Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/CBD8967E330011EE9FA5D15DC4F9AE02.roa
File:                     CBD8967E330011EE9FA5D15DC4F9AE02.roa (raw, json)
Hash identifier:          aYZhO6Cpq+P/cnuyI2HVA6rsmhc6f3jtdY5tImCUjTc=
Subject key identifier:   5C:F5:48:33:BA:1E:2F:14:A2:32:35:4C:9A:8D:3F:76:6A:0F:8E:82
Certificate issuer:       /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Certificate serial:       0165
Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/CBD8967E330011EE9FA5D15DC4F9AE02.roa
Signing time:             Fri 04 Aug 2023 19:55:01 +0000
ROA not before:           Fri 04 Aug 2023 19:55:01 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     58057
IP address blocks:        103.190.103.0/24 maxlen: 24
                          2001:df0:e940::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
        Validity
            Not Before: Aug  4 19:55:01 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64cd5795-ff36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dd:2d:49:b6:45:d6:42:0e:0d:d9:a8:c8:39:
                    6b:5f:a9:32:e7:41:a1:17:d0:cd:87:16:d3:55:dd:
                    f6:9e:6b:00:22:ce:36:21:45:2f:ec:62:b4:56:17:
                    d9:bf:cc:47:20:46:5f:98:5e:b3:7d:90:9a:ba:8c:
                    6c:4f:e4:c8:2f:aa:10:77:34:f2:c6:36:c0:72:c5:
                    7b:14:42:e4:d3:57:0c:c9:39:35:77:bc:d0:13:6e:
                    8c:34:d3:6d:d4:a5:f6:3d:1a:6d:c2:a6:74:1c:d5:
                    09:60:7a:e1:18:18:ea:48:bb:a9:ca:1c:59:45:9a:
                    ca:c5:35:b9:32:01:a1:ad:64:ff:5b:e7:62:f9:96:
                    95:8a:90:9d:a5:ed:d2:a8:89:a0:f2:3e:b6:50:d3:
                    ef:7b:02:0e:26:6b:a7:9f:c2:d2:31:08:60:75:ec:
                    b2:12:b6:71:69:24:30:43:ee:90:1b:2f:6b:de:d1:
                    a9:34:76:9a:e7:ac:47:01:98:8c:41:ef:23:1f:76:
                    e6:c4:dc:06:3b:bd:39:b5:44:28:3d:a2:16:79:56:
                    bf:10:9e:1f:88:cb:4d:73:10:0a:fd:73:22:2a:13:
                    63:38:19:6d:3a:50:d3:7f:ed:ef:b5:d2:58:da:b9:
                    c3:49:93:a8:f7:4b:9d:0b:4f:d1:a5:e0:79:5f:e5:
                    12:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F5:48:33:BA:1E:2F:14:A2:32:35:4C:9A:8D:3F:76:6A:0F:8E:82
            X509v3 Authority Key Identifier:
                keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/CBD8967E330011EE9FA5D15DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.103.0/24
                IPv6:
                  2001:df0:e940::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:d8:66:50:12:fb:96:06:b1:27:7e:29:be:97:fd:c8:92:14:
         2c:a1:aa:d9:fe:9e:13:26:7c:5e:25:e8:02:b2:fd:5d:57:bb:
         f5:84:17:12:f2:12:a3:0c:1f:33:4d:5d:bf:52:b5:6c:b4:33:
         fe:61:6b:51:93:e5:3f:cd:cf:d5:c0:d7:e0:d9:41:45:74:a2:
         8e:54:20:39:46:a7:70:31:2c:8a:fd:58:7d:87:a6:d3:df:fc:
         cd:e6:0d:c6:a4:be:06:75:43:ff:9f:c8:01:ce:41:6d:cc:37:
         fe:29:cf:66:f2:9f:cf:49:81:2f:c2:b9:60:2d:14:36:ef:9a:
         e3:8b:c4:5f:f4:a0:fe:cd:ce:e9:ac:35:71:f4:b2:f8:2a:a2:
         81:c2:37:8f:86:15:9c:d9:af:97:86:2b:98:63:a5:59:e4:8b:
         43:f8:63:9c:ad:90:41:b5:41:c1:e7:45:c0:68:f8:2b:b1:97:
         c6:95:fe:c1:b5:ec:38:f4:6a:d3:8b:6f:04:ac:e5:03:a7:ae:
         f6:70:92:27:ae:45:40:cc:d3:91:86:1b:fd:85:f2:45:60:61:
         85:86:3a:1c:ea:9b:50:7e:26:01:6d:30:4f:e2:2c:0b:7f:f8:
         f9:14:77:92:63:98:c4:ae:83:de:91:a1:ea:68:9e:19:4a:f2:
         38:c0:4b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----