Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/EAA025E4E28411ED96FA330FC4F9AE02.roa
File:                     EAA025E4E28411ED96FA330FC4F9AE02.roa (raw, json)
Hash identifier:          4v8Mh6bixSirPe52wMAOJVMMUmIsX5rBB+VhsWIoVxs=
Subject key identifier:   9F:EC:86:F6:C8:D9:D8:85:17:0E:E3:86:90:67:77:F2:1B:50:9E:92
Certificate issuer:       /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Certificate serial:       FF
Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/EAA025E4E28411ED96FA330FC4F9AE02.roa
Signing time:             Mon 24 Apr 2023 09:46:42 +0000
ROA not before:           Mon 24 Apr 2023 09:46:42 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     147001
IP address blocks:        103.190.178.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
        Validity
            Not Before: Apr 24 09:46:42 2023 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=64465002-0a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:e6:8e:18:18:85:e1:25:46:f5:ae:9f:05:
                    cd:16:3d:57:0d:ec:4f:e7:00:10:89:1f:ed:83:7d:
                    fe:95:78:2e:33:e5:ac:14:f9:07:0f:ef:7f:eb:44:
                    ba:a0:02:f5:06:c8:a4:53:bf:e8:ab:07:09:98:dd:
                    c2:5e:b9:fe:04:e8:52:c6:77:d8:b6:1c:06:c0:56:
                    0f:bb:63:ba:bb:ce:87:f2:1b:e1:64:04:62:94:d1:
                    a0:04:4c:32:30:4a:36:8d:22:d1:f0:37:d1:55:6f:
                    9e:9b:09:87:02:49:8c:aa:1c:0a:d7:5e:b2:d9:3f:
                    03:33:56:f2:f6:94:1b:a8:26:64:c5:ca:3c:65:18:
                    d5:28:3b:06:23:65:d5:40:ef:41:e9:07:87:a9:df:
                    a5:9d:b7:49:9f:d6:9b:22:ed:eb:2f:17:a4:70:37:
                    a4:29:59:34:fd:85:dc:f5:0a:cd:0d:3f:80:aa:ce:
                    bd:64:5b:5b:a0:14:04:62:a1:39:3a:32:1f:6f:3e:
                    7f:b1:44:6b:ee:78:d7:83:60:6d:2a:08:86:ee:63:
                    b0:1a:69:e9:01:6e:41:1c:68:39:22:23:a9:1e:49:
                    81:d1:b8:a7:b5:10:93:44:b0:3c:da:c9:a5:4b:29:
                    6b:a0:39:67:7b:54:d9:ab:e7:a6:05:c9:46:20:14:
                    c9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EC:86:F6:C8:D9:D8:85:17:0E:E3:86:90:67:77:F2:1B:50:9E:92
            X509v3 Authority Key Identifier:
                keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/EAA025E4E28411ED96FA330FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:ef:dd:99:b3:79:a5:9d:fe:ce:02:82:c5:95:06:e0:36:da:
         37:b5:2f:b9:a3:53:27:3e:16:69:1a:68:b9:26:bb:dc:68:d0:
         06:6f:35:af:e9:1d:a6:5c:27:b5:4f:a2:a6:17:7a:69:f1:87:
         de:1e:c0:80:5b:d2:be:bd:c6:ad:30:9a:c9:ff:9d:51:83:e6:
         10:bd:6e:a1:f3:9f:f4:bd:18:b6:64:e1:5c:81:35:59:8a:29:
         3b:a9:ee:6d:e9:73:c6:b8:f1:7a:c6:3a:f1:71:20:42:a1:67:
         4e:e8:88:7c:b1:5a:01:e5:f3:3c:7e:fa:47:ad:1f:99:b7:d2:
         ac:cc:2b:e2:98:85:36:d5:47:84:ca:11:95:4f:57:39:9e:7d:
         8f:7c:61:f0:15:99:6f:db:de:58:aa:bd:96:b3:ab:0d:e2:ed:
         83:aa:7f:80:2b:f5:04:d0:95:a5:0c:8e:39:62:64:95:6c:4e:
         2c:c7:17:1f:5d:cf:20:14:79:7a:07:18:06:0d:e4:34:be:17:
         45:7c:0e:f3:42:1a:54:15:0f:7c:7e:b7:2f:3b:f6:bd:84:96:
         ca:da:29:a3:99:f9:21:10:df:4f:5e:c9:88:2d:3e:05:ae:48:
         41:3d:83:9f:86:3c:bd:4f:4a:25:2d:2b:31:3f:e7:7f:28:95:
         5a:d4:f6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----