Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E330CA8CDCF511ED8458BD5BC4F9AE02.roa
File:                     E330CA8CDCF511ED8458BD5BC4F9AE02.roa (raw, json)
Hash identifier:          7LOv2fOJMZYYtRwJnf8U/++UUXa0U84eiCqfUuZ5QoQ=
Subject key identifier:   71:EC:B5:9D:86:F6:82:59:58:AE:A5:26:CD:83:36:BC:31:1C:8B:E0
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0B91
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E330CA8CDCF511ED8458BD5BC4F9AE02.roa
Signing time:             Thu 18 May 2023 13:09:40 +0000
ROA not before:           Thu 18 May 2023 13:09:40 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     131471
IP address blocks:        103.11.63.0/24 maxlen: 24
                          180.178.161.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2961 (0xb91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 18 13:09:40 2023 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=64662394-87f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ae:9a:cd:b0:94:e1:ef:01:96:9e:66:0c:85:
                    22:fc:05:37:38:ed:b6:e5:01:9d:e0:4a:6d:e2:2c:
                    67:a6:73:09:7c:cc:aa:55:7a:27:2d:5d:c7:ce:7c:
                    27:06:7b:ad:fd:e4:1a:36:82:80:bb:f7:bf:d3:ac:
                    78:d3:4e:18:41:54:fa:ed:b9:87:15:b2:24:91:53:
                    b5:44:fb:53:03:a7:97:98:c9:a5:49:29:53:0a:ae:
                    29:3c:ea:b5:c5:63:f9:6c:f2:da:80:9a:d1:b1:f5:
                    e8:7b:86:01:9c:d3:91:68:bf:4a:c0:a5:b9:54:ce:
                    59:56:98:16:44:17:83:a1:cc:30:06:76:7b:e9:f0:
                    b8:9a:f7:39:88:3f:d7:1c:b5:14:94:c3:8e:fc:10:
                    c4:bf:9c:d8:6e:29:a4:72:56:8f:b7:5b:b7:09:6c:
                    a6:00:05:3e:11:8c:39:47:a4:fc:73:62:aa:b8:3c:
                    ac:dc:7b:00:e3:fc:cc:56:0f:36:50:27:ef:44:2a:
                    48:d1:49:84:5b:a3:e5:75:be:16:69:a3:b6:04:9e:
                    6d:e6:34:da:47:3b:66:66:59:66:65:48:41:4f:25:
                    e6:84:71:3c:ef:87:82:ef:da:f3:9f:c9:23:2e:09:
                    e5:99:8d:52:09:52:a0:0c:3a:d2:15:33:e5:01:6a:
                    32:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EC:B5:9D:86:F6:82:59:58:AE:A5:26:CD:83:36:BC:31:1C:8B:E0
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E330CA8CDCF511ED8458BD5BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.63.0/24
                  180.178.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:e9:75:ff:3d:27:59:90:91:50:34:db:02:71:c9:1b:6a:6b:
         2b:4f:9c:07:80:7f:f4:c8:7b:16:17:33:ca:a4:cd:a6:be:bc:
         0a:6b:3b:ea:e6:90:55:9f:bf:84:82:90:fb:b3:79:f8:e2:c0:
         6c:a3:da:c0:05:11:ff:25:87:ab:9b:29:6c:8b:c8:e9:14:73:
         f3:e9:fc:cc:19:ea:04:5e:ec:8b:d0:a6:5d:58:da:31:56:7a:
         a2:2a:34:28:b4:db:11:67:93:ed:10:30:70:00:bf:70:d0:83:
         5a:d1:0e:52:1a:cd:91:fe:fa:ac:4c:36:62:2f:3b:6e:eb:5d:
         fe:37:80:45:47:9c:b9:e2:5e:ac:a3:fd:53:56:3b:8e:cd:20:
         ef:73:ec:99:be:30:fe:d3:76:d6:aa:1c:f7:ce:95:c6:45:40:
         a0:8b:1e:49:46:b8:66:e2:af:31:4c:dd:d3:ce:40:3c:a7:dd:
         d0:11:cc:bf:b9:4c:97:bc:03:a0:e9:d8:ea:7a:2c:4d:f7:85:
         70:8a:f9:5a:52:77:46:42:31:cc:16:33:79:de:6a:70:55:96:
         b4:f9:92:fb:8b:35:66:70:25:65:62:8f:d7:1f:52:f1:db:b5:
         24:0d:62:e0:67:6b:a7:20:05:73:81:cb:bb:45:4d:6e:b0:b8:
         86:e9:fe:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org