Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/462F4F7CCC8A11ED89D8FD24C4F9AE02.roa
File:                     462F4F7CCC8A11ED89D8FD24C4F9AE02.roa (raw, json)
Hash identifier:          nHsGz0Cezha94ndv7GU7whd+pr/aPnsaqs/EVNplnNI=
Subject key identifier:   9C:29:1D:37:57:90:32:3F:16:60:82:65:4F:4E:FA:64:6A:A9:E4:95
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0B7E
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/462F4F7CCC8A11ED89D8FD24C4F9AE02.roa
Signing time:             Thu 11 May 2023 10:54:57 +0000
ROA not before:           Thu 11 May 2023 10:54:57 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        115.167.1.0/24 maxlen: 24
                          115.167.16.0/22 maxlen: 24
                          115.167.60.0/22 maxlen: 24
                          115.167.104.0/22 maxlen: 24
                          115.167.112.0/22 maxlen: 24
                          115.167.116.0/22 maxlen: 24
                          175.110.68.0/22 maxlen: 24
                          175.110.72.0/22 maxlen: 24
                          175.110.76.0/22 maxlen: 22
                          175.110.80.0/22 maxlen: 24
                          175.110.84.0/22 maxlen: 24
                          175.110.88.0/22 maxlen: 24
                          175.110.104.0/22 maxlen: 24
                          175.110.111.0/24 maxlen: 24
                          202.92.19.0/24 maxlen: 24
                          202.92.20.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2942 (0xb7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 11 10:54:57 2023 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=645cc981-2f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:19:81:70:99:be:b6:d7:cb:5c:96:19:81:e5:
                    8e:47:41:38:dc:43:7b:f5:57:2c:f8:c5:25:d2:57:
                    53:d5:84:29:e2:65:fd:ad:a9:c2:14:6a:56:c4:bd:
                    a5:cb:d4:d8:a0:cc:72:2e:56:ce:07:34:63:79:b5:
                    79:b5:ee:61:cc:cf:5d:c3:17:c1:fb:04:d9:8b:1d:
                    8f:c7:8e:a2:21:12:ae:80:3c:dc:5a:02:c7:68:8d:
                    6b:71:5b:22:4e:9f:86:fc:9c:7f:68:53:9a:4e:50:
                    ef:3c:bf:2e:31:62:89:ba:fe:fd:7a:2b:88:5c:54:
                    e9:97:d9:d1:5f:be:03:81:7d:59:9d:9e:31:8c:19:
                    fb:81:f0:c3:c3:34:8d:fd:9e:f1:1b:59:0a:8b:e1:
                    ff:57:34:38:a6:3a:94:93:b6:c4:00:bb:73:a0:13:
                    26:80:02:8d:ad:9c:ae:53:9f:63:a7:30:75:7a:5e:
                    6f:06:fb:9f:26:9f:c3:3d:ea:51:32:59:71:b1:d3:
                    70:b2:65:2e:a9:27:23:01:1d:c9:90:76:77:70:5c:
                    81:5f:89:82:5d:27:d3:24:02:79:29:93:57:49:7b:
                    8c:1f:6e:a8:3d:5f:97:71:59:8a:09:80:44:26:2f:
                    fe:6c:db:41:79:eb:1f:85:8c:e2:9c:45:eb:11:15:
                    6f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:29:1D:37:57:90:32:3F:16:60:82:65:4F:4E:FA:64:6A:A9:E4:95
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/462F4F7CCC8A11ED89D8FD24C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.1.0/24
                  115.167.16.0/22
                  115.167.60.0/22
                  115.167.104.0/22
                  115.167.112.0/21
                  175.110.68.0-175.110.91.255
                  175.110.104.0/22
                  175.110.111.0/24
                  202.92.19.0-202.92.20.255

    Signature Algorithm: sha256WithRSAEncryption
         7d:f1:f1:a0:ca:ec:11:0d:ed:fb:48:d8:5d:be:30:bf:58:0e:
         dd:b8:22:2d:6c:05:fb:a6:89:a7:a7:a5:a6:e3:ac:cd:ed:cb:
         c7:19:56:db:f7:fb:ab:89:68:ed:02:ea:e4:4a:61:11:c8:ab:
         bf:23:a6:b3:f7:d6:69:80:b3:ef:8a:70:27:71:cb:8b:31:54:
         e3:53:8d:66:72:ca:cc:6c:da:a2:18:9c:70:a5:02:86:fb:92:
         86:c9:da:c4:7a:3f:8d:cd:5b:9e:2b:ab:e1:af:80:b6:e6:2b:
         b7:8c:6d:90:cb:ae:fc:fc:b2:d5:23:f4:b3:86:79:85:72:a9:
         bd:8c:5a:e2:16:00:2e:f3:73:9b:cc:64:7d:11:a5:d9:f4:1c:
         16:b4:6d:fd:70:0a:c8:2f:78:f1:3c:cb:cc:e9:94:c1:bb:9f:
         ff:6b:58:ad:1a:7a:89:01:3c:60:50:7c:85:5e:4a:a8:10:ec:
         71:d2:d2:4b:bb:cf:45:6c:1f:46:1b:10:71:e9:50:01:89:9d:
         73:54:2e:63:a1:c1:59:f6:2e:f2:68:3e:20:ad:c7:12:5b:5f:
         ea:5f:5e:68:91:a2:a2:5e:ea:c2:44:65:59:06:ef:b1:73:28:
         c5:15:3e:d4:ce:1b:8f:74:fb:83:4f:0c:3e:99:3f:c7:4a:4f:
         1b:67:1c:78
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgICC34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwNTExMTA1NDU3WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDVjYzk4MS0yZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1RmBcJm+ttfLXJYZgeWOR0E43EN79Vcs+MUl0ldT1YQp4mX9ranCFGpWxL2l
y9TYoMxyLlbOBzRjebV5te5hzM9dwxfB+wTZix2Px46iIRKugDzcWgLHaI1rcVsi
Tp+G/Jx/aFOaTlDvPL8uMWKJuv79eiuIXFTpl9nRX74DgX1ZnZ4xjBn7gfDDwzSN
/Z7xG1kKi+H/VzQ4pjqUk7bEALtzoBMmgAKNrZyuU59jpzB1el5vBvufJp/DPepR
MllxsdNwsmUuqScjAR3JkHZ3cFyBX4mCXSfTJAJ5KZNXSXuMH26oPV+XcVmKCYBE
Ji/+bNtBeesfhYzinEXrERVvHQIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFJwpHTdX
kDI/FmCCZU9O+mRqqeSVMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNDYyRjRGN0ND
QzhBMTFFRDg5RDhGRDI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXwYIKwYBBQUHAQcBAf8E
UDBOMEwEAgABMEYDBABzpwEDBAJzpxADBAJzpzwDBAJzp2gDBANzp3AwDAMEAq9u
RAMEAq9uWAMEAq9uaAMEAK9ubzAMAwQAylwTAwQAylwUMA0GCSqGSIb3DQEBCwUA
A4IBAQB98fGgyuwRDe37SNhdvjC/WA7duCItbAX7pomnp6Wm46zN7cvHGVbb9/ur
iWjtAurkSmERyKu/I6az99ZpgLPvinAnccuLMVTjU41mcsrMbNqiGJxwpQKG+5KG
ydrEej+NzVueK6vhr4C25iu3jG2Qy678/LLVI/SzhnmFcqm9jFriFgAu83ObzGR9
EaXZ9BwWtG39cArIL3jxPMvM6ZTBu5//a1itGnqJATxgUHyFXkqoEOxx0tJLu89F
bB9GGxBx6VABiZ1zVC5jocFZ9i7yaD4grccSW1/qX15okaKiXurCRGVZBu+xcyjF
FT7UzhuPdPuDTww+mT/HSk8bZxx4
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-fra.rpki-client.org