Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/7AC9CCCE657B11EDAE8AE90EC4F9AE02.roa
File:                     7AC9CCCE657B11EDAE8AE90EC4F9AE02.roa (raw, json)
Hash identifier:          uK0MqJ8IpXx6YnvU+YNadHPbgZiB3ZeoHhNI816ww/w=
Subject key identifier:   9B:E9:3F:E7:AE:79:E8:93:49:F5:21:DC:2C:1C:1B:CD:F5:11:4F:21
Certificate issuer:       /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Certificate serial:       0F
Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/7AC9CCCE657B11EDAE8AE90EC4F9AE02.roa
Signing time:             Wed 16 Nov 2022 06:54:14 +0000
ROA not before:           Wed 16 Nov 2022 06:54:14 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     134495
IP address blocks:        103.24.17.0/24 maxlen: 24
                          2001:df1:6e40::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
        Validity
            Not Before: Nov 16 06:54:14 2022 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=63748915-767b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:aa:02:b5:bb:69:dd:17:bc:bb:45:60:c1:bf:
                    9b:69:e0:85:5d:34:6f:fe:46:4f:81:11:52:8c:6f:
                    eb:95:ef:10:e4:62:ba:2d:f5:14:ab:8f:1d:65:9d:
                    0e:45:f7:99:63:11:05:df:5d:1c:4b:93:98:20:f8:
                    98:d6:6c:6d:f1:5b:36:f2:f5:7e:3f:4e:f2:6e:53:
                    ac:25:2c:e0:44:6b:f0:ea:52:36:16:ea:8c:44:58:
                    f6:48:b1:62:01:e4:85:61:82:b8:cb:9e:f7:fd:10:
                    fa:d0:1d:55:37:0e:f9:e7:a4:c3:64:1d:e2:7b:cf:
                    1b:cb:99:32:ce:15:c9:b6:81:2a:17:7a:81:24:93:
                    be:bd:c5:bb:26:80:26:25:96:47:1a:b2:57:80:53:
                    2d:a8:54:e1:22:97:34:ab:27:fb:e7:a4:83:f6:14:
                    1a:37:3c:b4:49:90:d1:58:d3:9b:a0:77:b0:71:1c:
                    f2:5c:f2:17:8a:2d:62:10:d3:47:28:0e:9e:22:90:
                    8e:40:29:99:b6:13:2c:e2:5d:bc:0a:0e:ff:5f:c4:
                    13:df:6d:c2:f0:79:cf:df:ba:47:5f:57:03:2e:8d:
                    e5:dc:f5:9c:4c:11:56:a5:10:b1:56:40:5f:36:6d:
                    ef:c9:98:9a:0b:64:75:e8:c0:d2:a3:17:09:00:0b:
                    ba:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E9:3F:E7:AE:79:E8:93:49:F5:21:DC:2C:1C:1B:CD:F5:11:4F:21
            X509v3 Authority Key Identifier:
                keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/7AC9CCCE657B11EDAE8AE90EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.17.0/24
                IPv6:
                  2001:df1:6e40::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:89:e8:9d:06:1f:84:2c:d7:d3:7c:00:bd:a2:9f:4b:59:75:
         73:a7:0a:b3:e8:72:7c:c4:eb:99:cb:93:b8:22:59:e0:74:4f:
         86:3d:74:e0:31:48:10:57:c4:92:72:dc:af:8d:91:e8:6a:77:
         0b:79:84:5b:ee:72:86:39:c3:8d:ac:cc:3a:c4:1a:d8:35:87:
         b0:6a:2b:6e:e7:bd:50:7c:22:ec:5d:fd:18:10:f8:cd:a5:eb:
         7c:2f:33:26:5b:9d:7e:a6:02:7a:f2:2d:b3:8b:bb:37:d7:45:
         a7:cb:ef:dd:a2:30:9a:69:ed:21:10:9f:23:42:83:cd:d8:c5:
         e0:6f:83:a4:7f:4d:f0:3a:d3:ee:c1:c8:ff:6d:b9:98:50:a1:
         5d:cf:35:da:8d:56:57:50:4f:31:5d:d7:43:51:68:b2:b7:88:
         d3:59:42:f1:44:46:91:75:e1:7e:8b:a4:b8:46:ad:96:55:66:
         f5:77:9e:89:ac:51:cc:d8:fa:1c:55:d8:3f:c2:5a:f6:c1:72:
         47:45:b5:09:e2:bf:c0:23:57:62:14:98:08:37:3a:4b:6c:e5:
         ef:e2:d3:41:88:23:a2:e9:7d:91:19:55:e1:bb:fb:28:b3:3f:
         3a:e8:1d:e1:9b:ed:b0:94:05:ef:da:b5:45:ba:05:0b:02:e5:
         cd:df:c9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----