Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/8EFC83DC5F9711EE835BF942C4F9AE02.roa
File:                     8EFC83DC5F9711EE835BF942C4F9AE02.roa (raw, json)
Hash identifier:          usqO027AbjRwtsjh+9d1UI3Wf58Hz7rbhtI3+xiA8xY=
Subject key identifier:   70:1E:22:2C:4C:F9:92:13:4B:41:2A:0B:6A:F3:42:C9:C8:71:7B:6E
Certificate issuer:       /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial:       44
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/8EFC83DC5F9711EE835BF942C4F9AE02.roa
Signing time:             Sat 30 Sep 2023 13:45:29 +0000
ROA not before:           Sat 30 Sep 2023 13:45:29 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     9409
IP address blocks:        103.151.154.0/24 maxlen: 24
                          2401:3fa0:ff00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
        Validity
            Not Before: Sep 30 13:45:29 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=65182679-3bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d6:22:cd:3c:05:09:25:0b:d6:1b:80:c4:03:
                    a7:b3:51:e5:2b:73:e2:28:84:9f:09:c9:42:26:65:
                    b8:00:6b:71:ee:38:97:c3:fd:5f:cc:fc:13:d7:fe:
                    5e:b6:07:0a:0e:83:52:83:99:b9:e5:b8:eb:52:29:
                    65:8e:91:79:4b:42:71:f4:1e:c4:ac:82:11:c0:1d:
                    df:89:64:9b:91:5e:7a:07:4b:0d:89:4f:41:f1:51:
                    f4:dc:20:ad:31:fb:24:35:28:77:fa:4c:83:39:a6:
                    10:90:31:fa:fe:be:0b:4e:cb:dd:8a:9d:f8:1b:fe:
                    20:d0:24:3d:b8:4e:7d:6e:6b:d8:4c:77:58:e8:fb:
                    66:21:80:05:16:59:d6:c6:2a:bc:5a:ca:77:be:6b:
                    5e:03:ba:09:e1:33:70:08:29:3b:29:53:98:bd:45:
                    c4:f6:48:18:42:f9:4a:ad:4b:51:07:f2:a6:70:fd:
                    d8:6e:49:aa:d9:81:f3:a1:bd:6b:11:e9:55:98:9b:
                    7b:65:c8:12:dd:3b:63:71:ba:c8:c9:95:4a:1a:94:
                    5f:1e:55:60:03:6a:f7:eb:49:81:0b:53:b5:2b:09:
                    43:63:c8:80:ba:9e:97:0c:98:58:22:f1:97:27:d0:
                    4c:04:52:12:00:68:77:08:4a:ae:07:54:88:72:25:
                    d4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1E:22:2C:4C:F9:92:13:4B:41:2A:0B:6A:F3:42:C9:C8:71:7B:6E
            X509v3 Authority Key Identifier:
                keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/8EFC83DC5F9711EE835BF942C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.154.0/24
                IPv6:
                  2401:3fa0:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:b9:16:21:76:61:da:f7:0e:24:06:aa:33:32:9e:a7:c2:2d:
         04:2c:a6:14:ad:44:60:47:94:46:40:1a:5b:98:e5:03:3b:f2:
         cb:cf:81:6c:c0:81:c3:eb:4d:e5:1b:3f:38:4e:eb:df:d7:1e:
         71:69:fc:83:e6:68:3d:b5:a4:26:32:28:41:4c:7c:6e:a9:cf:
         d5:df:18:1c:be:4a:48:b7:13:cd:17:07:cb:18:23:64:07:6a:
         97:28:65:86:13:f8:38:fb:c6:d2:e8:37:62:fe:11:3b:d8:be:
         d2:e4:37:75:06:79:be:b9:4a:aa:3f:db:17:a6:c6:9b:2b:1c:
         42:a6:ce:8a:1b:4c:4f:c0:82:38:18:1b:73:48:f2:f4:03:89:
         3d:8b:fd:a1:04:11:a9:a1:f8:c6:7c:d7:c2:b5:a9:1d:ba:a9:
         f8:83:9c:28:42:91:5a:52:1b:7b:50:30:d8:94:22:72:fb:6f:
         4e:49:95:98:7d:b8:a5:97:c9:37:d1:53:51:4c:49:08:e6:89:
         3e:f2:63:0e:b8:e6:a5:1a:03:a8:24:ce:82:27:68:18:3b:03:
         75:8e:94:09:a9:4b:eb:65:04:8e:aa:6c:23:30:33:40:d9:97:
         44:2c:71:e8:5e:d8:6c:05:9a:64:32:63:af:e4:18:46:f5:be:
         28:74:b8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----