Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4E284DF0DCDA11EC97E4BC48C4F9AE02.roa
File:                     4E284DF0DCDA11EC97E4BC48C4F9AE02.roa (raw, json)
Hash identifier:          u7WSDxYu0EL1rzZyA4A3OtyDE7d+P664sJGHSRx6Nbc=
Subject key identifier:   8B:AB:5D:D1:AA:70:60:6E:BE:8A:03:8F:5B:86:C2:F7:23:1C:CA:BF
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0BC6
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4E284DF0DCDA11EC97E4BC48C4F9AE02.roa
Signing time:             Wed 24 May 2023 23:25:38 +0000
ROA not before:           Wed 24 May 2023 23:25:38 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     206092
IP address blocks:        115.167.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3014 (0xbc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 24 23:25:38 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=646e9cf2-b8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:25:ec:5d:ff:a4:4e:a3:d0:75:c9:c9:cf:39:
                    ca:5b:35:90:38:c3:b7:17:93:e6:f4:88:ba:61:4c:
                    f0:b9:c4:65:8d:cd:46:8b:53:1d:91:ee:46:64:55:
                    a0:d1:7f:3c:8b:a1:13:f6:2e:b3:2a:6e:9c:74:4b:
                    a2:5c:ac:b9:50:95:48:ee:37:92:3b:7f:77:22:41:
                    ed:25:08:25:84:d9:4b:8f:2a:9e:8b:7c:bf:c1:62:
                    29:f9:8a:ac:a8:29:48:a7:2c:79:1f:c3:e9:55:f6:
                    d4:76:ec:a8:6e:0c:56:29:4c:f5:f0:96:f6:30:39:
                    27:16:70:c5:55:48:47:e5:3d:d8:94:1c:0c:21:0f:
                    83:87:50:2b:6c:57:64:ed:ae:81:83:03:0d:be:77:
                    e0:06:c2:44:57:aa:c9:80:4f:51:4c:6f:13:5b:4f:
                    2f:8d:42:db:9e:d5:b8:71:42:b9:af:0a:40:55:71:
                    fe:21:1c:a4:cf:d6:22:c6:12:7a:1e:2c:3e:f3:d3:
                    0d:4e:76:a6:ba:5e:47:7b:8f:b7:6c:f0:53:30:58:
                    36:93:e5:9b:ba:c0:55:ff:6f:99:4b:12:2d:53:0c:
                    7a:c6:b2:3c:64:8b:c6:31:1f:bc:25:64:2c:a9:45:
                    5d:f3:2e:d7:fd:e3:3c:cf:22:99:dc:aa:7d:4c:6f:
                    8b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AB:5D:D1:AA:70:60:6E:BE:8A:03:8F:5B:86:C2:F7:23:1C:CA:BF
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4E284DF0DCDA11EC97E4BC48C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:95:1b:3a:77:2c:7c:2d:2c:3b:38:98:87:14:0e:63:0e:f0:
         8b:85:0e:18:3e:88:fe:12:d9:3a:2d:f7:c8:20:fb:8a:d7:1d:
         74:82:9c:6c:6d:d3:63:4d:48:24:02:4b:5b:a4:1b:2f:d8:76:
         8d:22:6c:5a:da:c0:06:89:fc:72:8a:81:b1:e0:17:de:f6:c0:
         84:4f:e5:89:3c:87:7d:f9:2f:80:bc:c5:dc:4c:43:07:43:e9:
         9f:3e:9d:61:a6:7e:c2:7a:d1:20:cc:52:87:6a:62:7c:7a:23:
         71:7d:8a:93:67:59:04:58:09:a8:a1:7e:d4:51:e5:04:03:6b:
         c8:81:2b:0e:1d:62:6f:64:ca:1a:c5:cc:d9:dc:eb:53:0d:55:
         59:e7:0f:ee:23:35:fd:de:7f:fc:4f:98:cc:10:d8:50:29:50:
         42:86:2d:e9:6c:b2:15:41:bb:c4:be:41:81:53:69:3a:9d:83:
         9d:77:cb:2d:86:20:a0:ed:79:d0:98:0a:3d:20:e3:d8:59:02:
         68:d2:90:e9:04:51:5b:f1:57:97:4f:dd:33:ca:4a:95:58:d1:
         14:f2:30:b1:60:70:2a:eb:c2:84:0d:1e:23:4a:40:3a:06:6e:
         a0:a5:54:3b:29:d6:35:31:b2:d7:5f:6b:b1:23:e1:f5:70:86:
         2d:67:10:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-fra.rpki-client.org