Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/392DE006982F11EE8FF2303EC4F9AE02.roa
File:                     392DE006982F11EE8FF2303EC4F9AE02.roa (raw, json)
Hash identifier:          OZUjSvLp0MPR8fiXfYnkSwhcbuizkHTu02fAKqDL5Q8=
Subject key identifier:   28:22:22:52:C1:64:CF:BF:F2:99:B2:1F:4D:A5:FB:A9:0A:00:CF:15
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0E46
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/392DE006982F11EE8FF2303EC4F9AE02.roa
Signing time:             Mon 11 Dec 2023 14:11:49 +0000
ROA not before:           Mon 11 Dec 2023 14:11:49 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        113.203.213.0/24 maxlen: 24
                          113.203.255.0/24 maxlen: 24
                          180.178.147.0/24 maxlen: 24
                          180.178.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3654 (0xe46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Dec 11 14:11:49 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=657718a4-dc94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:29:16:81:12:c1:bd:f4:72:fb:64:16:26:01:
                    74:f4:93:6d:28:f8:55:7c:76:f0:eb:f1:d4:b0:0a:
                    3e:de:13:e3:41:48:41:67:3a:b3:3c:67:df:37:45:
                    24:ce:f1:28:d2:df:b6:5f:af:ab:8c:65:fa:43:eb:
                    c0:0f:61:31:b0:ea:35:36:a0:a8:1b:a4:ca:94:5e:
                    30:a7:70:54:e2:ec:b1:0d:c5:a9:e1:2e:f7:08:ea:
                    d2:59:ee:7d:09:ab:2e:2f:42:d4:e6:27:13:f0:47:
                    1c:ea:d3:48:71:db:e9:e7:7d:1b:6d:1d:9d:1e:79:
                    50:c0:5f:9f:77:bb:16:93:3f:78:94:8c:28:db:d4:
                    f0:64:b9:97:5d:a5:0b:d4:40:ed:75:db:ee:e7:9b:
                    2a:7b:8f:27:9e:1d:93:2f:82:14:c4:f1:eb:3b:6f:
                    58:88:d7:54:38:a0:c8:59:c3:5c:1b:55:ff:de:68:
                    55:27:de:6c:a0:2f:11:1f:9f:ef:47:93:b4:84:8e:
                    13:e1:e1:fd:1b:27:75:4f:cf:6a:06:02:61:45:71:
                    a8:85:a7:4a:24:b2:06:da:77:fc:ac:2b:8e:95:76:
                    bd:a0:5b:0d:a7:7f:05:f2:c7:ca:af:5f:8f:16:e7:
                    d2:be:09:09:df:95:0c:99:30:f4:43:4d:f2:d0:98:
                    41:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:22:22:52:C1:64:CF:BF:F2:99:B2:1F:4D:A5:FB:A9:0A:00:CF:15
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/392DE006982F11EE8FF2303EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.213.0/24
                  113.203.255.0/24
                  180.178.147.0/24
                  180.178.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:bf:b1:ae:cc:d1:1d:e7:58:57:46:2d:e8:c3:5e:5f:84:c4:
         33:37:6c:a4:b0:a8:62:2e:0a:0d:19:2a:11:db:4f:95:8d:64:
         bd:db:a5:3a:89:b0:bc:a8:39:d4:e8:c1:dd:79:fa:e4:ef:86:
         2f:be:d4:1e:fe:fb:e3:3b:5e:0f:d8:63:40:d6:7d:b1:78:c8:
         4d:9e:f4:e1:a8:56:02:04:e7:f7:6f:c7:92:d4:97:de:d9:3a:
         a1:51:86:b6:e1:df:2c:d2:18:48:cc:0c:8a:50:69:ac:b6:2d:
         de:7a:a5:1e:79:74:4d:5b:87:d4:e7:de:84:d8:f4:b1:39:f8:
         a2:c6:6e:7b:35:69:75:26:05:4b:0c:aa:01:c1:db:1d:87:91:
         a0:4c:bf:3d:2a:87:2e:20:57:05:ca:cc:78:80:15:2d:6b:11:
         6d:a3:74:b6:52:dd:9e:40:09:bd:90:cb:94:c7:0a:0e:71:22:
         20:a0:5c:32:7b:33:ef:46:04:81:20:15:83:f0:eb:8b:e1:5c:
         ad:82:e2:36:ef:a8:97:f5:c3:e2:e2:ec:88:3b:ab:d4:0d:ea:
         b9:f2:af:83:59:eb:8e:9b:1f:3d:60:ae:d3:b4:2d:ac:9d:7d:
         a0:66:ea:90:45:77:4e:7c:bc:dd:d0:f6:a6:4f:63:f8:92:15:
         c5:90:74:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----