Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313435353a3a2f34382d3438203d3e20313437303230.roa
File:                     323430313a323036303a313435353a3a2f34382d3438203d3e20313437303230.roa (raw, json)
Hash identifier:          C4oJT5IHHPPpX8zAibXHwGdRduHc7q7JdNmUP6C2M0Q=
Subject key identifier:   4D:8A:65:D2:36:8D:44:08:92:79:96:C5:5D:E0:F6:2A:95:16:58:27
Certificate issuer:       /CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F
Certificate serial:       755C451C9AA606738776F933EE03287327CF1928
Authority key identifier: 62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313435353a3a2f34382d3438203d3e20313437303230.roa
Signing time:             Wed 10 Apr 2024 22:55:42 +0000
ROA not before:           Wed 10 Apr 2024 22:50:42 +0000
ROA not after:            Wed 09 Apr 2025 22:55:42 +0000
asID:                     147020
IP address blocks:        2401:2060:1455::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 01 Jun 2024 22:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:5c:45:1c:9a:a6:06:73:87:76:f9:33:ee:03:28:73:27:cf:19:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F
        Validity
            Not Before: Apr 10 22:50:42 2024 GMT
            Not After : Apr  9 22:55:42 2025 GMT
        Subject: CN=4D8A65D2368D4408927996C55DE0F62A95165827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:5e:af:53:29:86:7f:50:39:2f:6e:2d:b7:
                    e5:25:08:77:fd:89:c9:29:bf:e7:df:e9:bc:3a:d1:
                    c2:44:a8:48:db:1f:8d:dd:b8:a4:a5:da:91:c6:b3:
                    26:a5:62:5e:ea:e5:f5:33:3f:d6:56:3b:10:d1:58:
                    01:4c:2b:4c:80:a3:43:a4:2b:77:7f:3e:1c:5a:2a:
                    02:50:f6:4c:63:cf:b4:ee:4e:46:de:13:eb:91:75:
                    61:63:5f:25:88:92:f3:c1:88:ff:96:f3:0a:f4:81:
                    97:70:d9:b8:50:2d:02:fa:26:fa:8d:13:d1:0d:2c:
                    38:93:5e:ef:8a:63:fb:64:71:aa:97:47:3f:2c:c8:
                    8a:22:f1:48:fd:7c:7e:ce:dc:09:c1:d5:af:3a:cc:
                    78:35:b1:a7:0a:18:cf:1f:a8:45:b0:ff:05:0b:8f:
                    d0:4c:73:77:42:45:2c:27:38:ff:3e:02:3d:da:50:
                    4c:fb:34:a4:a3:ab:86:c5:f8:3d:b5:14:17:0d:76:
                    8c:2c:79:7e:5b:04:b1:ea:4d:77:0b:18:13:7a:9d:
                    a2:ed:d4:9c:55:ec:31:39:97:28:6d:d2:e8:31:5c:
                    c2:96:89:98:9c:f7:76:9f:99:00:62:c3:59:67:9b:
                    eb:14:e7:c6:f2:4e:4d:d8:a3:ae:80:8d:8f:ba:bb:
                    8e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8A:65:D2:36:8D:44:08:92:79:96:C5:5D:E0:F6:2A:95:16:58:27
            X509v3 Authority Key Identifier:
                keyid:62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313435353a3a2f34382d3438203d3e20313437303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2060:1455::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:f9:4b:d5:a1:68:45:a3:b5:df:6d:9e:c0:fc:b4:ec:92:ab:
         dd:b1:b3:b2:46:9d:c7:ba:be:86:ff:4e:96:de:ac:4e:46:e1:
         bb:b9:77:67:68:b8:f6:89:6d:b8:24:a8:a2:c9:65:16:aa:95:
         85:ed:58:86:e8:b4:ef:40:08:53:57:e8:1d:6c:1d:1f:f5:51:
         b8:21:af:51:24:26:13:49:16:32:e5:3e:4b:2e:58:73:10:7b:
         4d:c8:25:a7:0b:b1:ba:a5:fb:4f:93:9f:69:58:bb:8d:58:a2:
         11:55:e2:4e:14:ed:0c:3c:d2:02:79:ed:19:f5:e6:76:b4:0f:
         46:56:a9:6e:7f:7d:29:6e:5d:d7:3e:04:22:27:d5:f2:ac:be:
         d8:1f:f8:5c:30:b5:8d:77:f5:43:c6:1a:5d:95:c0:ac:fc:fb:
         78:1e:64:1e:f3:10:08:e0:29:a3:ae:6c:d6:24:a4:59:79:c5:
         e4:2a:88:55:85:85:8b:b2:da:fb:27:d4:fa:75:0b:6d:d0:fc:
         81:81:62:78:5d:41:4f:37:ea:3f:cd:05:3c:f2:41:4d:cc:0c:
         eb:4b:f9:7e:38:07:ee:67:4e:f5:27:7c:5b:4f:a0:a1:4c:3f:
         d3:9a:06:51:10:bd:7c:9c:dd:cf:e4:d2:53:28:a8:97:30:21:
         80:de:58:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org