Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32362e302f32342d3234203d3e20323132333335.roa
File:                     3130332e3137352e32362e302f32342d3234203d3e20323132333335.roa (raw, json)
Hash identifier:          POQElOeC5uAiq7VE38Aw1inZQYAEDxwNs3WB93Fd5h4=
Subject key identifier:   12:DB:E5:DA:DC:30:D6:C2:E4:79:80:C7:C1:61:3C:C1:8D:9F:B0:AD
Certificate issuer:       /CN=A91BE6D70000/serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB
Certificate serial:       3C87AAAB715CED7CF26B4107D3DA6C30FF242EAC
Authority key identifier: BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32362e302f32342d3234203d3e20323132333335.roa
Signing time:             Thu 27 Jul 2023 08:57:37 +0000
ROA not before:           Thu 27 Jul 2023 08:52:37 +0000
ROA not after:            Thu 25 Jul 2024 08:57:37 +0000
asID:                     212335
IP address blocks:        103.175.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Apr 2024 10:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:87:aa:ab:71:5c:ed:7c:f2:6b:41:07:d3:da:6c:30:ff:24:2e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE6D70000/serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB
        Validity
            Not Before: Jul 27 08:52:37 2023 GMT
            Not After : Jul 25 08:57:37 2024 GMT
        Subject: CN=12DBE5DADC30D6C2E47980C7C1613CC18D9FB0AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:08:4f:24:99:b4:c8:5b:f7:6c:eb:e1:b3:ae:
                    6d:cc:49:88:c5:48:0a:b8:7f:31:08:d8:6d:f0:dd:
                    d1:39:58:14:aa:c9:8d:a1:c0:f7:5c:8d:be:86:2a:
                    36:19:4c:90:45:ea:a6:c7:80:46:8c:62:73:b1:b4:
                    fc:82:7c:c4:35:b4:02:b2:bc:f7:27:ea:20:bb:ed:
                    c3:bf:6e:df:62:64:03:55:73:e3:d6:a1:6e:28:eb:
                    9a:92:d8:e3:c0:6f:91:1f:b9:6b:80:b3:4e:85:3b:
                    7d:a4:b3:2b:05:42:7e:47:9b:0d:09:18:db:5a:c9:
                    16:3c:8d:b1:cb:41:7f:a3:93:cb:bf:43:e7:7d:e3:
                    6e:1e:4a:e8:37:18:bc:7f:a8:38:65:33:c8:71:75:
                    1c:40:73:f4:45:9f:30:0e:56:57:42:7b:5c:f3:d4:
                    ff:41:62:d7:df:eb:34:ca:26:11:fa:89:c4:fe:ac:
                    70:24:44:9a:09:f5:40:57:a0:93:c3:af:d4:cc:2a:
                    10:98:ce:33:46:57:45:84:57:5e:dd:3c:d0:bc:5d:
                    94:6d:0b:e0:24:33:cb:6e:3d:f4:af:d2:0d:53:bc:
                    7c:75:1b:c3:f0:b2:cb:bc:95:53:66:f5:f7:83:53:
                    4f:ec:05:26:6d:05:d9:da:bb:55:97:20:5f:80:be:
                    e2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DB:E5:DA:DC:30:D6:C2:E4:79:80:C7:C1:61:3C:C1:8D:9F:B0:AD
            X509v3 Authority Key Identifier:
                keyid:BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32362e302f32342d3234203d3e20323132333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:c4:32:3e:c8:32:17:fa:57:e1:9b:cb:39:d6:72:9c:59:a3:
         64:69:28:04:7c:36:23:78:77:c1:ea:82:08:b3:bc:a9:04:ae:
         aa:63:bf:94:c1:76:21:7d:c7:30:fd:c7:c4:a7:50:9e:1a:85:
         8b:bf:5e:84:df:0d:dc:c7:f0:68:45:41:13:94:ee:d2:da:8c:
         05:fc:5c:90:a3:45:58:6c:38:81:55:87:8b:bc:40:f0:38:1a:
         17:18:aa:31:56:d5:dc:d5:8c:31:3e:ce:84:b2:8a:7c:ee:3f:
         ca:00:52:c5:41:98:08:d5:3e:e6:e0:7e:ce:cb:6f:fc:66:fe:
         62:bc:4e:25:f9:0f:e8:9d:77:56:9c:21:8a:d6:24:c9:6c:f8:
         0f:04:1d:09:81:f2:7a:f3:0c:15:37:61:70:b4:ad:93:9c:97:
         48:c4:75:30:e7:db:b8:8c:49:00:9e:37:c0:b9:09:9e:06:3a:
         4d:fd:aa:ef:00:88:69:b3:6f:df:05:ff:cc:4f:51:65:80:31:
         0b:42:73:44:8b:45:ea:05:cc:59:af:23:8e:c0:f7:b5:8a:0e:
         ef:7f:a2:f5:57:4c:e0:66:08:05:78:f6:f0:4d:83:d6:df:d0:
         a8:0e:92:23:0b:df:44:f3:64:c1:8b:b2:51:3a:b1:7b:30:4b:
         23:c3:1a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:51 2024 by rpki-client on console-ams.rpki-client.org