Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32362e302f32342d3234203d3e20323131343332.roa
File:                     3130332e3137352e32362e302f32342d3234203d3e20323131343332.roa (raw, json)
Hash identifier:          EcfAHsE5R2xJh7pFclTuYc4qclfymWCH+8ksW9wWHbQ=
Subject key identifier:   27:04:85:3F:93:B8:57:27:9A:EF:AC:9A:F6:80:9C:F8:7B:B8:AA:3B
Certificate issuer:       /CN=A91BE6D70000/serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB
Certificate serial:       41C482B05593EDB7EB1E69B4E6E90A1F9CB2351A
Authority key identifier: BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32362e302f32342d3234203d3e20323131343332.roa
Signing time:             Thu 30 Nov 2023 07:58:06 +0000
ROA not before:           Thu 30 Nov 2023 07:53:06 +0000
ROA not after:            Thu 28 Nov 2024 07:58:06 +0000
asID:                     211432
IP address blocks:        103.175.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Apr 2024 10:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c4:82:b0:55:93:ed:b7:eb:1e:69:b4:e6:e9:0a:1f:9c:b2:35:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE6D70000/serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB
        Validity
            Not Before: Nov 30 07:53:06 2023 GMT
            Not After : Nov 28 07:58:06 2024 GMT
        Subject: CN=2704853F93B857279AEFAC9AF6809CF87BB8AA3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:72:5b:13:ce:43:e3:96:4b:83:90:db:c8:0a:
                    c4:e6:bf:95:32:44:b5:65:a9:62:de:e4:20:44:e6:
                    34:03:6c:b1:97:5e:cd:c0:1c:4d:5c:39:7c:2b:7e:
                    32:56:f4:04:9a:7a:46:94:26:c0:bd:8d:75:63:5e:
                    5d:86:93:94:a5:de:af:44:19:97:89:ba:0c:b2:dc:
                    cb:d5:d8:73:80:75:7f:f4:d1:e0:cd:70:e3:3b:9f:
                    30:a0:c4:99:e9:18:4f:bd:12:d4:0d:c5:71:bb:fc:
                    aa:c8:ac:97:57:3d:62:a9:3b:6b:14:ee:43:20:72:
                    dc:43:92:40:4d:5b:d0:71:c3:2a:23:d3:7d:50:b0:
                    12:8e:a6:f3:05:6c:42:e4:a8:ae:6c:1e:a2:4e:0d:
                    cf:09:ff:09:6c:e3:59:f6:99:4b:f6:44:bc:18:61:
                    cb:48:f4:a3:bf:1c:8f:18:59:0f:0b:00:5e:ef:e2:
                    dd:30:ab:3a:8e:a0:66:d2:97:84:3c:04:0e:a9:3d:
                    a9:04:b1:a1:f6:21:60:73:72:08:c4:dc:df:c8:15:
                    1a:8c:e5:b4:b6:23:15:a8:1e:70:fe:a8:20:54:48:
                    11:90:88:c3:cf:d4:b3:06:fb:65:ac:99:6e:84:ff:
                    cb:e0:ce:df:8c:7e:2f:65:4e:c2:ca:98:b7:06:81:
                    01:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:04:85:3F:93:B8:57:27:9A:EF:AC:9A:F6:80:9C:F8:7B:B8:AA:3B
            X509v3 Authority Key Identifier:
