Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/71C7BCBCDF6A11EDA2793924C4F9AE02.roa
File:                     71C7BCBCDF6A11EDA2793924C4F9AE02.roa (raw, json)
Hash identifier:          b6OJhie0SpC2J4jXL/gH6Y2L4q72BVf+/1mf0NEyj2w=
Subject key identifier:   BD:37:04:AB:06:B4:26:F0:7B:35:86:29:07:64:8B:B7:C4:95:A8:0D
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0BC2
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/71C7BCBCDF6A11EDA2793924C4F9AE02.roa
Signing time:             Wed 24 May 2023 23:25:33 +0000
ROA not before:           Wed 24 May 2023 23:25:33 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     149419
IP address blocks:        113.203.217.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Mar 2024 15:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3010 (0xbc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 24 23:25:33 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=646e9ced-b459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:78:d5:55:34:f3:0e:54:49:d1:85:ea:60:
                    e9:e8:b4:cf:ac:39:d6:10:42:ba:a8:51:92:42:fb:
                    48:d0:49:45:2c:87:33:b1:c5:d9:b0:82:7d:e9:5e:
                    44:57:64:ce:8c:3e:99:3e:59:cd:5f:0e:c7:03:4f:
                    93:15:9b:9e:76:3f:73:fc:44:3d:c5:44:34:7e:ab:
                    82:3c:6b:4c:8e:92:08:ea:5a:39:bc:a6:05:0d:72:
                    fb:e2:22:2c:8c:ce:82:c0:97:fc:ba:47:d1:be:46:
                    f6:11:e8:8a:4e:f8:e3:0a:8d:68:cc:88:b4:04:e9:
                    47:d7:8e:26:07:ac:37:ef:4b:19:d0:ad:e1:d1:8a:
                    76:a3:f5:18:fc:e3:d4:f1:d2:3e:78:72:4d:10:fc:
                    a5:94:35:b9:ab:f4:2f:72:ed:6a:75:d6:c0:66:12:
                    58:18:af:a6:71:17:9c:31:5a:bd:ec:b8:04:f6:d4:
                    ee:1a:11:1f:c3:80:be:e1:68:f9:4a:7a:06:80:30:
                    86:00:78:a5:82:db:99:ba:84:75:2f:71:c1:9d:ef:
                    7c:5c:83:ac:50:57:16:6a:18:8f:ae:de:50:9b:0f:
                    1b:23:06:dc:b5:10:9a:f2:be:0d:66:b0:56:2c:ab:
                    36:d7:af:a6:3a:38:f8:91:0a:e4:6c:f7:7d:7b:08:
                    4f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:37:04:AB:06:B4:26:F0:7B:35:86:29:07:64:8B:B7:C4:95:A8:0D
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/71C7BCBCDF6A11EDA2793924C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:65:a3:90:47:f4:da:b3:b0:d6:83:7d:6f:21:f9:a9:f4:f2:
         27:90:ac:3a:93:e9:f2:15:e0:56:7c:19:c4:a9:95:63:00:fe:
         89:a6:a1:08:b9:97:1c:03:d4:12:29:16:12:7f:4e:68:42:16:
         fc:14:0b:4b:ad:3f:54:9d:41:b3:42:c5:81:89:d8:fe:1e:d0:
         06:f5:9f:a5:9e:5f:be:cb:42:fc:a6:b4:ab:9f:4c:cf:92:69:
         c3:ad:70:01:a1:c0:b1:90:e8:c7:f4:7a:ab:5f:c6:d9:31:74:
         1f:0a:d1:97:e3:ee:e7:b3:1a:67:67:1d:d3:98:79:d4:04:b0:
         8a:b0:8e:52:d3:92:db:ab:b6:74:66:bf:84:72:06:6e:e8:9a:
         2a:42:7b:0d:4b:35:1c:f4:c8:e5:e1:ae:6b:81:7c:87:0c:fe:
         e8:37:0a:66:8f:e4:43:88:3b:94:fd:bc:ff:89:46:98:6a:41:
         ad:54:c5:a1:c9:57:0e:ec:af:43:0d:f4:f3:60:f5:45:71:7b:
         f3:62:97:2f:8e:24:d2:31:38:26:17:dd:d4:65:ec:48:8a:67:
         83:eb:01:a0:c0:30:79:95:41:9d:8f:a3:c2:53:e2:af:95:91:
         90:b7:84:1b:1a:0e:76:21:e3:5e:bc:01:db:e4:60:a1:1f:5d:
         45:12:f0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 19:43:28 2024 by rpki-client on console-fra.rpki-client.org