Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/60BAFB86310A11EEB582570BC4F9AE02.roa
File:                     60BAFB86310A11EEB582570BC4F9AE02.roa (raw, json)
Hash identifier:          NuQZRsvdP2vGDh7UuEYVy5KUthZsp18H/PhnNpIunzM=
Subject key identifier:   6A:EB:16:E5:1F:0A:D6:97:47:F4:84:0B:65:40:BF:70:AD:68:C1:0F
Certificate issuer:       /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial:       03B8
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/60BAFB86310A11EEB582570BC4F9AE02.roa
Signing time:             Wed 02 Aug 2023 07:58:34 +0000
ROA not before:           Wed 02 Aug 2023 07:58:34 +0000
ROA not after:            Sun 31 Mar 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        43.226.231.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952 (0x3b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
        Validity
            Not Before: Aug  2 07:58:34 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=64ca0caa-d09e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:cf:19:34:00:e6:b0:86:e4:c3:cd:83:2f:
                    2c:0d:fc:3b:93:07:c8:7a:c5:8b:c7:c2:17:2e:c3:
                    7b:ce:c1:b6:e2:a7:ef:97:a4:ad:5d:a8:35:52:e1:
                    5d:7c:c5:df:0a:55:d9:5b:03:8a:a3:ab:6d:49:41:
                    ca:92:d4:dc:d2:fa:d6:86:19:19:bb:02:6c:50:b2:
                    4b:bb:98:89:4a:3a:b3:9a:61:62:14:b9:19:2d:09:
                    dc:f5:07:10:69:8f:b2:d6:91:3b:7e:44:f1:5c:df:
                    57:9e:27:c0:f9:96:5d:70:89:bb:27:ec:d6:9f:20:
                    54:6a:bb:e0:06:21:4f:f6:dc:e3:5e:07:d3:f9:b1:
                    b4:13:e3:5a:54:fd:74:00:c5:c5:32:1a:91:8b:a9:
                    43:60:95:8d:bf:17:1c:e7:4b:da:c3:a0:b1:f3:51:
                    00:60:c1:b3:39:28:05:c6:b4:32:f8:0f:3b:fb:ec:
                    16:d8:24:9e:e0:a9:4e:7b:c3:32:b5:a8:49:bd:f3:
                    7f:8d:6b:6b:d7:0e:a2:d7:d1:46:89:61:02:b0:f9:
                    cc:bb:dd:3c:fc:da:7f:7a:b3:ea:91:aa:35:63:b6:
                    f3:4e:17:0b:74:af:09:e5:e1:dc:4c:06:24:44:bb:
                    bc:17:12:f2:0e:52:14:e5:95:fd:a9:84:e7:e5:3c:
                    94:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EB:16:E5:1F:0A:D6:97:47:F4:84:0B:65:40:BF:70:AD:68:C1:0F
            X509v3 Authority Key Identifier:
                keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/60BAFB86310A11EEB582570BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:90:ec:18:eb:d4:6a:4a:d7:23:23:48:68:f2:6f:d4:3b:a9:
         05:e9:28:05:b8:90:af:b2:a7:31:3e:71:30:1d:41:11:eb:3f:
         19:06:16:37:ac:90:59:fa:db:74:2e:0f:46:ae:48:00:27:85:
         8d:a9:6e:88:54:9f:1b:f9:72:3a:fa:e7:ae:a9:a2:71:93:33:
         e6:f8:c7:63:96:c2:69:f3:f1:ce:31:fc:0d:89:09:96:f1:05:
         46:4e:b1:57:f4:c4:30:da:06:17:5b:0c:2e:e6:0f:8c:1c:21:
         d6:18:f1:89:1e:3e:72:ba:03:b4:a5:c0:b6:7c:ea:14:de:21:
         0f:c1:5f:e3:26:60:0a:a3:6e:c0:d5:4c:6c:13:46:86:e0:26:
         6d:cb:bc:d0:50:c9:21:1b:5a:22:4a:b7:15:33:dd:ad:91:cd:
         1e:a5:32:e6:7f:cc:5a:5d:c5:28:cb:b2:38:4c:a8:5e:76:60:
         ff:9c:a1:cb:b1:a8:32:d0:b7:df:5b:37:8a:d6:ea:86:74:ed:
         b9:69:8d:cc:9e:da:e6:cf:64:fe:52:00:9e:69:2d:7c:87:4f:
         0d:86:eb:85:9f:5e:ea:c0:eb:33:14:8e:88:1d:1b:bc:fe:c6:
         ed:42:99:81:3a:31:1f:01:3c:cf:a6:b8:75:c2:99:5e:32:4d:
         8f:ed:df:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----