Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C71DE56C0A3311EEAF2C6623C4F9AE02.roa
File:                     C71DE56C0A3311EEAF2C6623C4F9AE02.roa (raw, json)
Hash identifier:          T/7dFlQPHoB7VLhHmTjs26G+6fMjMqhbOmxtOFRtZ24=
Subject key identifier:   78:49:DC:60:88:17:16:40:AF:38:7C:12:93:2B:BB:32:08:AC:F5:60
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7546
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C71DE56C0A3311EEAF2C6623C4F9AE02.roa
Signing time:             Mon 10 Jul 2023 09:31:32 +0000
ROA not before:           Mon 10 Jul 2023 09:31:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     132752
IP address blocks:        103.114.67.0/24 maxlen: 24
                          103.163.14.0/23 maxlen: 24
                          103.168.60.0/24 maxlen: 24
                          103.171.108.0/24 maxlen: 24
                          103.179.121.0/24 maxlen: 24
                          103.180.177.0/24 maxlen: 24
                          103.214.162.0/24 maxlen: 24
                          103.214.163.0/24 maxlen: 24
                          103.229.209.0/24 maxlen: 24
                          2001:df2:8d40::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30022 (0x7546)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul 10 09:31:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64abcff4-2dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c7:6a:05:c9:13:51:a4:4f:da:08:44:1a:23:
                    ee:61:7b:d5:35:d8:1d:3d:f3:66:ce:e7:af:d3:0c:
                    6d:df:a8:ed:db:d8:b0:a6:75:57:fd:33:8a:95:3b:
                    a8:fd:19:45:d4:bc:30:31:4d:08:28:a5:40:fb:fb:
                    4d:e0:d8:a3:75:2f:96:09:13:2b:85:0f:1f:ef:2e:
                    60:2c:fd:4f:e6:06:f3:21:f1:b5:0d:ec:64:54:9c:
                    36:12:d8:56:4a:7d:6d:69:bc:90:a7:ac:d6:be:0f:
                    f9:af:26:39:49:2f:85:00:82:76:72:b1:67:ba:19:
                    ea:2f:86:dc:96:97:39:d0:8b:a3:37:3a:eb:72:21:
                    e3:5a:0d:4b:ed:0a:9c:78:d6:5a:5f:50:5e:5d:5a:
                    c5:23:83:86:c9:96:36:b8:a2:cd:c9:0a:1d:8c:4c:
                    53:11:61:34:6c:8f:d5:29:61:c0:1f:b0:6f:86:c2:
                    5b:ef:6d:4d:ae:8d:96:fd:3b:e8:c4:5b:e2:1e:15:
                    84:b5:15:3f:ea:34:aa:a3:f9:28:8e:04:4e:93:d8:
                    cc:c8:cb:9f:15:d0:1f:8b:cd:2f:bd:12:e5:75:4d:
                    c9:d2:7e:e2:e7:27:c0:cb:06:18:cb:79:72:b6:a1:
                    3e:55:40:22:71:62:62:cd:d6:69:fd:da:e8:88:83:
                    a2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:49:DC:60:88:17:16:40:AF:38:7C:12:93:2B:BB:32:08:AC:F5:60
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C71DE56C0A3311EEAF2C6623C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.67.0/24
                  103.163.14.0/23
                  103.168.60.0/24
                  103.171.108.0/24
                  103.179.121.0/24
                  103.180.177.0/24
                  103.214.162.0/23
                  103.229.209.0/24
                IPv6:
                  2001:df2:8d40::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:05:ac:85:0f:16:5d:1f:2e:0d:cc:82:dd:90:1a:71:17:31:
         b2:33:2f:9c:03:74:02:74:4c:ec:40:87:8a:4d:d8:b3:fe:c0:
         9a:8f:49:ea:c6:3c:14:e2:bc:76:2b:06:3d:a0:a6:8f:f4:2f:
         e3:62:be:44:12:50:18:69:de:73:d4:ad:1b:df:b5:3f:85:2c:
         fb:38:88:ef:3d:db:f1:81:e5:02:5a:29:f5:11:40:7e:29:a7:
         71:8c:f6:ab:a5:cc:80:89:cd:ee:8e:e0:a0:ab:57:cc:f7:12:
         c6:7e:7c:bf:99:aa:72:5c:ee:7d:6f:40:e2:09:9d:2e:36:51:
         4b:4b:fd:4f:63:ba:6c:e6:dd:43:92:6a:95:d7:da:34:09:b1:
         9f:fe:7f:a8:56:ff:18:af:88:6c:49:d3:66:b3:92:de:ac:73:
         de:45:2a:10:3a:81:50:e5:a3:b2:73:2f:b6:b0:55:8d:4b:25:
         38:ff:b0:5d:59:a8:75:39:c3:05:6b:7d:14:ba:70:3f:30:20:
         d4:3f:9b:5d:12:d4:20:2e:5c:37:ff:b6:e6:aa:72:95:ac:87:
         2f:ae:f0:d9:76:f8:12:aa:88:e0:10:5e:71:3f:30:66:94:5e:
         5b:73:a9:6c:a5:6a:0b:d5:5c:1e:3b:a0:84:d6:a7:f5:15:94:
         7d:af:5c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----