Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/92B69AA869B911EAB1A0F35EC4F9AE02.roa
File:                     92B69AA869B911EAB1A0F35EC4F9AE02.roa (raw, json)
Hash identifier:          HCC4TSMyoOCCThaMZAonsrs7ljagxwggXRNlncoAQLY=
Subject key identifier:   AC:36:E7:03:E9:F7:17:E4:60:E0:28:99:E8:2B:E3:EE:1F:82:6D:FE
Certificate issuer:       /CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497
Certificate serial:       08EC
Authority key identifier: 1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/92B69AA869B911EAB1A0F35EC4F9AE02.roa
Signing time:             Mon 31 Jul 2023 20:57:36 +0000
ROA not before:           Mon 31 Jul 2023 20:57:36 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     58895
IP address blocks:        103.117.160.0/22 maxlen: 22
                          103.117.160.0/24 maxlen: 24
                          103.117.161.0/24 maxlen: 24
                          103.117.162.0/24 maxlen: 24
                          103.117.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2284 (0x8ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497
        Validity
            Not Before: Jul 31 20:57:36 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c8203f-440e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e3:2a:9d:cb:c4:1e:df:58:79:64:2c:b6:0b:
                    06:ad:1d:d5:b9:89:21:3f:21:0c:12:cb:8f:14:af:
                    f2:7b:00:e5:df:1d:d2:5a:ed:92:3c:f6:de:b2:8d:
                    16:82:58:c6:12:72:61:f4:1f:7c:94:1d:84:62:b0:
                    cb:e5:17:0c:c0:4f:cd:b1:9f:e4:27:24:ca:6c:d9:
                    3f:4b:48:7e:56:55:f2:34:40:98:63:a4:95:77:69:
                    30:ed:3e:ab:97:46:7f:1d:73:3f:1f:3c:ea:f9:74:
                    5f:24:26:e4:21:7b:26:2b:b2:c0:c1:1e:34:1a:a5:
                    9a:70:cb:c0:19:f1:d0:a9:fe:d7:16:3d:3e:e7:b3:
                    8b:1d:ca:5f:ba:4d:ec:bd:03:9e:b4:6e:82:3e:14:
                    a8:ee:74:99:0e:3a:e0:fe:15:15:18:34:fb:f0:9f:
                    83:da:fe:8d:13:1c:95:cf:68:07:eb:3f:03:c9:00:
                    65:17:ae:86:18:16:1d:d4:a4:4b:56:4e:b9:57:90:
                    61:61:47:f7:5d:b3:53:b5:75:31:d1:57:66:67:7c:
                    dd:db:9e:10:0d:ae:c0:f6:aa:4b:ce:d7:24:cd:51:
                    f0:b1:e6:ee:24:44:1e:a2:26:7c:4e:03:54:a5:0f:
                    ef:7f:51:03:d7:d2:a2:52:1a:b1:78:9b:b7:5f:94:
                    a3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:36:E7:03:E9:F7:17:E4:60:E0:28:99:E8:2B:E3:EE:1F:82:6D:FE
            X509v3 Authority Key Identifier:
                keyid:1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/92B69AA869B911EAB1A0F35EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:32:d5:17:d3:3e:fd:17:41:d0:d3:a7:a7:30:39:79:53:51:
         67:5d:9b:75:74:c6:bd:56:a5:2c:05:82:02:ce:c5:2b:aa:9f:
         6e:0e:4a:47:80:cb:a4:f2:44:c9:40:de:de:97:c4:a0:d0:15:
         09:4b:8e:06:66:af:21:4a:77:2e:39:4e:34:ca:dc:70:c7:d5:
         49:9c:76:38:1c:71:f7:85:11:4d:8a:51:fc:09:50:7b:f9:e0:
         f9:c0:47:3d:da:70:fd:cf:af:81:92:85:84:53:36:6b:f5:d6:
         a0:50:4f:1c:da:a5:57:9e:62:5b:cd:82:42:e2:62:33:3c:c8:
         f4:81:a2:44:be:1b:a3:63:04:12:fd:07:a5:b7:fa:62:c8:37:
         d9:25:d3:62:fa:bb:06:46:17:9f:ee:c0:52:57:a2:25:fb:a2:
         69:15:23:71:bd:4c:c4:4c:b1:a4:6c:67:43:8c:5b:46:e0:e7:
         eb:17:c1:6f:8d:7c:4c:65:16:09:99:cd:8d:31:d7:75:20:db:
         ee:35:cd:ab:76:da:96:ef:84:1a:7d:33:4e:9f:4b:89:f2:f6:
         f0:19:a5:fe:db:fc:cd:00:22:85:4c:46:30:72:e1:ba:e9:77:
         fa:3f:69:65:78:b5:3f:f9:42:77:3f:9d:94:ff:eb:c7:69:53:
         f5:5a:d7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----