Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6B6025EEA0CA11EFAA122A3DC4F9AE02.roa
File:                     6B6025EEA0CA11EFAA122A3DC4F9AE02.roa (raw, json)
Hash identifier:          R8ST+XUL8ovW51KplqiMkTah8K/9fmmCDobpE7qbGck=
Subject key identifier:   AA:A2:4A:E6:91:88:55:FF:D1:F2:CE:AE:CA:C7:3E:F7:81:1C:19:99
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       1C2D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6B6025EEA0CA11EFAA122A3DC4F9AE02.roa
Signing time:             Tue 12 Nov 2024 07:47:52 +0000
ROA not before:           Tue 12 Nov 2024 07:47:52 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     138241
IP address blocks:        43.226.224.0/22 maxlen: 24
                          103.11.63.0/24 maxlen: 24
                          113.203.208.0/24 maxlen: 24
                          113.203.212.0/24 maxlen: 24
                          113.203.231.0/24 maxlen: 24
                          113.203.233.0/24 maxlen: 24
                          113.203.241.0/24 maxlen: 24
                          113.203.242.0/24 maxlen: 24
                          113.203.245.0/24 maxlen: 24
                          113.203.246.0/24 maxlen: 24
                          115.167.6.0/24 maxlen: 24
                          115.167.16.0/22 maxlen: 22
                          115.167.29.0/24 maxlen: 24
                          115.167.30.0/24 maxlen: 24
                          115.167.31.0/24 maxlen: 24
                          115.167.48.0/24 maxlen: 24
                          115.167.64.0/24 maxlen: 24
                          115.167.65.0/24 maxlen: 24
                          115.167.66.0/24 maxlen: 24
                          115.167.67.0/24 maxlen: 24
                          115.167.73.0/24 maxlen: 24
                          115.167.102.0/24 maxlen: 24
                          115.167.124.0/24 maxlen: 24
                          115.167.125.0/24 maxlen: 24
                          175.110.64.0/22 maxlen: 22
                          175.110.89.0/24 maxlen: 24
                          175.110.91.0/24 maxlen: 24
                          180.178.142.0/24 maxlen: 24
                          180.178.146.0/24 maxlen: 24
                          180.178.151.0/24 maxlen: 24
                          180.178.161.0/24 maxlen: 24
                          180.178.162.0/24 maxlen: 24
                          180.178.188.0/24 maxlen: 24
                          202.92.26.0/24 maxlen: 24
                          223.29.225.0/24 maxlen: 24
                          223.29.227.0/24 maxlen: 24
                          223.29.228.0/24 maxlen: 24
                          223.29.229.0/24 maxlen: 24
                          223.29.230.0/24 maxlen: 24
                          223.29.239.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 13 Nov 2024 07:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7213 (0x1c2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Nov 12 07:47:52 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=67330827-757c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:22:5b:7f:b0:46:fd:37:63:53:b2:4c:83:
                    bc:0b:8d:9c:32:69:8f:d3:15:92:59:b6:4e:12:1f:
                    4f:7f:a5:1b:a0:3d:9f:82:87:26:eb:74:85:22:24:
                    06:3c:de:c1:90:34:0f:e1:10:e2:ac:16:b8:cd:9c:
                    28:48:3d:87:43:70:c3:35:56:5a:62:23:52:26:36:
                    94:4d:ab:71:65:9c:2b:19:fb:68:68:d6:e6:5c:e5:
                    0d:0d:f5:2f:9a:6e:b7:3c:f8:d1:d8:17:d5:08:49:
                    c2:8d:c3:89:f4:1e:22:8c:73:a6:a6:5b:d9:07:f4:
                    84:17:3b:eb:5a:ac:54:de:aa:b1:c5:5d:f9:18:3f:
                    6f:23:4c:4a:0b:d3:df:52:77:71:ab:48:28:7d:05:
                    e0:34:bb:5d:84:38:b8:70:3a:17:5b:33:3d:ef:b4:
                    0c:84:8c:de:80:2a:ad:05:c7:01:05:59:c2:18:36:
                    4f:d8:03:35:14:64:ad:6d:e4:0e:48:ef:71:e2:fb:
                    50:34:18:f6:71:7f:3e:83:49:7f:4f:bc:97:09:07:
                    b5:96:d6:6f:28:5a:0c:e1:96:6d:c7:7f:be:09:c0:
                    a8:c3:8b:e9:c1:ad:dd:74:67:47:6e:6a:02:cb:5b:
                    24:74:bd:dd:ca:74:e1:07:ae:31:7c:e8:a2:8c:a2:
                    22:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A2:4A:E6:91:88:55:FF:D1:F2:CE:AE:CA:C7:3E:F7:81:1C:19:99
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6B6025EEA0CA11EFAA122A3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.224.0/22
                  103.11.63.0/24
                  113.203.208.0/24
                  113.203.212.0/24
                  113.203.231.0/24
                  113.203.233.0/24
                  113.203.241.0-113.203.242.255
                  113.203.245.0-113.203.246.255
                  115.167.6.0/24
                  115.167.16.0/22
                  115.167.29.0-115.167.31.255
                  115.167.48.0/24
                  115.167.64.0/22
                  115.167.73.0/24
                  115.167.102.0/24
                  115.167.124.0/23
                  175.110.64.0/22
                  175.110.89.0/24
                  175.110.91.0/24
                  180.178.142.0/24
                  180.178.146.0/24
                  180.178.151.0/24
                  180.178.161.0-180.178.162.255
                  180.178.188.0/24
                  202.92.26.0/24
                  223.29.225.0/24
                  223.29.227.0-223.29.230.255
                  223.29.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:f1:f7:a0:e9:27:dd:72:80:9b:ee:f8:97:3d:ca:8f:24:7b:
         ee:f6:0e:88:08:bf:c3:e9:70:04:04:7f:ff:78:96:52:7b:b1:
         cb:4e:13:7e:87:0a:74:2d:48:3f:d4:2c:f6:6a:d2:f2:8a:6c:
         7c:3d:54:d1:bd:77:50:8d:f5:ff:be:e9:0a:0f:c4:1b:b4:27:
         0f:cc:9a:a8:db:12:ac:b4:df:20:01:69:67:0e:55:3d:c6:73:
         83:dc:0a:9b:e1:93:c2:c2:ea:01:64:64:16:0e:ae:d9:11:07:
         5e:34:37:cf:73:62:8f:5b:01:8b:a7:5d:ad:43:a4:06:ef:a1:
         70:8d:4e:eb:87:88:51:5c:86:fb:d2:2d:4a:dd:df:0a:07:f4:
         0d:6a:a4:6b:8e:82:3a:22:49:70:84:0f:a1:62:65:b7:99:76:
         9e:f5:f2:09:e5:38:64:60:88:57:84:41:9b:7b:91:85:6d:98:
         71:e7:c2:32:de:9c:4f:62:26:26:25:e7:b9:d7:91:a6:14:6b:
         05:14:23:42:ee:7e:47:1a:b9:6c:02:9c:a4:92:50:df:c2:cc:
         80:29:de:b5:92:ad:38:82:b6:1b:4b:4c:0c:94:ba:d2:c2:b1:
         18:af:9f:ab:f6:31:bc:47:79:ee:ce:cb:6b:03:18:35:cf:2f:
         73:e5:d0:f9
-----BEGIN CERTIFICATE-----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Generated at Wed Nov 13 13:00:08 2024 by rpki-client on console.sobornost.net