Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/80B29210595B11EC89B4C272C4F9AE02.roa
File:                     80B29210595B11EC89B4C272C4F9AE02.roa (raw, json)
Hash identifier:          5Z1JRXcXQNNnNcwPua6ph+//QxqfOyjo3sCwK0tjkCE=
Subject key identifier:   90:98:F6:F1:D8:4C:11:B6:C6:4D:B4:1C:4C:D8:55:F6:C5:3F:C5:12
Certificate issuer:       /CN=A91DC5BE/serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
Certificate serial:       3104
Authority key identifier: AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/80B29210595B11EC89B4C272C4F9AE02.roa
Signing time:             Fri 10 Dec 2021 01:50:08 +0000
ROA not before:           Fri 10 Dec 2021 01:50:08 +0000
ROA not after:            Mon 31 Mar 2031 00:00:00 +0000
asID:                     4608
IP address blocks:        202.12.29.0/24 maxlen: 24
                          203.119.0.0/24 maxlen: 24
                          203.119.76.0/23 maxlen: 24
                          203.119.100.0/22 maxlen: 24
                          203.119.104.0/21 maxlen: 24
                          2001:dc0::/32 maxlen: 34
                          2001:dc0:2000::/35 maxlen: 35
                          2001:dc0:4000::/34 maxlen: 35
                          2001:dc0:8000::/33 maxlen: 35
                          2001:dd8:8::/45 maxlen: 45
                          2001:dd8:8::/48 maxlen: 48
                          2001:dd8:9::/48 maxlen: 48
                          2001:dd8:a::/48 maxlen: 48
                          2001:dd8:b::/48 maxlen: 48
                          2001:dd8:c::/48 maxlen: 48
                          2001:dd8:d::/48 maxlen: 48
                          2001:dd8:e::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12548 (0x3104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC5BE/serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
        Validity
            Not Before: Dec 10 01:50:08 2021 GMT
            Not After : Mar 31 00:00:00 2031 GMT
        Subject: CN=61b2b250-d781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2a:a0:66:c7:88:65:2a:6f:7b:74:fd:f8:2b:
                    dd:9c:c3:5f:bd:a6:67:19:87:32:d1:0e:8a:cc:6f:
                    d0:01:ef:9b:ee:84:b7:97:d0:aa:0a:a2:f7:19:9d:
                    b6:46:24:2e:51:5a:fb:c8:63:d5:b6:f2:7a:96:0e:
                    96:c8:1b:56:4a:32:85:24:ed:47:27:a7:bc:26:2a:
                    25:e5:de:e9:a6:3b:2f:64:d8:ab:d1:dc:48:58:95:
                    4b:1b:65:42:ca:08:94:50:f7:50:15:94:1c:e5:bd:
                    3e:37:f3:6a:16:59:f8:57:fb:dc:a8:c4:01:57:4d:
                    60:79:ef:36:c8:87:a2:0c:46:ad:d3:cd:8f:4f:33:
                    01:dc:8d:64:97:f6:93:a9:4a:89:78:e1:af:e9:0a:
                    b1:3c:ae:1d:a7:cb:85:bd:31:47:84:b5:8b:2b:81:
                    eb:f6:f6:63:bc:ec:b3:ae:c0:11:6e:63:68:ba:7f:
                    c5:19:94:6f:2f:55:1e:07:82:90:41:04:64:73:7b:
                    34:f5:c9:0d:9f:48:7c:a6:5d:62:1d:39:8a:cb:43:
                    0e:92:c3:de:aa:65:0a:c8:d4:73:0d:32:1b:0c:c7:
                    44:6f:27:88:15:ca:92:00:c2:1c:41:be:28:ba:21:
                    6c:69:ae:35:35:60:ba:ba:de:dc:b4:ae:cc:70:b6:
                    4b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:98:F6:F1:D8:4C:11:B6:C6:4D:B4:1C:4C:D8:55:F6:C5:3F:C5:12
            X509v3 Authority Key Identifier:
                keyid:AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/80B29210595B11EC89B4C272C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.29.0/24
                  203.119.0.0/24
                  203.119.76.0/23
                  203.119.100.0-203.119.111.255
                IPv6:
                  2001:dc0::/32
                  2001:dd8:8::/45

    Signature Algorithm: sha256WithRSAEncryption
         c2:3e:b6:b2:73:42:dc:4e:e9:7d:ac:a8:81:04:74:24:a5:85:
         42:9d:86:1f:11:e8:94:ba:e5:5f:72:90:c1:d2:09:15:b2:c4:
         b9:fb:ce:0f:76:51:98:32:46:74:fe:02:e1:24:f4:f5:dd:1b:
         f6:e8:54:0f:d7:3d:24:fb:b8:02:16:30:90:be:19:52:2e:c6:
         41:c7:72:47:b7:d5:c6:be:ea:a4:a8:9b:7a:d2:34:bb:b2:a8:
         ba:ae:4d:ea:09:03:75:83:cf:46:46:b8:40:73:9b:aa:c7:35:
         04:26:f1:ed:b3:85:a5:ca:ce:15:8d:5b:15:3f:73:5b:5c:c0:
         38:e6:3c:dd:a4:38:22:fe:18:d6:20:f6:2b:76:ee:99:03:e3:
         b1:5b:78:80:1b:ae:32:86:dc:f6:11:c0:91:4c:51:35:6b:37:
         bb:1e:67:5f:3f:c4:05:61:6c:72:38:0d:e2:88:7f:d4:1e:02:
         5c:3a:58:9f:05:27:75:f7:2b:da:fb:b7:d1:2c:df:4b:1c:69:
         72:68:db:ae:12:75:b2:36:fd:89:e4:e3:f6:21:f2:5a:51:27:
         0b:27:a4:5a:08:f6:8c:fd:09:15:64:28:ca:97:09:5a:7d:e6:
         c7:23:f0:66:d0:94:e4:ef:17:a4:c7:f5:e3:a8:85:0d:1f:1e:
         28:29:11:29
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgICMQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REM1QkUxMTAvBgNVBAUTKEFEQThBRUQzMkIxNUI4N0U2MTEyNTJEMjlEMUUxRDVC
REU1ODE2NDYwHhcNMjExMjEwMDE1MDA4WhcNMzEwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWIyYjI1MC1kNzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoyqgZseIZSpve3T9+CvdnMNfvaZnGYcy0Q6KzG/QAe+b7oS3l9CqCqL3GZ22
RiQuUVr7yGPVtvJ6lg6WyBtWSjKFJO1HJ6e8Jiol5d7ppjsvZNir0dxIWJVLG2VC
ygiUUPdQFZQc5b0+N/NqFln4V/vcqMQBV01gee82yIeiDEat082PTzMB3I1kl/aT
qUqJeOGv6QqxPK4dp8uFvTFHhLWLK4Hr9vZjvOyzrsARbmNoun/FGZRvL1UeB4KQ
QQRkc3s09ckNn0h8pl1iHTmKy0MOksPeqmUKyNRzDTIbDMdEbyeIFcqSAMIcQb4o
uiFsaa41NWC6ut7ctK7McLZLhwIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFJCY9vHY
TBG2xk20HEzYVfbFP8USMB8GA1UdIwQYMBaAFK2ortMrFbh+YRJS0p0eHVveWBZG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzVCRS9ENDAxNjE5QTFE
NjkxMUUyQUZCNjRFQTcwOEIwMkNEMi9yYWl1MHlzVnVINWhFbExTblI0ZFc5NVlG
a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JhaXUweXNWdUg1aEVsTFNuUjRkVzk1WUZrWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REM1QkUvRDQwMTYxOUExRDY5MTFFMkFGQjY0RUE3MDhCMDJDRDIvODBCMjkyMTA1
OTVCMTFFQzg5QjRDMjcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUQYIKwYBBQUHAQcBAf8E
QjBAMCYEAgABMCADBADKDB0DBADLdwADBAHLd0wwDAMEAst3ZAMEBMt3YDAWBAIA
AjAQAwUAIAENwAMHAyABDdgACDANBgkqhkiG9w0BAQsFAAOCAQEAwj62snNC3E7p
fayogQR0JKWFQp2GHxHolLrlX3KQwdIJFbLEufvOD3ZRmDJGdP4C4ST09d0b9uhU
D9c9JPu4AhYwkL4ZUi7GQcdyR7fVxr7qpKibetI0u7Kouq5N6gkDdYPPRka4QHOb
qsc1BCbx7bOFpcrOFY1bFT9zW1zAOOY83aQ4Iv4Y1iD2K3bumQPjsVt4gBuuMobc
9hHAkUxRNWs3ux5nXz/EBWFscjgN4oh/1B4CXDpYnwUndfcr2vu30SzfSxxpcmjb
rhJ1sjb9ieTj9iHyWlEnCyekWgj2jP0JFWQoypcJWn3mxyPwZtCU5O8XpMf146iF
DR8eKCkRKQ==
-----END CERTIFICATE-----