Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FA53D47604F911EE80553644C4F9AE02.roa
File:                     FA53D47604F911EE80553644C4F9AE02.roa (raw, json)
Hash identifier:          91UMyx5WYof3J0Yk4l0Ko3jU5SKt2mkgzKCxEW4dJBo=
Subject key identifier:   9F:1B:6F:0B:6B:B5:84:BC:CA:20:CF:34:EE:16:18:51:C0:C0:0E:68
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0C07
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FA53D47604F911EE80553644C4F9AE02.roa
Signing time:             Wed 07 Jun 2023 07:30:09 +0000
ROA not before:           Wed 07 Jun 2023 07:30:09 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        115.167.1.0/24 maxlen: 24
                          115.167.16.0/22 maxlen: 24
                          115.167.60.0/22 maxlen: 24
                          115.167.104.0/22 maxlen: 24
                          115.167.112.0/22 maxlen: 24
                          115.167.116.0/22 maxlen: 24
                          175.110.68.0/22 maxlen: 24
                          175.110.72.0/22 maxlen: 24
                          175.110.76.0/22 maxlen: 22
                          175.110.80.0/22 maxlen: 24
                          175.110.84.0/22 maxlen: 24
                          175.110.88.0/22 maxlen: 24
                          175.110.104.0/22 maxlen: 24
                          175.110.111.0/24 maxlen: 24
                          202.92.19.0/24 maxlen: 24
                          202.92.20.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3079 (0xc07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  7 07:30:09 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64803201-1805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c5:0d:63:d2:e9:b6:7d:a7:a0:72:69:4c:4b:
                    06:7a:22:85:fd:68:15:90:8b:44:48:06:8c:ca:52:
                    79:d7:f5:17:ea:98:18:79:e8:29:d5:a7:b4:a0:c0:
                    d2:62:f4:6d:06:6e:22:23:0c:21:8b:da:4d:d1:0b:
                    07:8f:11:e9:c7:ae:bc:5d:5b:81:d3:0c:18:ec:1f:
                    cd:75:7d:65:a4:61:40:2a:be:51:fe:9e:fa:5b:7d:
                    c9:e3:8c:50:05:fb:ec:9e:91:8c:fe:8c:82:37:2b:
                    9a:4d:e6:c8:45:82:bf:93:45:e4:67:af:b3:d9:7a:
                    28:a8:68:c1:96:ed:fd:08:1d:10:c3:39:88:d1:e3:
                    56:c3:b6:64:35:41:33:a1:dc:9b:4d:36:ec:e3:d2:
                    92:65:72:a7:ef:6b:68:fb:99:dd:d2:7b:ba:f1:a5:
                    45:38:ee:c1:98:30:e0:5c:3d:4c:62:8b:5b:34:3c:
                    ee:2b:28:be:ad:56:0e:88:6d:da:7e:3e:07:e2:bd:
                    e7:8e:42:d5:30:f4:2e:23:2c:3b:3e:c3:9a:88:bc:
                    3b:59:fb:f7:3b:1b:fe:75:1a:78:0d:9b:7c:82:ba:
                    72:7d:eb:69:bb:5b:cc:16:51:21:fe:2c:75:ef:5b:
                    08:7a:98:dd:a1:9b:8b:b6:22:d2:83:3c:92:12:65:
                    6b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1B:6F:0B:6B:B5:84:BC:CA:20:CF:34:EE:16:18:51:C0:C0:0E:68
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FA53D47604F911EE80553644C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.1.0/24
                  115.167.16.0/22
                  115.167.60.0/22
                  115.167.104.0/22
                  115.167.112.0/21
                  175.110.68.0-175.110.91.255
                  175.110.104.0/22
                  175.110.111.0/24
                  202.92.19.0-202.92.20.255

    Signature Algorithm: sha256WithRSAEncryption
         73:c1:f3:56:10:22:bd:db:8d:ca:b3:5d:0a:95:8b:cf:53:09:
         eb:d2:f7:d9:32:e1:07:f8:8a:33:c9:47:a7:e4:d8:e9:a9:3d:
         99:41:a7:ab:d9:55:26:11:b4:ce:3b:43:ac:fa:66:1e:a3:a5:
         f8:4c:60:50:c0:03:51:e1:81:8c:3a:fa:86:ba:e7:2b:53:e9:
         1f:76:e7:e7:3f:c5:55:58:2b:c5:c8:05:64:b3:60:60:92:16:
         70:13:73:58:42:4e:b8:f6:2d:65:a8:b7:e1:95:f5:33:b8:83:
         97:e6:cd:d2:45:93:20:bf:d6:1a:52:64:f2:8e:b5:be:10:da:
         b2:b8:4d:d1:1f:17:66:88:c3:c0:cf:a2:3d:dc:88:19:14:a3:
         2c:8a:1e:d8:fb:98:ad:eb:1e:5e:d8:6d:5a:a0:ea:c6:eb:c9:
         5b:36:80:63:da:8f:9b:8c:67:f8:fa:dd:24:05:6b:e2:ca:aa:
         80:8b:57:58:7f:27:df:b6:74:1b:c3:04:1d:4f:d1:b4:83:24:
         e5:a9:08:09:9c:1b:89:8d:99:ff:e2:f3:28:57:98:81:a2:be:
         9b:63:b9:e5:5a:60:3e:ce:69:cf:dc:96:bd:27:32:f6:92:1a:
         f3:ef:e9:d5:3d:66:1b:6f:1e:9b:d8:64:ee:4e:78:ee:2e:2e:
         1d:b0:e6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org