Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E722211881BA11ED88148F5EC4F9AE02.roa
File:                     E722211881BA11ED88148F5EC4F9AE02.roa (raw, json)
Hash identifier:          q+9eToZWvKVB/aCBMoBkGdAgZECwAHVvqQdhoOgSbVk=
Subject key identifier:   15:A8:D9:48:58:7A:C8:E5:17:94:69:33:3E:4A:2C:CF:0C:46:A6:6E
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0A29
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E722211881BA11ED88148F5EC4F9AE02.roa
Signing time:             Thu 22 Dec 2022 05:38:46 +0000
ROA not before:           Thu 22 Dec 2022 05:38:46 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        115.167.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2601 (0xa29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Dec 22 05:38:46 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=63a3ed66-b883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2c:92:2a:88:69:1d:4b:0f:44:62:e7:f0:a8:
                    7a:08:df:cd:90:06:3a:ac:fe:eb:23:59:c0:91:ef:
                    01:b6:d0:0e:b0:49:64:68:25:d2:fe:e0:fc:52:54:
                    7c:3d:76:af:3d:00:69:26:60:63:32:0b:1b:c7:c6:
                    46:bd:11:25:37:e7:27:e6:e1:01:cf:08:f0:d5:35:
                    ec:07:97:ae:64:6e:28:21:6c:83:3d:7a:9c:5d:78:
                    30:1c:f9:24:df:73:0d:29:aa:1a:0e:38:12:1e:00:
                    70:20:f8:29:62:20:12:f8:39:60:79:13:75:ea:8b:
                    2f:34:79:f9:60:3b:cd:82:eb:f3:57:a9:10:43:9f:
                    80:a7:ef:dd:52:d9:95:d9:a8:c9:29:7d:82:16:80:
                    30:1f:28:27:2a:e4:b2:92:f5:a2:60:5d:29:44:58:
                    cb:3b:93:99:90:59:64:87:38:ab:8e:4d:8e:2e:5e:
                    6c:6a:ab:c6:10:22:12:e0:b8:99:d6:37:38:99:15:
                    ce:e5:a3:df:17:bd:f3:65:3f:56:e8:b3:02:2a:cf:
                    70:a5:7d:f6:fb:dd:dc:4d:9c:4e:55:22:24:8a:29:
                    91:9c:1e:21:38:08:39:5c:25:dd:76:b7:92:8d:c0:
                    df:96:81:9b:a7:e3:1a:ef:b0:5f:de:25:cc:7c:b9:
                    3a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A8:D9:48:58:7A:C8:E5:17:94:69:33:3E:4A:2C:CF:0C:46:A6:6E
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E722211881BA11ED88148F5EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:8c:c0:fe:e1:82:a6:f1:c3:c1:30:06:04:f7:87:83:01:ac:
         ef:3d:a0:ea:37:a4:80:5f:3e:d5:f7:f4:46:48:75:c2:93:d3:
         bc:a9:04:ec:15:78:8b:d8:7e:92:b2:7b:98:45:9b:70:f1:aa:
         92:97:5e:0b:58:39:28:78:fc:e5:a7:eb:67:0d:d3:50:69:f3:
         12:72:98:3e:da:25:ee:25:19:f9:02:61:24:fc:fa:ea:7e:61:
         a8:01:c9:5e:08:2a:ae:4f:03:b2:2a:69:bf:ec:e7:7f:49:27:
         0b:e3:dc:4d:fb:e2:10:aa:ee:ad:88:4f:1c:dd:68:ec:90:72:
         55:2d:4d:8f:ad:95:06:fd:b0:b2:5e:15:0a:67:ab:d1:19:e3:
         6f:cb:b9:2d:24:c9:04:30:c4:73:58:51:2b:32:55:a0:1b:6f:
         79:33:2a:47:1b:d1:fa:7f:61:38:b2:51:43:70:0c:df:33:e3:
         18:3c:3b:dc:5d:d7:31:6e:a2:3d:60:ad:da:66:f5:19:f6:d4:
         4b:c0:47:b2:41:47:0c:ce:6e:24:6a:5f:06:49:f4:32:be:fa:
         ad:e9:83:7c:0d:c4:49:e7:d9:3a:b7:89:fd:da:2e:77:22:86:
         9e:d9:b4:75:1e:74:0c:63:0e:e7:6f:fb:be:ed:3a:30:02:60:
         0a:73:29:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-ams.rpki-client.org