e1:
                    35:b2:88:55:99:fd:d9:97:48:31:a7:c5:df:91:b3:
                    5a:d7:45:8a:b5:f6:29:6d:05:6d:bc:8a:d0:47:da:
                    6f:b1:8a:cc:37:14:c9:f6:e6:16:d9:e0:73:35:38:
                    15:72:0e:3a:f0:a6:26:ae:76:55:f5:43:42:6f:14:
                    eb:4c:37:42:56:e1:f6:09:38:b5:1c:24:1e:8e:c1:
                    1a:ad:14:3b:5e:8b:0b:48:56:55:5e:b8:43:53:4f:
                    a1:c1:35:e9:48:41:a5:02:02:8b:09:65:10:7d:99:
                    9c:b7:44:12:98:63:c1:4f:af:8f:e4:2b:cb:15:4c:
                    7b:39:2b:67:11:46:c1:32:12:13:75:02:20:80:70:
                    c0:a8:0c:fa:e3:92:e2:36:40:95:6f:1f:82:54:89:
                    2c:6e:01:d8:f7:79:cc:a0:66:82:72:f6:72:98:f5:
                    b3:92:8b:50:07:da:23:05:f8:6e:e5:95:34:66:ad:
                    9c:30:6e:3f:27:67:7e:3d:5f:fa:04:4d:83:e9:86:
                    98:97:36:c9:c1:63:dc:58:3a:94:39:89:15:2d:2b:
                    4b:3d:80:aa:e4:f6:2c:73:c1:38:dc:c3:54:9b:57:
                    40:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C1:42:32:3B:4D:B5:68:75:8D:14:3E:34:FE:E2:5D:AC:55:31:1F
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1E15E61C9BC111EDA901FB84C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:86:1f:e4:ed:dd:2f:e1:5a:cc:96:ed:4c:9c:a8:4b:11:b3:
         e7:7d:a2:99:93:e4:79:db:67:1d:43:a9:8f:ce:f2:0b:a9:d1:
         aa:67:6b:83:7e:56:53:1f:23:d3:e8:52:77:57:39:70:f0:34:
         e6:7b:9b:d1:49:e7:b7:a3:8a:90:6f:16:2e:be:0e:67:5e:5f:
         57:22:d9:50:71:95:b2:d7:cb:75:23:6a:85:fb:53:1a:0c:16:
         b3:a6:b4:14:6d:2f:af:78:0b:62:db:de:69:b3:22:1d:e6:34:
         6d:de:df:6d:49:7f:4a:f1:bb:24:c5:58:2e:1e:ae:2b:73:7a:
         2e:7a:82:3b:7d:26:01:8a:c5:86:85:97:b1:1c:ce:26:68:4c:
         92:37:09:ba:c2:90:fc:5b:6f:4d:5d:12:3a:20:c8:ea:c6:b5:
         8e:9f:84:97:5e:38:64:5f:b0:db:77:5e:10:7b:d0:6a:f8:1d:
         04:e1:a7:bc:b3:3c:19:8e:31:14:1d:93:00:8b:56:15:d5:c4:
         88:0c:9b:f0:c4:c7:8f:5f:b6:09:47:69:28:19:81:c5:40:cd:
         0d:9e:d7:cd:e9:a2:9a:ce:9e:e6:e0:33:4c:62:6c:dc:41:78:
         95:16:04:0f:b6:82:3e:16:df:5d:89:79:6f:83:a1:0c:e9:9f:
         51:15:9a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-fra.rpki-client.org