Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C8C30C42F64D11EE97FFF677C4F9AE02.roa
File:                     C8C30C42F64D11EE97FFF677C4F9AE02.roa (raw, json)
Hash identifier:          gxefkySrDL+qTbhZZhOyiNoi7znUWM+dnWxqtmIhwOY=
Subject key identifier:   B9:65:D2:DF:B0:67:07:F1:B0:A2:46:AC:E2:44:13:C4:49:8E:C2:60
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       102F
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C8C30C42F64D11EE97FFF677C4F9AE02.roa
Signing time:             Tue 09 Apr 2024 08:47:24 +0000
ROA not before:           Tue 09 Apr 2024 08:47:24 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     5650
IP address blocks:        175.110.104.0/22 maxlen: 23
                          175.110.104.0/24 maxlen: 24
                          175.110.106.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 19 Apr 2024 05:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4143 (0x102f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Apr  9 08:47:24 2024 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6615009b-4ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7b:bd:a7:b9:c3:68:e4:36:3b:d2:cb:62:d9:
                    8d:76:fa:dd:ff:63:f0:5b:81:a2:54:2f:c4:3b:ff:
                    34:3a:de:dc:8d:d7:1e:96:8c:3d:2d:1d:89:6e:60:
                    38:8d:d6:2c:e5:32:fa:4b:99:5e:15:2b:c5:14:eb:
                    21:cf:ff:fa:0b:83:3d:ff:97:8b:dc:e3:6f:47:d7:
                    1e:89:5f:74:ef:14:d3:cc:58:13:de:a5:a5:a2:db:
                    fa:be:9f:da:60:fb:9e:70:30:bc:35:d7:ba:c7:4b:
                    8a:d4:0a:5f:0a:f5:8c:82:22:76:81:48:85:a1:d4:
                    82:40:8d:9d:5b:2f:73:b2:67:f2:de:3b:f6:cd:bc:
                    e3:0a:06:6d:55:a6:58:f9:f3:d9:6e:fd:4b:47:a2:
                    84:d9:b3:cc:0c:5f:7a:1e:01:05:57:a6:c5:90:f0:
                    10:27:cf:35:cc:f0:ee:35:5e:08:da:89:85:20:94:
                    7d:d2:cb:58:11:a3:ec:ae:66:1e:de:8b:cc:a1:1a:
                    fe:b0:38:66:9f:bd:a1:8c:61:39:5b:69:17:c6:42:
                    f8:20:79:7e:0e:51:ed:83:95:0f:b1:1e:16:94:ee:
                    fd:53:d8:25:8e:a1:0c:9c:82:5f:a4:bf:cb:46:66:
                    74:d1:36:f4:96:ae:7b:32:6c:9a:60:d9:ab:5a:81:
                    48:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:65:D2:DF:B0:67:07:F1:B0:A2:46:AC:E2:44:13:C4:49:8E:C2:60
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C8C30C42F64D11EE97FFF677C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.110.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:e7:e9:d3:96:e9:80:86:1e:98:5e:6c:4e:86:55:67:73:b8:
         63:a6:68:3c:2b:db:e6:e3:e0:4a:70:ff:e3:2c:c2:36:ae:4b:
         e6:a3:d7:f3:54:32:74:26:3d:91:0b:e0:17:06:6c:f1:50:4e:
         71:c1:fc:d8:b5:8d:68:70:75:d0:18:bf:54:88:cf:65:47:b9:
         13:64:08:91:f4:9c:9d:de:69:3f:d8:44:7c:19:f1:b5:a1:4c:
         2a:06:5b:ca:a7:d2:de:ed:b9:98:69:bd:11:8e:35:c4:b6:41:
         97:99:e0:8d:6c:db:12:7a:ee:ad:09:7e:4b:74:51:84:b8:93:
         56:49:f4:ab:62:05:53:26:58:e1:89:50:40:6d:6c:30:72:0e:
         bb:25:24:5d:7f:97:29:e5:fc:b2:66:c9:03:f8:ac:e9:18:de:
         f6:1a:2f:77:ee:da:c9:bc:0a:cb:12:6b:60:47:a6:8a:e0:74:
         2a:1b:4c:f2:c8:0b:a0:35:03:30:81:05:c5:a9:2a:67:0d:74:
         15:e9:28:0f:1e:ae:73:bb:0b:d8:c9:8c:31:da:e7:35:e4:8e:
         f0:14:7d:51:3f:b6:6c:c2:2a:37:ce:11:32:db:1a:aa:10:02:
         08:9a:1a:2a:39:59:4e:ff:e4:34:03:29:9b:a4:f3:90:43:b1:
         84:86:f0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 05:55:18 2024 by rpki-client on console-fra.rpki-client.org