Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/37D48B30F65C11ED84ECEF0AC4F9AE02.roa
File:                     37D48B30F65C11ED84ECEF0AC4F9AE02.roa (raw, json)
Hash identifier:          UUEPiXaBiUrr7lcSGw/CXksjsJl4mPtPZEwBSItlkdY=
Subject key identifier:   D9:92:4F:5E:CD:19:77:AF:1D:F3:A6:94:AA:89:D7:71:A9:68:D9:87
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0BBF
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/37D48B30F65C11ED84ECEF0AC4F9AE02.roa
Signing time:             Wed 24 May 2023 23:25:30 +0000
ROA not before:           Wed 24 May 2023 23:25:30 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     142127
IP address blocks:        180.178.184.0/24 maxlen: 24
                          180.178.186.0/24 maxlen: 24
                          223.29.224.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3007 (0xbbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 24 23:25:30 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=646e9cea-65c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:91:45:ad:16:d5:72:5b:cf:06:67:d1:f8:55:
                    41:1b:29:a4:b0:38:7d:08:78:4a:9f:61:d2:66:2a:
                    88:10:15:fb:45:3f:c3:ef:f5:0b:e9:9f:6f:98:35:
                    7e:65:f1:12:45:0d:5a:1f:8f:d4:73:36:b5:cb:87:
                    77:51:02:ba:14:01:63:36:46:c4:3c:26:76:d2:08:
                    52:2d:f5:7f:c2:73:62:3b:29:65:31:84:e2:23:00:
                    9a:44:bb:0e:b5:94:cb:0f:3f:d1:d2:7f:f3:1e:79:
                    e2:6c:c9:f9:d7:a4:09:3f:bc:88:c7:d9:04:2d:23:
                    3b:6f:f9:4b:25:0f:f3:15:4d:a8:ad:b6:d8:fd:3a:
                    b8:07:b9:c1:d0:31:af:12:d3:f5:e8:50:72:06:f4:
                    9b:40:b9:c4:19:38:95:9f:68:57:97:17:57:f6:c1:
                    79:8e:c2:c8:00:ca:55:be:53:2a:ae:25:66:1f:24:
                    0b:24:93:c1:a8:7a:e5:5b:90:c0:34:b9:5f:f0:42:
                    e4:71:14:b3:bc:e1:5c:cd:d7:69:0b:19:c8:74:50:
                    d6:f2:70:0a:80:0c:2e:a3:57:ab:07:9e:ac:54:18:
                    04:72:a7:78:51:5f:92:ed:14:40:84:9b:66:54:2f:
                    b5:ae:1b:49:df:fa:5c:e6:db:cf:03:d0:cd:ba:c3:
                    f3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:92:4F:5E:CD:19:77:AF:1D:F3:A6:94:AA:89:D7:71:A9:68:D9:87
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/37D48B30F65C11ED84ECEF0AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.184.0/24
                  180.178.186.0/24
                  223.29.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:5d:f2:a7:14:3e:25:84:12:8c:8e:d6:0f:f1:93:a4:2e:b2:
         6a:dc:26:7a:35:3f:5f:83:17:b6:99:2e:9f:a3:7e:2d:c4:6c:
         df:c3:1b:95:c9:19:ea:e3:9e:b2:18:cc:c1:74:16:e6:07:8e:
         fb:d9:58:cc:27:c8:b3:f5:f0:a0:c6:08:ae:44:ea:c9:93:3c:
         19:b4:d6:d5:7a:1a:ce:1a:be:ef:05:0b:79:03:02:87:29:7b:
         72:80:2c:54:92:69:01:d0:6d:7b:c6:cb:6b:e3:f5:e3:40:e5:
         9b:3f:d2:08:3d:60:1b:88:13:72:69:91:95:e6:db:60:98:d7:
         c5:dd:82:86:8e:bd:2b:0f:a0:b2:6e:46:ca:9b:79:35:e8:fc:
         7c:2d:fc:20:1a:a5:d0:5d:90:f7:7e:c9:fe:3b:76:be:46:9a:
         75:20:8b:5d:6f:ad:a5:1b:74:6a:5c:69:03:18:19:4a:92:87:
         73:26:19:a8:ef:fc:8f:72:c8:5d:74:fc:cc:09:30:55:1c:1e:
         4a:a8:75:12:a1:b9:12:cc:71:92:d9:b7:ec:6f:5e:ea:13:c3:
         50:4c:5c:98:5a:45:66:39:60:55:cf:ed:76:87:d1:e4:24:fd:
         ef:26:81:c2:8a:d7:e2:41:13:6d:95:dc:ed:b3:f8:70:48:0e:
         6f:18:aa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org