Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/53CA93624BB611EDA5F60157C4F9AE02.roa
File:                     53CA93624BB611EDA5F60157C4F9AE02.roa (raw, json)
Hash identifier:          8dbYHnrx8HVTe3wPfeoqoX0MfiiCk69NM6o8BuOkgXU=
Subject key identifier:   7E:A4:58:6D:6C:4C:42:3E:DC:74:79:C6:46:84:25:80:B3:08:9F:38
Certificate issuer:       /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Certificate serial:       0574
Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/53CA93624BB611EDA5F60157C4F9AE02.roa
Signing time:             Sun 09 Apr 2023 01:01:26 +0000
ROA not before:           Sun 09 Apr 2023 01:01:26 +0000
ROA not after:            Wed 29 May 2024 00:00:00 +0000
asID:                     137510
IP address blocks:        103.226.126.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1396 (0x574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
        Validity
            Not Before: Apr  9 01:01:26 2023 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=64320e66-647e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a1:2c:7b:af:29:2e:3a:be:f0:6a:66:39:b0:
                    d7:65:ff:de:15:f5:b3:b7:47:87:6f:3f:03:9a:35:
                    54:dd:d1:f0:f6:02:af:ce:4c:51:f8:f2:88:95:59:
                    23:9a:11:79:61:50:bf:75:b0:2c:f0:8d:f7:1d:02:
                    5d:34:ba:f8:b0:9f:0a:5a:85:23:8c:77:4a:f7:33:
                    ce:94:e4:77:e5:49:7d:df:9b:bf:b2:81:8f:ca:07:
                    74:1f:11:53:c9:33:16:7b:2b:c9:62:19:3e:a5:90:
                    e6:74:5a:2e:4e:3a:67:01:ec:b1:79:ae:87:59:bd:
                    29:c1:d5:32:58:17:30:46:66:27:0b:ca:3e:59:3d:
                    fb:73:14:a1:1f:be:0e:85:9f:5c:73:67:a3:49:ef:
                    6c:c8:22:f3:22:71:fa:fe:cb:23:9d:7c:a6:37:20:
                    75:a1:98:c6:bd:d4:5e:12:38:3a:25:b6:43:50:74:
                    fe:58:53:aa:75:a3:42:11:78:67:38:d1:e1:99:95:
                    e9:ad:01:b4:07:ae:6a:0e:e8:a3:67:30:80:c2:f7:
                    fb:c9:be:36:b1:1f:a1:a7:42:bf:f0:8f:59:25:9f:
                    b6:b5:5b:77:c2:73:de:70:99:54:43:84:bd:97:db:
                    89:38:89:a6:ec:e3:12:e4:6d:7d:b8:97:3f:16:c7:
                    81:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A4:58:6D:6C:4C:42:3E:DC:74:79:C6:46:84:25:80:B3:08:9F:38
            X509v3 Authority Key Identifier:
                keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/53CA93624BB611EDA5F60157C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.226.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:af:d3:0e:56:9c:9e:20:b4:97:4d:10:7c:1e:41:dd:8e:d3:
         71:23:cf:c5:e4:0a:ff:b1:96:46:f8:8a:e4:e0:80:ef:eb:fa:
         c2:2e:3a:44:b1:50:98:b9:3a:71:ae:89:f0:d8:da:16:c0:e0:
         48:10:d4:e0:4e:c1:91:be:73:e9:16:15:0f:6d:7d:a4:ac:e2:
         ea:7a:18:6b:37:4e:b4:b5:b1:5b:67:db:aa:91:2d:4c:79:8a:
         b7:ac:da:b9:e2:6f:a7:a1:61:0e:ff:50:b2:01:6d:b3:40:05:
         c8:87:a7:e4:e7:46:61:42:ed:08:6c:14:69:5b:92:b9:5b:0e:
         a0:f6:59:83:2c:90:4d:0f:29:0f:38:68:95:a4:e9:0f:db:ab:
         22:eb:21:10:7a:a4:b7:2b:14:f7:35:be:46:dc:5f:1d:6c:6d:
         2f:1b:be:67:89:7b:a1:76:8c:0b:ba:1b:7c:62:80:e0:aa:52:
         97:91:cb:3d:cb:6d:27:f9:7c:f3:bf:24:3f:c5:1f:06:6d:87:
         7c:80:cc:db:35:c9:bc:68:ac:d0:bf:40:0b:75:9e:78:71:3e:
         a7:88:53:35:b9:6a:52:6d:36:1d:17:63:93:71:75:1d:4c:5d:
         5b:79:81:8f:b5:55:fa:f2:00:93:26:f8:b3:2e:e3:c5:47:da:
         f4:ce:49:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:36:11 2023 by rpki-client on console.sobornost.net