Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/03323014F00111EDA34BD84DC4F9AE02.roa
File:                     03323014F00111EDA34BD84DC4F9AE02.roa (raw, json)
Hash identifier:          uIlMALK1bzVVlvQm1RlPLecxFnJoDdsXl3kj076G+pY=
Subject key identifier:   57:F5:AE:BF:7E:6F:7F:E8:30:C4:C5:A1:B2:F1:54:4F:FF:73:DC:E8
Certificate issuer:       /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Certificate serial:       33
Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/03323014F00111EDA34BD84DC4F9AE02.roa
Signing time:             Thu 11 May 2023 13:37:46 +0000
ROA not before:           Thu 11 May 2023 13:37:46 +0000
ROA not after:            Wed 29 May 2024 00:00:00 +0000
asID:                     149621
IP address blocks:        103.182.210.0/26 maxlen: 26

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
        Validity
            Not Before: May 11 13:37:46 2023 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=645cefaa-4c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:af:f4:63:cb:bc:08:43:e9:ca:4d:c5:ca:bd:
                    ad:43:f6:f2:60:65:6e:a3:4c:b8:61:74:2a:f2:70:
                    b6:cd:47:7a:7b:2f:33:27:48:33:00:9f:35:43:e1:
                    f3:8b:1f:f6:13:13:38:6a:71:64:7b:4e:e6:af:cf:
                    b1:07:41:83:f2:13:ed:cc:79:f7:ea:ac:3e:01:97:
                    ad:79:c7:28:dc:7e:dd:6c:2d:61:b4:a5:e4:b5:60:
                    6d:d0:e9:9f:93:0b:53:1f:7a:5a:8b:d7:5d:e7:01:
                    c9:24:d3:9d:5a:6e:89:e4:ca:76:cd:3a:9b:49:43:
                    cf:20:95:eb:82:36:8b:d8:25:7a:64:78:29:bb:1b:
                    3d:9e:75:a3:7f:b5:73:fc:ca:39:c2:e9:02:5d:75:
                    8e:96:b1:dc:b2:f5:a4:e5:dd:85:d7:24:f6:12:a6:
                    6f:b7:2d:2e:a9:bf:76:89:6f:2f:99:b0:5c:5b:4c:
                    ce:61:5a:a8:96:c4:94:0c:a3:c8:5f:63:0d:a6:fd:
                    36:63:00:fc:bc:fb:79:50:ae:7d:48:de:10:cd:08:
                    04:1b:ef:57:72:bd:99:99:6c:8b:4c:0a:a1:bb:47:
                    3c:68:9b:78:29:f0:68:b0:81:be:9a:39:f6:50:0f:
                    f7:24:f4:8b:c4:8a:32:7f:37:fc:e3:bc:d9:a0:b9:
                    87:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F5:AE:BF:7E:6F:7F:E8:30:C4:C5:A1:B2:F1:54:4F:FF:73:DC:E8
            X509v3 Authority Key Identifier:
                keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/03323014F00111EDA34BD84DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.210.0/26

    Signature Algorithm: sha256WithRSAEncryption
         8c:f9:7c:d5:3b:95:7f:b6:fe:48:95:2a:72:c2:d9:75:11:51:
         9c:8f:98:c7:18:f6:3f:82:3a:b1:e2:bf:e0:b1:33:5f:44:35:
         a8:66:50:d0:f3:48:0f:9e:55:3d:46:11:e4:ca:be:b2:00:00:
         2a:b3:d8:18:e0:62:14:32:08:ac:80:bb:4c:90:a4:30:2b:05:
         0a:88:41:aa:3d:0e:30:37:47:36:67:19:d9:01:35:73:8c:c2:
         ae:2a:c0:64:f8:e6:33:bf:ba:ff:a2:8f:77:b9:cb:76:f2:ff:
         33:2d:3d:f7:68:d0:6d:27:98:61:9b:05:ac:db:fc:1e:18:3b:
         90:54:24:80:0a:46:ae:1a:c1:f4:78:68:5e:e4:71:cb:fb:cd:
         6a:79:df:17:cc:b3:c5:1c:7a:ef:4f:04:bf:34:4c:df:78:b9:
         ea:12:94:2b:d7:80:48:c0:49:e3:71:70:32:7f:72:af:35:66:
         c8:ec:e7:35:bf:4a:1b:85:aa:0d:7a:31:76:8f:6e:11:92:42:
         76:6f:03:1b:02:ca:4b:7e:ee:3f:99:58:13:3d:16:c9:93:a6:
         f9:81:9c:14:6c:44:a4:99:a7:c2:79:10:3d:1d:92:37:90:79:
         6c:3c:95:a0:50:f3:14:23:a7:7f:38:ae:24:4b:be:d4:c8:12:
         2a:8f:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----