                keyid:BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32362e302f32342d3234203d3e20323131343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:cd:3c:b1:04:e2:31:25:7c:bd:da:cc:69:18:68:29:c3:b2:
         66:de:d7:ec:6d:b0:61:ca:2b:34:86:59:d2:f5:06:a6:ae:a0:
         11:5c:d3:91:61:e2:f5:02:f2:59:aa:14:cb:23:b8:63:ec:66:
         2d:b5:c3:6e:11:34:da:21:f7:2e:27:57:ba:11:3d:47:c6:fe:
         3d:e3:43:3d:4b:06:9f:b0:eb:c5:31:26:e8:a3:52:11:9d:34:
         6a:ae:a7:7b:9a:3d:66:66:93:3e:b4:3f:50:33:42:72:b8:fc:
         4a:5d:72:b6:24:90:1e:cf:24:d5:8a:f0:fa:8a:45:b6:06:48:
         9a:bb:bd:96:33:c5:3e:55:b9:2f:9c:8f:b0:97:98:36:c4:64:
         97:02:79:cc:2b:64:00:cf:5f:f8:80:5f:a7:7d:a9:95:ac:fc:
         63:f9:95:3a:20:b1:4d:d1:87:3d:87:54:0d:63:a0:a5:84:74:
         6e:00:99:f4:b2:0a:e3:e6:fa:d5:16:b2:d7:bc:c9:b8:c7:fc:
         01:10:97:0c:cc:e1:cf:5a:0b:ca:aa:99:d2:7b:ee:07:b8:10:
         19:c4:83:32:07:06:dc:f0:00:56:24:6e:75:55:54:c5:18:43:
         a3:f1:49:7e:d7:2d:34:82:ed:cf:a8:4c:fe:aa:be:6e:75:99:
         b9:4d:55:27
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUQcSCsFWT7bfrHmm05ukKH5yyNRowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkU2RDcwMDAwMTEwLwYDVQQFEyhCRURFREQwQUJD
MUFGMjkzN0VEMzFEMzYwMzNCN0NBQjA0OEI4OUJCMB4XDTIzMTEzMDA3NTMwNloX
DTI0MTEyODA3NTgwNlowMzExMC8GA1UEAxMoMjcwNDg1M0Y5M0I4NTcyNzlBRUZB
QzlBRjY4MDlDRjg3QkI4QUEzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANJyWxPOQ+OWS4OQ28gKxOa/lTJEtWWpYt7kIETmNANssZdezcAcTVw5fCt+
Mlb0BJp6RpQmwL2NdWNeXYaTlKXer0QZl4m6DLLcy9XYc4B1f/TR4M1w4zufMKDE
mekYT70S1A3Fcbv8qsisl1c9Yqk7axTuQyBy3EOSQE1b0HHDKiPTfVCwEo6m8wVs
QuSormweok4Nzwn/CWzjWfaZS/ZEvBhhy0j0o78cjxhZDwsAXu/i3TCrOo6gZtKX
hDwEDqk9qQSxofYhYHNyCMTc38gVGozltLYjFagecP6oIFRIEZCIw8/Uswb7ZayZ
boT/y+DO34x+L2VOwsqYtwaBAXMCAwEAAaOCAhQwggIQMB0GA1UdDgQWBBQnBIU/
k7hXJ5rvrJr2gJz4e7iqOzAfBgNVHSMEGDAWgBS+3t0KvBryk37THTYDO3yrBIuJ
uzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFCRTZENzAwMDAvMC9CRURFREQw
QUJDMUFGMjkzN0VEMzFEMzYwMzNCN0NBQjA0OEI4OUJCLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92dDdkQ3J3YThw
Ti0weDAyQXp0OHF3U0xpYnMuY2VyMIGOBggrBgEFBQcBCwSBgTB/MH0GCCsGAQUF
BzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MUJF
NkQ3MDAwMC8wLzMxMzAzMzJlMzEzNzM1MmUzMjM2MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzIzMTMxMzQzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ68aMA0GCSqGSIb3DQEBCwUA
A4IBAQBazTyxBOIxJXy92sxpGGgpw7Jm3tfsbbBhyis0hlnS9QamrqARXNORYeL1
AvJZqhTLI7hj7GYttcNuETTaIfcuJ1e6ET1Hxv4940M9SwafsOvFMSboo1IRnTRq
rqd7mj1mZpM+tD9QM0JyuPxKXXK2JJAezyTVivD6ikW2Bkiau72WM8U+VbkvnI+w
l5g2xGSXAnnMK2QAz1/4gF+nfamVrPxj+ZU6ILFN0Yc9h1QNY6ClhHRuAJn0sgrj
5vrVFrLXvMm4x/wBEJcMzOHPWgvKqpnSe+4HuBAZxIMyBwbc8ABWJG51VVTFGEOj
8Ul+1y00gu3PqEz+qr5udZm5TVUn
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org