Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/CF95118A09DE11ED92DD5D37C4F9AE02.roa
File:                     CF95118A09DE11ED92DD5D37C4F9AE02.roa (raw, json)
Hash identifier:          d/tjU23P7xM0CTw2Mq3C8ZkAhHVZEqz3Qn77ycFzjlc=
Subject key identifier:   72:8D:E0:1B:C7:AD:5E:4A:C5:F3:8F:77:98:5A:EC:55:C0:AB:1F:18
Certificate issuer:       /CN=A914E1F1/serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Certificate serial:       B8
Authority key identifier: F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/CF95118A09DE11ED92DD5D37C4F9AE02.roa
Signing time:             Thu 15 Dec 2022 05:45:42 +0000
ROA not before:           Thu 15 Dec 2022 05:45:42 +0000
ROA not after:            Wed 31 Jan 2024 00:00:00 +0000
asID:                     134153
IP address blocks:        103.176.18.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E1F1/serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
        Validity
            Not Before: Dec 15 05:45:42 2022 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=639ab485-b742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:37:20:11:ad:07:8e:65:db:62:c6:07:fb:e7:
                    63:fa:de:50:38:a9:5b:8e:36:1f:5a:85:18:38:30:
                    b1:19:b6:b1:fb:3b:0a:e5:a5:14:84:7b:a6:72:21:
                    04:7e:f5:03:72:06:21:51:62:c2:39:e5:4e:5c:bf:
                    62:73:3a:0f:58:47:6f:c6:ff:e2:f8:18:4c:e0:23:
                    80:00:bd:19:d1:67:6f:14:ca:66:ee:5c:b1:b8:02:
                    15:6b:b7:ea:a6:db:d0:45:03:72:49:5c:45:4a:d2:
                    bd:22:2c:c5:e8:9a:c1:26:1b:b6:36:51:db:1d:00:
                    1f:b9:53:0b:d6:b0:f5:a9:b2:4b:13:d0:f8:26:d3:
                    6c:3c:b2:bc:c7:d5:34:5f:e1:a8:ef:38:24:6b:bf:
                    33:1f:56:d0:30:74:48:1b:0f:27:b5:e0:a3:e5:23:
                    63:f6:a0:0d:25:4c:7c:cb:92:ba:f3:44:af:2c:be:
                    18:23:8f:05:ac:dd:6d:5c:2e:32:84:41:f1:93:b7:
                    59:83:d5:8e:08:98:22:c9:49:9a:54:ad:33:11:6d:
                    5e:c0:6d:62:84:b3:8a:47:3b:52:e0:37:8b:16:9c:
                    50:f6:2b:a0:ed:35:95:a1:38:8f:5a:61:e1:c3:c6:
                    2a:e0:e9:59:67:ad:f7:8a:ef:ef:04:a2:7b:4e:75:
                    fc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8D:E0:1B:C7:AD:5E:4A:C5:F3:8F:77:98:5A:EC:55:C0:AB:1F:18
            X509v3 Authority Key Identifier:
                keyid:F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/CF95118A09DE11ED92DD5D37C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:d7:3b:ff:29:27:c6:21:55:f2:57:b3:83:87:ad:5f:c8:dd:
         ff:6f:41:ef:b6:87:95:ee:96:e2:ed:4f:64:b8:ba:6c:48:f9:
         7c:0f:2d:e8:60:82:97:08:bf:f1:90:6f:c5:76:69:58:4d:db:
         eb:68:fc:c0:ab:33:e8:29:e8:30:33:61:9a:56:6e:d0:d0:a3:
         7b:51:1a:6c:60:6a:32:ce:d7:68:31:36:69:f1:28:fa:48:92:
         e3:b1:f7:9e:2d:6f:fa:4c:1b:de:5f:e7:2e:71:5f:3c:24:7f:
         90:2c:37:48:57:55:2a:e1:88:8f:ae:ad:02:82:4d:be:14:5d:
         be:9f:7f:d1:c4:0e:62:6f:9c:e6:47:28:57:d9:ff:dc:cb:54:
         76:da:31:b6:ac:f4:86:8a:d2:93:35:8f:2a:cb:ec:b2:dc:38:
         99:93:2e:f8:1f:33:dc:70:fa:59:95:16:37:51:ee:d4:9d:82:
         10:c9:43:9b:d3:1a:42:03:0b:9b:86:24:33:d0:1d:29:a5:1e:
         5b:a2:8b:8b:5b:65:b5:c3:b9:72:28:37:94:1c:03:33:7c:f6:
         32:76:30:78:aa:d8:57:ed:c3:9e:6d:e6:bd:e3:9d:1c:1f:36:
         21:98:60:98:ad:28:d6:e7:60:05:11:a3:6d:64:fe:5a:63:7e:
         d3:6b:3f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----