Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/58FD405C678811EE8095007DC4F9AE02.roa
File:                     58FD405C678811EE8095007DC4F9AE02.roa (raw, json)
Hash identifier:          xTp80ris3q5mQbhEUS88yCkd0j+9eVKdIKjgj07WWSw=
Subject key identifier:   EA:F8:F4:94:8A:8F:62:47:66:16:B0:17:8E:C3:AA:1D:01:04:79:76
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0D91
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/58FD405C678811EE8095007DC4F9AE02.roa
Signing time:             Mon 16 Oct 2023 07:48:49 +0000
ROA not before:           Mon 16 Oct 2023 07:48:49 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     9387
IP address blocks:        103.11.60.0/24 maxlen: 24
                          103.11.61.0/24 maxlen: 24
                          113.203.210.0/24 maxlen: 24
                          113.203.212.0/22 maxlen: 24
                          113.203.218.0/24 maxlen: 24
                          113.203.220.0/24 maxlen: 24
                          113.203.222.0/24 maxlen: 24
                          113.203.227.0/24 maxlen: 24
                          113.203.228.0/24 maxlen: 24
                          113.203.233.0/24 maxlen: 24
                          113.203.234.0/24 maxlen: 24
                          113.203.235.0/24 maxlen: 24
                          113.203.236.0/24 maxlen: 24
                          113.203.237.0/24 maxlen: 24
                          113.203.238.0/24 maxlen: 24
                          113.203.239.0/24 maxlen: 24
                          113.203.240.0/24 maxlen: 24
                          113.203.245.0/24 maxlen: 24
                          113.203.248.0/24 maxlen: 24
                          113.203.252.0/24 maxlen: 24
                          113.203.253.0/24 maxlen: 24
                          113.203.254.0/24 maxlen: 24
                          180.178.128.0/24 maxlen: 24
                          180.178.129.0/24 maxlen: 24
                          180.178.132.0/24 maxlen: 24
                          180.178.133.0/24 maxlen: 24
                          180.178.134.0/24 maxlen: 24
                          180.178.135.0/24 maxlen: 24
                          180.178.136.0/24 maxlen: 24
                          180.178.137.0/24 maxlen: 24
                          180.178.138.0/24 maxlen: 24
                          180.178.139.0/24 maxlen: 24
                          180.178.147.0/24 maxlen: 24
                          180.178.148.0/24 maxlen: 24
                          180.178.149.0/24 maxlen: 24
                          180.178.161.0/24 maxlen: 24
                          180.178.162.0/24 maxlen: 24
                          180.178.164.0/22 maxlen: 24
                          180.178.168.0/24 maxlen: 24
                          180.178.172.0/24 maxlen: 24
                          180.178.173.0/24 maxlen: 24
                          180.178.174.0/24 maxlen: 24
                          180.178.175.0/24 maxlen: 24
                          180.178.176.0/24 maxlen: 24
                          180.178.177.0/24 maxlen: 24
                          180.178.178.0/24 maxlen: 24
                          180.178.180.0/22 maxlen: 24
                          180.178.185.0/24 maxlen: 24
                          180.178.187.0/24 maxlen: 24
                          180.178.189.0/24 maxlen: 24
                          180.178.190.0/24 maxlen: 24
                          180.178.191.0/24 maxlen: 24
                          223.29.226.0/24 maxlen: 24
                          223.29.227.0/24 maxlen: 24
                          223.29.228.0/24 maxlen: 24
                          223.29.229.0/24 maxlen: 24
                          223.29.230.0/24 maxlen: 24
                          223.29.231.0/24 maxlen: 24
