Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4737945A5C5511EEA565E21CC4F9AE02.roa
File:                     4737945A5C5511EEA565E21CC4F9AE02.roa (raw, json)
Hash identifier:          BD14Tp2DHZOhzNoeSI+7Eo08zxOOpBSz6LUNU6VLENw=
Subject key identifier:   1A:BB:17:F4:2B:E4:E9:A4:C8:CC:17:45:92:12:A6:01:2C:4C:C7:3F
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0D4C
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4737945A5C5511EEA565E21CC4F9AE02.roa
Signing time:             Tue 26 Sep 2023 10:13:03 +0000
ROA not before:           Tue 26 Sep 2023 10:13:03 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     207084
IP address blocks:        180.178.177.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3404 (0xd4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Sep 26 10:13:03 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6512aeaf-5312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9d:77:12:3f:3d:50:a8:9f:1c:a1:b0:6d:6c:
                    7b:f2:ce:b1:88:68:0c:a4:5e:08:f9:02:b3:8b:c0:
                    98:05:13:72:d9:bd:8d:dc:a8:1e:6a:e3:89:11:df:
                    a8:7d:c3:f4:70:24:c0:83:cc:d3:7b:a2:32:6c:27:
                    83:54:5d:d2:ca:c6:d0:21:8a:8d:e8:66:eb:93:a4:
                    d9:ae:57:ea:37:03:f9:dc:04:e7:18:34:53:a8:56:
                    fe:4d:3b:2e:43:93:ce:90:58:f0:6a:e4:9f:dd:8a:
                    44:af:25:6f:44:63:e0:37:b9:3c:f7:92:ef:9f:9c:
                    92:a8:ba:a0:45:12:75:2e:54:0c:47:f6:ce:54:53:
                    1a:78:5b:ed:da:89:34:7b:a4:df:60:b1:af:74:12:
                    fc:c6:7c:17:e7:3d:32:00:40:c0:a9:9e:32:f3:0f:
                    0f:c2:85:9c:af:50:61:e9:6b:dc:65:3b:82:d7:a5:
                    a7:d3:6d:21:ac:90:77:b4:5d:d9:69:a7:29:df:01:
                    1a:fe:e2:05:48:46:bf:18:1c:58:7c:38:e9:9f:2e:
                    d6:03:ba:c4:e4:a7:68:55:2a:8d:e2:fe:70:d2:5f:
                    ba:3c:bd:c0:6f:11:67:87:c3:c9:d2:c6:9d:07:87:
                    27:ef:9e:f9:c3:da:ca:28:27:c2:57:e7:9d:37:8b:
                    26:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BB:17:F4:2B:E4:E9:A4:C8:CC:17:45:92:12:A6:01:2C:4C:C7:3F
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4737945A5C5511EEA565E21CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:37:1a:50:91:0e:58:f1:b6:18:d3:29:f8:f4:cb:3e:f1:1d:
         c1:4e:69:7f:77:f2:9f:e7:04:09:10:70:16:13:e4:74:51:1f:
         a4:2f:71:0c:dc:29:ff:c9:25:47:8b:98:4e:7c:80:b0:8a:30:
         b3:db:f1:57:c0:db:5c:95:81:dc:c6:85:8d:76:a2:11:ae:ee:
         cc:af:63:86:65:d7:fa:28:97:5c:3e:f3:7e:db:3f:c3:59:59:
         39:4f:81:70:72:cd:fa:fc:98:08:1d:de:2a:40:f6:93:07:e0:
         cd:b0:55:e9:64:d0:52:e7:fb:da:70:bc:48:20:5b:76:bb:7c:
         17:c3:40:3a:82:0f:6e:02:7c:e0:9d:81:fc:a5:13:41:41:f1:
         1d:b7:76:3f:32:c8:58:a0:90:ce:d5:e0:42:86:6e:99:af:d5:
         57:e5:7d:75:7a:04:c3:f6:af:72:5f:3c:46:6d:e2:5d:00:99:
         0e:63:83:84:3b:d6:3c:af:1e:3e:ee:9e:f1:d3:87:48:55:48:
         d1:89:bd:aa:ef:fb:ad:9d:69:83:b4:79:db:01:e7:c8:1b:5d:
         05:61:6c:50:93:7c:26:6f:46:4b:f7:e0:f8:9d:8f:69:b1:07:
         7e:b6:84:9f:9b:d9:0f:f9:1e:55:06:b5:a8:40:10:12:a8:e8:
         ea:03:be:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 08:28:09 2023 by rpki-client on console-fra.rpki-client.org