Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/65B546705F0F11EBBDB7C113C4F9AE02.roa
File:                     65B546705F0F11EBBDB7C113C4F9AE02.roa (raw, json)
Hash identifier:          uYyg7GObQi8M3x5HWL6CUsXSLf7pSemfe3UPFrmXtR0=
Subject key identifier:   FA:3C:AA:59:DD:18:F0:49:DF:EA:92:79:39:05:1F:0B:3F:05:23:91
Certificate issuer:       /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Certificate serial:       0653
Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/65B546705F0F11EBBDB7C113C4F9AE02.roa
Signing time:             Fri 10 Jun 2022 10:32:44 +0000
ROA not before:           Fri 10 Jun 2022 10:32:44 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     136933
IP address blocks:        103.151.44.0/23 maxlen: 23
                          103.151.45.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1619 (0x653)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
        Validity
            Not Before: Jun 10 10:32:44 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62a31dcc-d584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:15:dd:19:92:e6:20:e8:71:c9:da:b1:1c:60:
                    23:60:f5:cf:97:6c:b5:c8:09:42:23:c5:ba:30:18:
                    e7:b3:56:4f:43:c3:f8:59:11:eb:57:76:ab:6b:b0:
                    64:ce:a5:1f:9d:91:b9:6a:78:d8:22:22:a8:8d:d7:
                    5e:9c:f8:8b:8d:12:4b:b5:6a:e6:1b:8b:f6:85:be:
                    79:32:aa:91:43:d4:83:77:d5:f2:52:30:5a:8b:66:
                    d7:99:98:bf:ba:c5:a5:00:9d:80:ed:74:58:6c:ec:
                    68:e6:65:b2:6a:10:80:d8:6b:9a:48:ad:11:97:8c:
                    3d:f2:80:ea:69:33:75:b6:de:2b:97:12:f2:6f:26:
                    ef:68:0d:54:4f:4f:0d:8f:e9:9e:3a:10:ab:dc:14:
                    55:88:0d:77:f6:52:5c:ae:f8:1d:20:3d:ff:17:1b:
                    83:f1:d3:08:b9:c5:d4:e2:86:c7:6b:ad:6a:5f:90:
                    c4:2b:f1:fa:75:c0:66:5d:e6:4c:c7:62:23:bd:0e:
                    92:69:5a:76:4e:51:84:72:36:ef:cd:2e:31:7b:a7:
                    8e:b4:7a:70:a1:af:2e:77:18:38:65:15:2e:ea:3e:
                    a7:23:dd:ca:49:5e:a9:79:3c:e1:c5:ef:ff:c7:18:
                    20:1c:02:2e:90:35:71:d6:68:aa:98:10:52:23:78:
                    c8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3C:AA:59:DD:18:F0:49:DF:EA:92:79:39:05:1F:0B:3F:05:23:91
            X509v3 Authority Key Identifier:
                keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/65B546705F0F11EBBDB7C113C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:96:75:a8:f2:77:f9:70:60:11:36:61:62:f0:8d:9e:a2:cf:
         48:bb:6e:90:8b:d2:08:fb:b8:65:99:bf:a7:58:f0:11:0d:4b:
         7b:ff:de:31:e0:f5:1d:ab:91:0a:d0:e7:3a:5f:02:bf:00:96:
         61:a6:fc:0c:db:71:ac:c8:a4:99:53:70:84:e0:0f:0b:ca:72:
         9f:90:4c:13:e8:ad:33:d2:44:22:50:fc:7a:87:43:06:01:06:
         53:a8:b9:bd:ca:ed:c6:8c:50:d6:c4:29:2b:2b:d6:8f:0a:48:
         a1:a8:88:6c:e3:ea:90:15:ce:47:08:b8:91:d9:60:29:b7:eb:
         4c:a1:44:c5:06:b0:d0:54:ae:42:1c:d3:f6:a0:64:37:65:64:
         c9:37:0a:ef:e2:a5:c9:91:68:4a:16:5c:06:2c:1f:80:e7:fd:
         bd:6d:d8:08:af:df:25:91:3c:90:31:af:86:9e:cf:48:5c:c1:
         a7:46:a9:e0:c3:50:73:83:61:ab:b0:18:4b:63:dd:a4:a8:a9:
         1c:2a:92:1a:67:6e:a7:dc:29:37:79:86:54:65:44:45:a6:dd:
         67:5f:db:87:aa:0a:b3:d0:9b:9d:95:cc:ca:81:04:c8:23:7b:
         10:f0:1d:64:99:76:81:75:21:bb:b0:a9:99:d2:bc:fa:8f:6b:
         f6:04:cf:68
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0UzNkIxMTAvBgNVBAUTKERGQUQzODZDQUM5MjM0ODM4MEM1NzQ5MkRCMThGMkJD
ODQ5QzUyODYwHhcNMjIwNjEwMTAzMjQ0WhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmEzMWRjYy1kNTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5xXdGZLmIOhxydqxHGAjYPXPl2y1yAlCI8W6MBjns1ZPQ8P4WRHrV3ara7Bk
zqUfnZG5anjYIiKojddenPiLjRJLtWrmG4v2hb55MqqRQ9SDd9XyUjBai2bXmZi/
usWlAJ2A7XRYbOxo5mWyahCA2GuaSK0Rl4w98oDqaTN1tt4rlxLybybvaA1UT08N
j+meOhCr3BRViA139lJcrvgdID3/FxuD8dMIucXU4obHa61qX5DEK/H6dcBmXeZM
x2IjvQ6SaVp2TlGEcjbvzS4xe6eOtHpwoa8udxg4ZRUu6j6nI93KSV6peTzhxe//
xxggHAIukDVx1miqmBBSI3jIXwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPo8qlnd
GPBJ3+qSeTkFHws/BSORMB8GA1UdIwQYMBaAFN+tOGyskjSDgMV0ktsY8ryEnFKG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTM2Qi83QzJDNjI0MEEw
OTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05JT0F4WFNTMnhqeXZJU2NV
b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzM2MDRiS3lTTklPQXhYU1MyeGp5dklTY1VvWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0UzNkIvN0MyQzYyNDBBMDkxMTFFQUE5NDI3QzQ0QzRGOUFFMDIvNjVCNTQ2NzA1
RjBGMTFFQkJEQjdDMTEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnlywwDQYJKoZIhvcNAQELBQADggEBACGWdajyd/lwYBE2
YWLwjZ6iz0i7bpCL0gj7uGWZv6dY8BENS3v/3jHg9R2rkQrQ5zpfAr8AlmGm/Azb
cazIpJlTcITgDwvKcp+QTBPorTPSRCJQ/HqHQwYBBlOoub3K7caMUNbEKSsr1o8K
SKGoiGzj6pAVzkcIuJHZYCm360yhRMUGsNBUrkIc0/agZDdlZMk3Cu/ipcmRaEoW
XAYsH4Dn/b1t2Aiv3yWRPJAxr4aez0hcwadGqeDDUHODYauwGEtj3aSoqRwqkhpn
bqfcKTd5hlRlREWm3Wdf24eqCrPQm52VzMqBBMgjexDwHWSZdoF1IbuwqZnSvPqP
a/YEz2g=
-----END CERTIFICATE-----