Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/C80B258C535511EE8D84A184C4F9AE02.roa
File:                     C80B258C535511EE8D84A184C4F9AE02.roa (raw, json)
Hash identifier:          Dhzo4GqnoBAgLqqX0OVWBiudjhF4HaoFekOOuvkZu+s=
Subject key identifier:   E8:92:53:35:7E:75:08:6B:AD:22:6A:26:6A:01:03:2F:7E:F0:95:F0
Certificate issuer:       /CN=A9175C2B/serialNumber=62C0DA7F30205E141903852B863230F9E1E2F9CD
Certificate serial:       02
Authority key identifier: 62:C0:DA:7F:30:20:5E:14:19:03:85:2B:86:32:30:F9:E1:E2:F9:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/C80B258C535511EE8D84A184C4F9AE02.roa
Signing time:             Thu 14 Sep 2023 23:23:59 +0000
ROA not before:           Thu 14 Sep 2023 23:23:59 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     7545
IP address blocks:        203.189.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175C2B/serialNumber=62C0DA7F30205E141903852B863230F9E1E2F9CD
        Validity
            Not Before: Sep 14 23:23:59 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6503960f-d1c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:82:8a:a8:f8:d6:9e:1e:c4:a9:bf:b8:33:b3:
                    b6:a4:c0:4f:61:b3:14:06:4b:39:43:af:d2:d1:9a:
                    c7:54:e5:d7:f6:a6:54:aa:18:9c:32:ac:bd:f0:7b:
                    ed:a1:b6:41:5a:3c:95:98:99:94:aa:06:68:08:48:
                    eb:c2:2f:81:60:a7:d3:ec:1f:88:4e:ae:3b:4f:f2:
                    fb:0f:41:95:b0:d7:a8:03:0c:dc:3b:ba:2e:34:e7:
                    e8:18:31:73:8e:7d:37:a5:5e:3d:f6:ef:c6:c8:1a:
                    01:a6:80:89:10:6d:4f:e8:c1:76:fb:39:3c:ba:ae:
                    bd:66:40:e5:a8:ae:50:b4:b2:0b:c4:ab:e6:f9:ec:
                    c9:96:cd:c5:63:0c:af:3e:79:71:0b:a8:5c:db:d0:
                    3c:67:4c:54:c6:09:ef:21:50:e3:87:21:fc:ef:5a:
                    85:75:73:37:1e:af:0b:39:74:b5:d3:74:e1:e4:6c:
                    59:bd:ea:52:d3:14:69:85:ea:fe:ac:dd:02:d8:b8:
                    f7:df:3f:03:49:e7:cb:83:4d:2d:85:4e:b4:d7:3d:
                    a8:af:df:3b:3f:4e:b7:96:3b:5c:2d:ec:b1:5d:e4:
                    14:a5:5f:16:2c:cb:75:d7:8e:21:c1:a5:5b:38:b1:
                    5b:7a:db:30:75:25:e9:df:46:ad:5a:9d:54:2a:7e:
                    1f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:92:53:35:7E:75:08:6B:AD:22:6A:26:6A:01:03:2F:7E:F0:95:F0
            X509v3 Authority Key Identifier:
                keyid:62:C0:DA:7F:30:20:5E:14:19:03:85:2B:86:32:30:F9:E1:E2:F9:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/C80B258C535511EE8D84A184C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.189.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:ee:9b:81:fc:a1:52:b5:13:57:23:78:14:a0:8e:c0:8f:48:
         13:15:a1:25:66:3c:93:1b:5d:76:fe:cb:1f:1e:12:88:bc:dc:
         e3:ae:34:bd:e6:c1:69:ad:13:5c:62:d1:a0:f2:2e:9e:f9:93:
         8d:8c:2a:cb:86:9e:46:7a:4b:20:be:76:fe:ef:6b:da:73:ad:
         5b:96:88:2c:87:36:15:ed:51:84:12:d0:cc:85:2f:86:d8:c8:
         5b:41:54:d7:10:3f:f6:55:6a:86:b5:ef:da:ad:e9:78:bb:61:
         52:4b:29:f7:ff:04:3a:4d:b1:9b:e8:3c:22:70:0a:6a:87:22:
         32:80:30:50:e8:0f:e8:f3:29:4c:92:af:85:5d:2a:1b:26:1b:
         67:a6:b8:a0:96:d9:77:30:59:f2:c5:95:1e:40:c3:f4:4c:b6:
         9a:cf:7f:79:da:52:88:f7:e5:82:03:ca:3a:fe:73:7c:d3:d7:
         0b:59:1e:4f:25:0f:32:f2:c6:35:e2:95:eb:d6:39:eb:5b:69:
         52:5b:3b:57:ac:08:1c:05:61:91:f4:dd:a7:db:5f:1c:28:81:
         4b:f6:4b:a2:94:51:a9:ae:d6:e0:be:48:09:58:18:16:9b:60:
         ec:21:b0:c0:f6:f0:39:35:ec:1e:18:91:d3:1f:5c:8a:f8:54:
         91:d0:ac:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----