Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/88A20E66972011EDB621A458C4F9AE02.roa
File:                     88A20E66972011EDB621A458C4F9AE02.roa (raw, json)
Hash identifier:          +A3StXZcBsLdNpJfwzyMNcG7TwYSXgZP4YABFHMfdLY=
Subject key identifier:   6E:DF:6B:85:85:69:DC:B0:E1:60:11:66:A2:87:EB:CB:4B:23:D0:F7
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0A6C
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/88A20E66972011EDB621A458C4F9AE02.roa
Signing time:             Wed 18 Jan 2023 11:09:11 +0000
ROA not before:           Wed 18 Jan 2023 11:09:11 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     38547
IP address blocks:        115.167.0.0/24 maxlen: 24
                          115.167.1.0/24 maxlen: 24
                          115.167.2.0/24 maxlen: 24
                          115.167.4.0/24 maxlen: 24
                          115.167.72.0/22 maxlen: 24
                          115.167.78.0/24 maxlen: 24
                          115.167.104.0/22 maxlen: 24
                          115.167.108.0/22 maxlen: 24
                          115.167.112.0/22 maxlen: 24
                          115.167.116.0/22 maxlen: 24
                          115.167.126.0/24 maxlen: 24
                          115.167.127.0/24 maxlen: 24
                          175.110.96.0/24 maxlen: 24
                          175.110.105.0/24 maxlen: 24
                          175.110.111.0/24 maxlen: 24
                          202.92.16.0/24 maxlen: 24
                          202.92.17.0/24 maxlen: 24
                          202.92.18.0/24 maxlen: 24
                          202.92.19.0/24 maxlen: 24
                          202.92.20.0/24 maxlen: 24
                          202.92.23.0/24 maxlen: 24
                          202.92.24.0/24 maxlen: 24
                          202.92.24.32/27 maxlen: 27
                          202.92.25.0/24 maxlen: 24
                          202.92.26.0/24 maxlen: 24
                          202.92.27.0/24 maxlen: 24
                          202.92.28.0/24 maxlen: 24
                          202.92.29.0/24 maxlen: 24
                          202.92.30.0/24 maxlen: 24
                          202.92.31.0/24 maxlen: 24
                          2400:9560:1::/48 maxlen: 48
                          2400:9560:5::/48 maxlen: 48
                          2400:9560:9::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2668 (0xa6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jan 18 11:09:11 2023 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=63c7d356-b249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b0:97:82:61:d0:41:c9:9b:f2:31:14:d6:f6:
                    60:63:e0:b4:b3:c8:80:fd:7b:56:d6:d8:ae:e8:da:
                    c3:15:d5:75:2e:62:b9:ac:23:fa:34:d1:7f:8a:a1:
                    8d:ed:f0:ae:a4:52:5e:77:58:73:2e:ba:bd:eb:37:
                    d7:d9:f7:87:c4:4c:01:40:a3:47:09:d4:21:30:3c:
                    06:6a:ae:1b:35:94:82:9e:08:f6:66:ac:11:7c:8e:
                    cd:d1:82:ae:80:22:2b:6f:ed:88:8c:c7:1d:b3:bc:
                    86:cc:59:20:b1:8f:b2:dd:55:ec:d0:96:71:6b:15:
                    4e:01:8e:7a:61:42:c4:47:50:2d:af:04:d0:80:d1:
                    8b:61:26:25:09:34:20:49:35:17:c7:2e:4f:47:cd:
                    d1:98:b5:a5:e6:ea:e7:c8:09:d4:d3:37:ef:cd:71:
                    83:af:78:8c:36:e9:01:b4:cf:7f:35:8f:2c:65:3d:
                    62:11:c1:f1:cc:b7:8e:a6:06:af:c1:90:f5:19:03:
                    2b:1c:35:38:05:5e:8c:83:b7:28:7c:d6:c0:db:90:
                    2a:19:ad:ed:d4:38:c0:2f:90:7d:ab:a9:74:3d:10:
                    63:4d:99:9c:ef:78:60:2d:e5:8e:70:39:7d:03:68:
                    d2:df:dd:f4:21:89:70:45:c8:ef:04:75:51:b6:68:
                    7b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DF:6B:85:85:69:DC:B0:E1:60:11:66:A2:87:EB:CB:4B:23:D0:F7
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/88A20E66972011EDB621A458C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.0.0-115.167.2.255
                  115.167.4.0/24
                  115.167.72.0/22
                  115.167.78.0/24
                  115.167.104.0-115.167.119.255
                  115.167.126.0/23
                  175.110.96.0/24
                  175.110.105.0/24
                  175.110.111.0/24
                  202.92.16.0-202.92.20.255
                  202.92.23.0-202.92.31.255
                IPv6:
                  2400:9560:1::/48
                  2400:9560:5::/48
                  2400:9560:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:6f:71:f9:50:ee:cc:6d:dc:a8:eb:68:11:1e:87:49:4e:43:
         cb:48:70:e4:c1:bf:bc:a7:f4:52:4c:d1:52:a6:53:e2:ed:a8:
         da:d8:44:3c:bb:e1:c3:6d:ac:18:2e:9a:87:f2:b0:92:ff:e9:
         54:f3:07:17:10:f0:e1:b0:11:2d:a4:5a:9d:0a:90:c7:e4:2e:
         89:5e:46:69:c8:19:39:ad:48:ab:4b:52:0e:d8:a7:d5:3a:e2:
         90:fc:23:87:e5:21:85:64:f1:a3:30:72:43:f2:4c:23:76:9d:
         f9:53:1a:c0:cf:f1:db:b0:93:49:2b:41:bb:da:17:e3:7c:cc:
         19:4f:27:81:40:7d:f7:e1:e0:f2:17:e7:89:24:11:6d:ad:36:
         46:5b:3e:93:cd:12:ed:c6:c6:c7:a0:ef:e4:b0:46:9f:df:03:
         69:22:4a:b2:d9:86:26:b6:90:e7:a2:5b:0d:4e:54:cf:b8:22:
         8d:e6:b3:f5:8d:52:17:a5:06:b2:16:8b:f0:e1:85:b4:f3:d0:
         08:21:83:77:a2:d7:3a:a6:f8:5c:dc:47:ab:3f:d0:ad:6e:79:
         37:b8:26:83:22:5e:b2:4c:6d:0e:56:4b:4b:b3:5f:60:67:66:
         6c:d1:2c:fc:54:72:d4:60:06:1d:69:22:f4:9d:00:50:ca:b3:
         8e:b7:ce:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----