Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/AC0B7CF87FD211EDBB0AF633C4F9AE02.roa
File:                     AC0B7CF87FD211EDBB0AF633C4F9AE02.roa (raw, json)
Hash identifier:          sWDPPKi7RJDKYMWsPPKTsOA+ETPa7UlrXaQgBXi7HVM=
Subject key identifier:   9A:34:A2:A8:9C:78:22:53:15:88:6B:05:8E:E6:04:1A:97:83:08:A6
Certificate issuer:       /CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6
Certificate serial:       E5
Authority key identifier: F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/AC0B7CF87FD211EDBB0AF633C4F9AE02.roa
Signing time:             Sat 25 Mar 2023 06:16:15 +0000
ROA not before:           Sat 25 Mar 2023 06:16:15 +0000
ROA not after:            Wed 29 May 2024 00:00:00 +0000
asID:                     54203
IP address blocks:        36.255.205.0/24 maxlen: 24
                          36.255.206.0/23 maxlen: 23
                          103.209.252.0/24 maxlen: 24
                          2404:5d80:6000::/40 maxlen: 40
                          2404:5d80:6100::/40 maxlen: 40
                          2404:5d80:6300::/40 maxlen: 40
                          2404:5d80:6600::/40 maxlen: 40
                          2404:5d80:6800::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6
        Validity
            Not Before: Mar 25 06:16:15 2023 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=641e91af-fccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b4:bf:08:b5:35:cd:7c:7e:45:19:e0:b8:4b:
                    86:af:f5:c9:68:a0:37:c6:69:1d:51:7d:20:cf:66:
                    2d:ca:0e:84:f0:12:76:d1:df:fc:ce:3b:ec:7d:30:
                    97:be:1b:6f:f0:28:e6:b7:64:fc:9f:47:45:09:fb:
                    2d:5b:2b:f0:28:31:eb:a2:91:72:05:d2:5b:be:5f:
                    c9:ad:2c:ad:db:80:e7:bf:7e:ed:34:fa:21:8f:4c:
                    2d:32:c9:5a:29:32:6f:19:83:c6:4d:4b:37:16:76:
                    fa:90:7b:35:a2:86:8c:4f:62:eb:f5:90:ce:8a:45:
                    a5:f3:6b:e6:ae:fd:62:1a:46:36:e1:45:7d:01:6f:
                    37:06:f9:89:87:b9:90:23:e9:9c:56:16:b7:43:7f:
                    73:57:da:d1:3a:d7:3d:ed:fc:4f:8f:a6:ce:b1:c0:
                    df:a2:6f:23:36:83:44:c0:ea:57:dd:de:3c:44:12:
                    f0:fc:ab:7f:c8:b4:dd:3d:a0:62:ae:43:64:e1:d5:
                    98:69:75:fa:0e:a1:19:6a:af:03:d6:fd:94:0a:64:
                    29:22:bb:21:c9:3a:7d:9c:22:4b:a2:aa:b0:df:af:
                    fb:53:45:ec:3c:7d:cf:e1:aa:d0:8c:84:55:3c:5a:
                    d7:21:45:01:37:a8:87:d8:36:21:6d:35:43:72:9d:
                    45:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:34:A2:A8:9C:78:22:53:15:88:6B:05:8E:E6:04:1A:97:83:08:A6
            X509v3 Authority Key Identifier:
                keyid:F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/AC0B7CF87FD211EDBB0AF633C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.255.205.0-36.255.207.255
                  103.209.252.0/24
                IPv6:
                  2404:5d80:6000::/39
                  2404:5d80:6300::/40
                  2404:5d80:6600::/40
                  2404:5d80:6800::/40

    Signature Algorithm: sha256WithRSAEncryption
         ba:9d:76:c5:df:d9:0e:40:a7:3d:3f:1d:69:0a:d5:3d:6a:f1:
         06:91:86:a4:c3:63:2f:48:ea:89:0c:6d:eb:6f:58:30:9c:51:
         10:73:a3:9c:e8:68:a4:2c:21:ac:0f:aa:66:95:fc:f6:92:e3:
         a8:91:79:0b:14:06:98:6a:2c:ff:44:3a:db:e3:18:b5:b9:a9:
         3c:cc:c7:02:13:52:21:51:0e:56:65:1c:78:3f:1d:da:02:0a:
         ea:66:93:70:ea:5a:95:a1:2d:b4:c7:59:41:c6:37:fb:4c:86:
         99:a8:0e:54:51:df:51:47:a9:1d:0e:6f:4b:e0:b0:a2:58:aa:
         80:e9:c8:c3:a1:7c:0d:c7:3a:2f:f9:ea:79:44:c6:7d:16:01:
         bd:c9:ac:6b:c0:85:55:0c:3a:4e:c6:5f:00:34:a7:93:37:17:
         8b:36:37:9f:d9:c4:80:6f:f7:ba:01:1d:65:b6:64:81:08:5e:
         00:6e:5c:1f:bf:20:a5:78:e6:2d:2b:82:43:01:54:47:7f:2f:
         71:49:f0:6b:f1:99:96:37:05:37:90:64:c2:08:c5:ae:24:2c:
         34:f2:9f:73:80:17:d5:f7:53:bf:1f:5c:10:e5:d1:4c:fc:1e:
         19:f4:30:e7:ab:1d:50:f9:62:cd:16:a0:0b:97:32:d5:fd:ba:
         7e:28:95:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----