Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3ECC087213D211EDB30E3D61C4F9AE02.roa
File:                     3ECC087213D211EDB30E3D61C4F9AE02.roa (raw, json)
Hash identifier:          zPO9wEX0RKC93e8AeJFc8kpz87tMJE4tN3l9aYoAb0Y=
Subject key identifier:   47:E7:31:84:CC:B9:65:27:EB:18:E4:79:D6:79:44:FF:95:56:C6:76
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0898
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3ECC087213D211EDB30E3D61C4F9AE02.roa
Signing time:             Fri 05 Aug 2022 08:28:35 +0000
ROA not before:           Fri 05 Aug 2022 08:28:35 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     38547
IP address blocks:        115.167.2.0/24 maxlen: 24
                          115.167.48.0/24 maxlen: 24
                          115.167.49.0/24 maxlen: 24
                          115.167.50.0/24 maxlen: 24
                          115.167.72.0/22 maxlen: 24
                          115.167.100.0/22 maxlen: 24
                          115.167.112.0/22 maxlen: 24
                          175.110.64.0/22 maxlen: 24
                          175.110.80.0/21 maxlen: 24
                          175.110.88.0/22 maxlen: 24
                          175.110.96.0/24 maxlen: 24
                          175.110.97.0/24 maxlen: 24
                          175.110.104.0/24 maxlen: 24
                          175.110.107.2/32 maxlen: 32
                          175.110.107.14/32 maxlen: 32
                          175.110.107.114/32 maxlen: 32
                          175.110.108.0/22 maxlen: 23
                          175.110.108.0/23 maxlen: 24
                          175.110.110.0/24 maxlen: 24
                          202.92.16.0/24 maxlen: 24
                          202.92.17.0/24 maxlen: 24
                          202.92.18.0/24 maxlen: 24
                          202.92.19.0/24 maxlen: 24
                          202.92.20.0/24 maxlen: 24
                          202.92.21.0/24 maxlen: 24
                          202.92.23.0/24 maxlen: 24
                          202.92.24.0/24 maxlen: 24
                          202.92.24.32/27 maxlen: 27
                          202.92.25.0/24 maxlen: 24
                          202.92.26.0/24 maxlen: 24
                          202.92.27.0/24 maxlen: 24
                          202.92.28.0/24 maxlen: 24
                          202.92.29.0/24 maxlen: 24
                          202.92.30.0/24 maxlen: 24
                          202.92.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2200 (0x898)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Aug  5 08:28:35 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=62ecd4b3-86d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:24:0b:6b:58:12:e7:b3:d3:7a:fb:f5:f1:bf:
                    c3:b2:33:d2:c5:a7:42:b9:89:27:8d:be:37:d3:07:
                    88:43:ca:d2:91:4a:d4:4b:c4:a9:57:eb:e7:dc:23:
                    ec:c4:83:39:e9:42:e0:c4:76:d3:1e:c6:37:7d:65:
                    d0:37:94:e7:ac:99:73:58:4f:27:db:6c:4e:df:4b:
                    9a:42:89:8f:7c:93:3e:5b:e7:37:10:bc:00:a2:41:
                    56:fd:51:e4:12:d8:9f:3d:63:1f:f9:d1:34:97:25:
                    2a:94:38:70:3d:5a:3c:c2:44:45:78:ca:33:01:4d:
                    74:87:06:4e:20:db:8e:d3:82:a6:26:5d:f0:0e:2c:
                    b4:c7:77:7b:b7:8f:07:e3:b7:d4:66:ee:53:0d:e1:
                    38:b3:00:07:b5:02:2b:d0:79:96:0b:9a:5e:44:75:
                    b1:54:6c:bc:24:a1:57:35:5e:80:d4:c1:66:b6:5b:
                    a2:7f:ca:88:10:d6:bf:a4:87:84:a1:d3:e4:c5:1d:
                    18:7b:06:ff:8d:6c:00:e8:39:70:92:fe:2d:31:87:
                    78:e0:39:fa:cf:61:5b:28:29:25:c3:46:71:0a:b7:
                    c7:22:91:fa:51:31:cb:8c:39:ec:c1:42:4b:29:88:
                    5c:1b:45:4d:c9:5d:0b:b1:bd:a5:48:87:ed:ca:5f:
                    8c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E7:31:84:CC:B9:65:27:EB:18:E4:79:D6:79:44:FF:95:56:C6:76
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3ECC087213D211EDB30E3D61C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.2.0/24
                  115.167.48.0-115.167.50.255
                  115.167.72.0/22
                  115.167.100.0/22
                  115.167.112.0/22
                  175.110.64.0/22
                  175.110.80.0-175.110.91.255
                  175.110.96.0/23
                  175.110.104.0/24
                  175.110.107.2/32
                  175.110.107.14/32
                  175.110.107.114/32
                  175.110.108.0/22
                  202.92.16.0-202.92.21.255
                  202.92.23.0-202.92.31.255

    Signature Algorithm: sha256WithRSAEncryption
         5e:a0:47:c8:c1:3f:7f:ed:1c:0d:f0:15:ec:e4:d4:54:02:86:
         b7:fb:62:fc:9e:ed:ed:81:69:4c:9c:0b:4e:ae:45:73:44:df:
         83:01:19:f7:a7:c4:9d:46:62:da:2b:38:d6:8b:46:64:5e:15:
         67:d4:b1:e6:7f:02:97:b9:58:e8:61:96:81:f9:92:85:a6:37:
         75:11:9f:dc:90:95:68:de:ee:b7:10:37:df:87:4a:4a:c0:b8:
         26:a7:df:f0:f7:3a:73:4e:10:fc:43:a7:16:e2:a1:75:e5:37:
         45:9e:da:5f:c6:91:6e:ce:f6:b2:0b:0e:85:51:25:f9:de:ac:
         4b:39:80:e9:6d:d7:a5:d5:2d:ef:7f:62:0c:5b:b6:18:ba:18:
         44:9e:72:63:70:06:e6:e7:c8:0b:94:af:2a:fa:0d:b6:42:67:
         30:69:46:8e:ef:45:82:1e:bb:8b:c1:4e:79:5e:e1:92:f4:8b:
         b9:c2:81:2c:f5:a6:13:cc:a7:ac:e6:0b:92:d5:5a:0e:5d:58:
         04:4f:a1:07:61:5c:f7:08:cf:41:5c:82:16:ba:ca:d0:dc:fb:
         dc:ce:c3:99:02:95:91:e9:5b:36:06:df:44:13:d0:b4:d4:74:
         48:ca:34:94:11:81:44:bc:02:95:0e:0d:50:56:64:23:ed:e1:
         77:f6:17:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org