Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/3C68DD505A1A11EE99B7EC4BC4F9AE02.roa
File:                     3C68DD505A1A11EE99B7EC4BC4F9AE02.roa (raw, json)
Hash identifier:          7/f0Gp5XRAx3b7O/hTzeDeEHZiZVhssFvVINCZgSFlM=
Subject key identifier:   E2:78:5E:EA:8B:F8:D4:52:E2:C7:AD:20:AD:93:A8:0B:D3:5F:62:51
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       8C
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/3C68DD505A1A11EE99B7EC4BC4F9AE02.roa
Signing time:             Sat 23 Sep 2023 14:05:22 +0000
ROA not before:           Sat 23 Sep 2023 14:05:22 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        125.62.77.0/24 maxlen: 24
                          125.62.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Sep 23 14:05:22 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=650ef0a2-615d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fe:80:cc:b4:89:79:96:5a:05:78:56:69:d0:
                    77:5d:d5:86:91:72:11:7e:7d:2b:98:09:84:8b:90:
                    27:60:6b:ac:b5:48:7a:f9:ae:81:e8:b9:c9:f8:cb:
                    35:73:f7:30:c1:c8:59:fe:0e:15:3f:7a:25:86:0e:
                    99:b9:11:79:c3:84:a7:12:df:58:e5:8a:d1:d5:bc:
                    43:5b:fd:0d:27:64:eb:f6:0e:a3:b0:7f:ce:29:4b:
                    ce:9b:1c:14:13:f3:e5:df:1d:ea:54:49:47:74:27:
                    99:df:65:3a:c2:85:f1:2b:9f:be:03:8a:7c:8c:dc:
                    59:7d:26:35:64:d7:e1:07:35:0c:ca:8f:a4:d6:00:
                    24:ad:4a:03:42:5e:a6:ea:fc:e4:7b:68:96:92:f0:
                    ad:40:a1:2e:98:25:bd:a3:5e:af:87:a9:8b:b3:ae:
                    49:3e:d9:c0:d0:d5:bc:e1:98:e8:66:ba:8c:63:02:
                    2d:91:9e:d9:1e:1a:88:34:08:20:21:d9:3d:cb:e6:
                    0d:fb:58:95:61:d5:50:bc:71:e8:c8:4b:03:0d:23:
                    8d:b4:55:c2:1e:dc:fa:9c:2a:6d:e5:c5:65:ae:88:
                    a7:36:80:9a:e4:b5:dc:7c:53:01:d3:a7:c3:dd:17:
                    a9:85:63:97:3a:1b:fc:ed:2d:9b:75:cb:9f:8d:38:
                    b2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:78:5E:EA:8B:F8:D4:52:E2:C7:AD:20:AD:93:A8:0B:D3:5F:62:51
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/3C68DD505A1A11EE99B7EC4BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.62.77.0-125.62.78.255

    Signature Algorithm: sha256WithRSAEncryption
         3d:8f:b7:e0:a5:18:98:bf:ac:fb:0c:29:74:51:ed:bf:69:5c:
         e0:66:01:52:cf:6f:c5:eb:c3:5f:f4:ed:89:68:ce:d8:fb:1d:
         fb:e9:5f:24:73:94:b8:0c:e5:78:e4:8e:13:d3:63:53:a1:c7:
         c0:96:48:dc:96:cf:86:aa:c5:6d:88:43:c1:c8:b1:aa:ae:e9:
         4c:ee:69:3c:ac:9c:20:c7:55:fb:25:2b:2c:46:f5:36:88:da:
         5a:4b:9d:74:52:ff:1e:64:8b:fa:01:10:90:0d:3b:7d:fe:a9:
         5e:68:0b:02:62:92:75:3f:68:8e:1f:16:ff:23:63:33:9c:20:
         9e:98:bd:77:8f:d6:5b:28:da:73:78:05:f3:6c:e1:47:d9:72:
         81:c6:b3:fc:94:f2:71:d1:b6:35:34:99:07:05:78:cc:94:e6:
         d9:e8:91:e2:e2:6b:79:ec:7a:40:93:7b:11:44:b4:80:62:cf:
         1f:f4:61:b6:04:9d:ee:96:23:26:5e:59:7d:f2:5b:af:c7:86:
         04:03:6c:ed:c1:54:72:ae:af:b1:b9:16:7b:8c:04:9f:9b:03:
         4c:b8:d8:19:26:ea:40:5f:74:c1:60:58:29:0e:02:77:dd:98:
         8d:d5:c3:56:04:f6:fd:88:31:43:6e:56:5d:ce:94:6f:a8:71:
         d4:f5:e1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----