Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/31768E92F40711E997818030C4F9AE02.roa
File:                     31768E92F40711E997818030C4F9AE02.roa (raw, json)
Hash identifier:          qVMPCGx7g9jHTWbd6P/HKYS8UfNt0zQoxFKjAHP6nfk=
Subject key identifier:   EC:1B:A9:16:B8:8F:B5:9E:F1:42:E6:4E:EC:33:2F:E7:1A:7B:3F:15
Certificate issuer:       /CN=A912963D/serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981
Certificate serial:       0CD7
Authority key identifier: F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/31768E92F40711E997818030C4F9AE02.roa
Signing time:             Thu 04 Aug 2022 06:46:43 +0000
ROA not before:           Thu 04 Aug 2022 06:46:43 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     133410
IP address blocks:        103.117.228.0/22 maxlen: 24
                          2403:21c0::/32 maxlen: 32
                          2403:21c0::/48 maxlen: 48
                          2403:21c0::/64 maxlen: 64
                          2403:21c0:10::/48 maxlen: 48
                          2403:21c0:20::/48 maxlen: 48
                          2403:21c0:30::/48 maxlen: 48
                          2403:21c0:40::/48 maxlen: 48
                          2403:21c0:50::/48 maxlen: 48
                          2403:21c0:60::/48 maxlen: 48
                          2403:21c0:70::/48 maxlen: 48
                          2403:21c0:80::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3287 (0xcd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912963D/serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981
        Validity
            Not Before: Aug  4 06:46:43 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=62eb6b52-6554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:51:6e:30:6e:b8:02:85:8d:d4:c9:16:a0:a6:
                    08:b1:15:09:b4:51:11:6e:7b:f0:ed:fd:a9:29:3c:
                    ec:24:f7:f9:74:cf:f9:8f:cf:fa:95:2f:96:ae:c1:
                    b3:36:b2:4e:fb:c7:1a:12:b6:ec:de:b0:6a:9a:cc:
                    99:3d:16:26:c2:1b:f0:c4:ca:de:b5:b7:29:00:36:
                    28:6f:17:9d:cc:7a:c4:ef:96:85:48:7d:18:38:8e:
                    bf:b5:90:6d:a4:ec:ef:26:d6:bf:66:90:b4:86:0a:
                    77:e8:cd:a6:5b:6d:24:df:18:73:c0:b0:34:e9:74:
                    ec:d7:fe:7b:a6:98:71:48:6f:bb:3a:8c:12:22:fb:
                    9c:84:5f:c8:fd:58:e9:13:53:e5:d1:dd:24:bf:e1:
                    0f:08:4c:73:a3:b9:b3:29:5d:25:cb:ae:57:f9:0b:
                    a8:e0:92:6b:b9:5f:3b:9d:83:c8:cc:01:03:85:68:
                    89:e7:8c:c2:f6:26:fa:da:1d:67:80:d2:0c:46:e4:
                    a4:f2:53:87:5b:26:4e:fa:70:ca:16:79:90:51:9f:
                    5d:97:4a:97:89:09:be:d6:3c:2e:2e:04:b6:a6:f3:
                    a2:a9:24:28:50:f9:9e:78:b2:1e:39:5f:ae:fd:a0:
                    7a:45:0c:48:d0:3d:05:18:de:69:38:a6:62:88:d6:
                    c8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1B:A9:16:B8:8F:B5:9E:F1:42:E6:4E:EC:33:2F:E7:1A:7B:3F:15
            X509v3 Authority Key Identifier:
                keyid:F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/31768E92F40711E997818030C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.228.0/22
                IPv6:
                  2403:21c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:c4:1d:53:83:f4:c5:2b:8f:39:22:87:be:07:c3:aa:f7:b3:
         c3:83:1c:90:61:dc:cf:59:a8:d6:0c:bb:df:27:84:b3:52:2b:
         ce:90:c4:7d:c0:83:36:70:0d:a9:ba:14:32:19:32:0b:d0:f8:
         c0:3c:15:34:87:a7:35:de:44:02:53:e5:25:8c:03:6c:49:0d:
         ca:a3:bf:df:1b:99:d2:22:da:69:b3:4d:88:1d:cd:ac:7c:bb:
         8b:74:88:76:2d:b5:3a:c6:d8:63:a5:f7:83:c5:f1:f5:99:de:
         11:8e:3f:40:52:f2:c3:8e:d3:18:d3:aa:91:1f:8d:80:a3:34:
         9f:91:f4:9c:0b:d0:c5:bc:50:35:83:7b:c7:1e:31:35:5c:96:
         7b:8c:e7:fc:17:d7:c1:1e:4d:35:03:31:43:92:26:ee:24:46:
         ce:5d:bc:13:b1:64:5d:dc:31:58:24:80:7f:1e:43:88:c3:1b:
         1d:17:fa:46:87:19:77:aa:e2:de:75:9e:43:0c:6b:9a:16:00:
         32:b6:68:be:cc:ef:0b:d9:6b:af:6e:14:35:90:b3:74:b8:8e:
         96:c5:1a:15:a7:75:ea:f0:f1:80:8e:cd:20:0c:17:a4:d4:c0:
         c9:46:0d:8d:35:ab:c0:c6:e5:a7:af:4d:24:32:dc:a2:b1:93:
         e0:96:6e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----