Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/1F4C04E86AF811ED91303A71C4F9AE02.roa
File:                     1F4C04E86AF811ED91303A71C4F9AE02.roa (raw, json)
Hash identifier:          S2RoAGxbnfmsMp8w1AAiHqcRUnVrzJyeAiAlhHcT+Z4=
Subject key identifier:   0D:29:EA:23:15:B5:56:96:0A:4C:8F:BA:78:0F:1D:0A:2D:22:B6:1F
Certificate issuer:       /CN=A917E726/serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D
Certificate serial:       0929
Authority key identifier: D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/1F4C04E86AF811ED91303A71C4F9AE02.roa
Signing time:             Thu 30 Mar 2023 21:47:53 +0000
ROA not before:           Thu 30 Mar 2023 21:47:53 +0000
ROA not after:            Wed 29 May 2024 00:00:00 +0000
asID:                     139904
IP address blocks:        103.148.172.0/24 maxlen: 24
                          2001:df2:df80::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2345 (0x929)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E726/serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D
        Validity
            Not Before: Mar 30 21:47:53 2023 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=64260388-ab7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8e:ea:0d:e5:df:53:f0:f0:95:34:4b:0a:d6:
                    d3:ac:75:32:a3:72:73:4e:39:bc:10:85:33:d6:f0:
                    09:2e:08:b9:70:96:40:27:eb:72:e9:ec:9d:fe:9c:
                    a4:a7:d5:d4:51:b2:67:a3:ae:bd:93:66:e8:6b:74:
                    a0:5c:98:aa:39:02:1e:ec:5a:41:57:82:5d:f0:e6:
                    d6:40:38:5a:90:56:79:b1:e0:7b:ba:28:f5:2f:c0:
                    d4:07:40:2e:c9:23:83:22:16:89:88:af:00:20:0a:
                    42:bf:32:d6:15:ee:8d:c5:6d:9a:3f:05:94:dc:d4:
                    1d:e0:dc:00:67:aa:e9:62:78:29:e3:d3:cf:23:3a:
                    81:b2:c9:2a:ea:32:fe:c9:84:73:19:97:bf:98:ef:
                    e9:e8:a8:11:bc:2e:0d:54:bc:7f:fb:2e:24:b2:a8:
                    f3:70:ae:09:42:f9:6c:4c:44:b9:de:72:0a:a8:6f:
                    e4:94:c6:84:94:7b:7b:04:3b:c6:ee:05:40:9a:30:
                    a0:38:e0:3d:da:d0:76:00:5d:85:88:45:b1:76:45:
                    68:22:2a:19:53:65:25:91:fd:78:30:b5:3f:6c:6e:
                    ee:76:db:20:84:5d:64:d5:e4:06:fc:40:1a:d2:d2:
                    b6:61:07:9a:10:26:8c:35:63:81:0c:e3:4c:77:37:
                    f8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:29:EA:23:15:B5:56:96:0A:4C:8F:BA:78:0F:1D:0A:2D:22:B6:1F
            X509v3 Authority Key Identifier:
                keyid:D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/1F4C04E86AF811ED91303A71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.172.0/24
                IPv6:
                  2001:df2:df80::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:a7:a3:b8:b7:9c:87:ae:b8:1d:48:1e:92:ce:93:5f:0c:2c:
         62:51:81:f3:c1:fb:a7:96:a7:00:d0:f0:7e:ab:c7:e9:fc:d2:
         d6:5e:f7:bc:af:40:4a:69:53:d2:af:ec:40:6a:33:5e:59:92:
         9b:52:5f:5a:b5:47:c4:46:29:b9:98:53:6f:2f:6b:eb:e8:28:
         71:43:c8:2c:66:ea:28:6d:68:36:a0:de:7f:be:9d:12:27:ed:
         7f:61:3f:30:81:52:98:40:8a:b1:b2:19:e8:f6:47:4f:59:0d:
         0b:41:2b:eb:a2:67:cf:b3:5a:85:d3:8b:d5:f4:35:61:6a:43:
         93:25:c1:da:6f:a0:69:64:46:66:2b:eb:d6:90:e5:9d:fc:f2:
         d2:22:46:8a:6e:af:12:de:ec:eb:fb:ba:cd:8c:c4:7c:41:9d:
         c5:59:a7:a3:33:01:b0:96:92:11:39:2d:05:30:84:b1:a0:03:
         9b:68:bf:8b:de:ff:a4:3c:28:4d:a2:df:d3:57:ec:fa:4d:d7:
         88:f3:23:10:b7:77:d3:01:71:39:a2:e2:80:a6:78:a6:49:51:
         21:b5:c8:32:49:4f:0f:af:1c:64:b9:44:aa:e1:94:61:f1:e2:
         ee:42:e6:eb:bd:01:aa:4a:d4:32:5d:f0:13:54:fb:4f:5f:86:
         27:ed:7d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----