Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/7D7995B8592111EEB92AD234C4F9AE02.roa
File:                     7D7995B8592111EEB92AD234C4F9AE02.roa (raw, json)
Hash identifier:          Ej8tVNY0V15VumHN2gSdWiNw30oU1RM0UY/talNF2sc=
Subject key identifier:   13:C4:36:03:62:C8:EA:16:CC:7C:08:91:4C:EF:59:6B:46:BA:10:46
Certificate issuer:       /CN=A91F715C/serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065
Certificate serial:       15
Authority key identifier: E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/7D7995B8592111EEB92AD234C4F9AE02.roa
Signing time:             Fri 22 Sep 2023 08:24:47 +0000
ROA not before:           Fri 22 Sep 2023 08:24:47 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        103.72.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Sep 2023 13:11:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F715C/serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065
        Validity
            Not Before: Sep 22 08:24:47 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=650d4f4f-72a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:90:25:c2:b2:cb:87:97:7f:b0:88:b8:62:
                    6d:8d:63:c5:6a:4a:b6:83:a2:b7:56:0b:9c:07:13:
                    47:4d:31:f7:f3:44:45:26:15:ee:44:af:7b:69:c0:
                    24:52:55:0d:c2:d7:f8:d9:0d:77:fe:76:a8:ea:76:
                    94:82:60:3e:79:39:09:ad:70:49:fa:9d:1f:19:cb:
                    de:b5:db:d1:e9:c2:1e:10:d7:08:cd:a5:b0:f3:03:
                    eb:45:5a:11:6c:c6:b1:1f:43:cb:0e:66:28:32:2a:
                    ba:80:4d:1a:cc:13:f8:80:ac:6d:97:78:f9:97:f5:
                    dc:5f:f5:cd:6d:f0:6d:a1:65:8f:49:22:5a:52:8a:
                    ce:46:a6:fe:82:bf:46:8d:fd:ba:19:40:50:67:94:
                    6d:4c:a4:b0:6e:4d:b1:62:12:e2:c9:64:c0:54:e5:
                    3b:66:ec:2b:0f:70:52:ba:ec:4b:b0:89:93:c1:c9:
                    22:e5:ac:a7:2c:7d:d8:cd:c2:fd:21:5c:ba:68:f8:
                    d0:e7:74:f7:33:f1:e5:25:66:da:0f:e5:4c:cc:3e:
                    14:84:9f:21:03:07:50:49:4f:44:e3:82:59:bc:f0:
                    04:41:9e:ed:1d:da:fb:5d:7e:48:3c:31:b2:93:77:
                    da:cf:c3:70:91:a8:1e:98:aa:56:3d:a5:f8:9e:2f:
                    16:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C4:36:03:62:C8:EA:16:CC:7C:08:91:4C:EF:59:6B:46:BA:10:46
            X509v3 Authority Key Identifier:
                keyid:E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/7D7995B8592111EEB92AD234C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:04:4d:ad:6c:38:03:24:89:c5:1e:84:be:13:d6:84:62:b1:
         87:ae:fa:9c:4b:97:18:73:d3:fc:ac:0e:8c:35:4f:33:1f:1a:
         a9:a2:f1:27:75:87:c5:49:50:15:79:21:96:c7:2d:15:e7:17:
         16:22:fe:8d:16:8a:81:e9:f7:ec:17:ff:59:60:5c:d6:ee:dd:
         1f:99:13:1b:09:1d:8c:08:d8:b1:36:cd:df:37:71:62:1f:5a:
         ae:c9:e3:dd:df:7d:d2:13:ca:96:9b:d4:e0:09:6b:83:d3:f7:
         f2:6a:9a:35:45:91:97:6e:c9:41:55:bb:62:31:7d:75:09:a6:
         27:4f:1c:70:a7:45:af:c1:09:e1:e7:6c:84:8d:fb:58:cb:b5:
         36:b7:2c:e6:5c:40:27:17:ef:17:8e:c7:fe:56:55:c2:2e:07:
         e2:81:26:60:47:ac:9a:61:7b:e3:72:dc:46:7b:ee:8b:80:ac:
         a8:35:a2:e0:ee:c1:4d:ea:5c:fa:ca:ea:5b:30:e9:7e:5a:09:
         c5:a6:cf:36:03:78:c0:1d:2c:a8:96:1e:82:91:a8:39:13:ce:
         6c:2b:f9:6a:02:8b:33:6c:2e:05:aa:1e:fa:33:7b:70:f9:2b:
         85:5e:06:83:54:b7:ca:fd:ce:bf:9b:42:2b:96:64:dd:48:3e:
         9d:53:af:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:38 2024 by rpki-client on console-ams.rpki-client.org