                          223.29.235.0/24 maxlen: 24
                          223.29.236.0/24 maxlen: 24
                          223.29.237.0/24 maxlen: 24
                          223.29.238.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3473 (0xd91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Oct 16 07:48:49 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=652ceae1-23d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:c9:a0:55:ff:53:41:59:ad:1f:6e:44:a3:
                    96:c6:3c:d6:0b:db:74:bb:8d:bd:2f:db:44:51:a2:
                    b7:b9:9d:55:15:99:b5:e9:9d:d9:ac:da:8e:2b:82:
                    f2:d3:c5:20:71:b7:a3:a1:86:3d:00:2c:85:bb:91:
                    3b:f6:66:47:0b:73:3c:d1:a2:4c:5d:a1:5c:96:ce:
                    aa:d6:28:2e:ed:b8:1e:e5:cf:32:71:3e:02:83:4a:
                    2d:88:11:53:3b:39:b3:83:01:04:7c:14:3f:4f:df:
                    63:12:25:81:0a:de:35:54:18:15:2a:c8:a2:4c:5b:
                    bb:70:ff:ce:40:0c:ba:64:4b:3d:82:22:80:94:66:
                    d3:94:15:35:b7:05:04:7f:cb:2e:97:76:d6:50:e7:
                    58:88:10:53:c1:29:89:e3:f9:7e:92:66:08:57:73:
                    7f:02:ef:7b:6a:5f:3f:54:1e:0c:bc:45:04:64:81:
                    85:1e:65:7e:bd:17:62:11:cb:c9:4f:87:7f:02:c6:
                    98:b3:23:ca:cf:20:57:3c:94:99:43:ee:cb:45:7d:
                    09:21:92:1c:16:6c:84:3f:6a:78:05:1b:56:df:24:
                    1f:9c:75:c6:1f:3e:8b:91:35:36:df:26:96:1f:64:
                    2a:71:70:e2:80:e8:6a:46:f9:49:32:38:c1:8e:ca:
                    5f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F8:F4:94:8A:8F:62:47:66:16:B0:17:8E:C3:AA:1D:01:04:79:76
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/58FD405C678811EE8095007DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.60.0/23
                  113.203.210.0/24
                  113.203.212.0/22
                  113.203.218.0/24
                  113.203.220.0/24
                  113.203.222.0/24
                  113.203.227.0-113.203.228.255
                  113.203.233.0-113.203.240.255
                  113.203.245.0/24
                  113.203.248.0/24
                  113.203.252.0-113.203.254.255
                  180.178.128.0/23
                  180.178.132.0-180.178.139.255
                  180.178.147.0-180.178.149.255
                  180.178.161.0-180.178.162.255
                  180.178.164.0-180.178.168.255
                  180.178.172.0-180.178.178.255
                  180.178.180.0/22
                  180.178.185.0/24
                  180.178.187.0/24
                  180.178.189.0-180.178.191.255
                  223.29.226.0-223.29.231.255
                  223.29.235.0-223.29.238.255

    Signature Algorithm: sha256WithRSAEncryption
         bd:31:93:8e:1b:8e:17:a2:3a:00:64:23:26:18:ec:ef:3f:c8:
         f2:49:dc:d9:80:5b:b0:91:7d:06:72:f5:53:20:ba:55:9a:8a:
         47:8a:a4:a1:60:b2:4e:01:d4:2f:82:74:b1:7e:f8:9f:38:f9:
         f7:a4:dd:87:ec:e5:c1:c0:ef:b0:a5:e5:cd:c6:91:96:08:83:
         bc:4c:67:eb:14:38:3c:0c:d4:83:fc:08:27:1d:14:5c:f1:64:
         20:2a:c0:21:78:bf:1c:38:fd:c6:66:93:f0:6b:d7:49:f5:ee:
         65:b1:50:a0:0d:ec:8e:e6:f5:47:da:41:81:52:bb:2c:fb:7d:
         55:7c:86:b9:5b:67:bf:03:27:0f:2b:a4:95:fb:c8:72:7d:20:
         ef:64:87:bc:09:64:2b:c0:fe:d5:7f:a8:3b:86:9b:74:73:59:
         73:1c:ab:cc:a4:ec:a4:d2:a1:9c:ab:48:2e:56:6e:f7:04:6e:
         ca:e1:d6:44:93:65:49:9c:de:0e:d7:75:da:85:2c:a4:2f:e0:
         e8:48:7b:2d:10:16:8c:de:b7:0f:52:01:65:66:11:d4:2c:0c:
         bf:c4:f1:60:3c:64:ea:49:71:de:ea:c0:fa:70:8a:cc:93:c0:
         8c:5a:54:83:1a:9e:d4:a4:ea:d4:79:95:bb:27:d4:3f:76:18:
         ae:39:24:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 20:41:40 2023 by rpki-client on console-fra.rpki-client.org