Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/935A31F81C9111EDB7CECA3FC4F9AE02.roa
File:                     935A31F81C9111EDB7CECA3FC4F9AE02.roa (raw, json)
Hash identifier:          C/4naxMErR8qcZ5khtbZjlxuXfMFVuGJ95qEUKrXLuY=
Subject key identifier:   58:10:47:F3:F8:E9:EE:1A:84:EB:93:AA:2D:0E:6C:6B:54:1E:76:CD
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       08C5
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/935A31F81C9111EDB7CECA3FC4F9AE02.roa
Signing time:             Thu 18 Aug 2022 11:18:17 +0000
ROA not before:           Thu 18 Aug 2022 11:18:17 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     38547
IP address blocks:        115.167.2.0/24 maxlen: 24
                          115.167.50.0/24 maxlen: 24
                          115.167.72.0/22 maxlen: 24
                          115.167.100.0/22 maxlen: 24
                          115.167.112.0/22 maxlen: 24
                          175.110.88.0/22 maxlen: 24
                          175.110.104.0/24 maxlen: 24
                          175.110.107.2/32 maxlen: 32
                          175.110.107.14/32 maxlen: 32
                          175.110.107.114/32 maxlen: 32
                          175.110.108.0/22 maxlen: 23
                          175.110.108.0/23 maxlen: 24
                          175.110.110.0/24 maxlen: 24
                          202.92.16.0/24 maxlen: 24
                          202.92.17.0/24 maxlen: 24
                          202.92.18.0/24 maxlen: 24
                          202.92.19.0/24 maxlen: 24
                          202.92.20.0/24 maxlen: 24
                          202.92.21.0/24 maxlen: 24
                          202.92.23.0/24 maxlen: 24
                          202.92.24.0/24 maxlen: 24
                          202.92.24.32/27 maxlen: 27
                          202.92.25.0/24 maxlen: 24
                          202.92.26.0/24 maxlen: 24
                          202.92.27.0/24 maxlen: 24
                          202.92.28.0/24 maxlen: 24
                          202.92.29.0/24 maxlen: 24
                          202.92.30.0/24 maxlen: 24
                          202.92.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2245 (0x8c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Aug 18 11:18:17 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=62fe1ff9-1075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f0:d9:b1:a3:8b:6d:39:77:fd:86:97:17:d7:
                    5e:51:34:b9:dc:cf:1e:4b:ab:07:1e:3b:ae:25:4c:
                    09:80:ba:f6:73:a6:0e:9d:88:b2:cf:af:f2:97:a3:
                    7e:dd:2f:23:4c:eb:3e:76:6a:b1:0b:14:87:0c:21:
                    28:ec:eb:59:c5:76:cd:49:22:73:45:d9:56:59:29:
                    b9:0b:36:92:f8:dc:74:d6:02:17:0d:1d:98:cb:83:
                    21:e8:aa:ee:d0:f9:91:64:c8:11:81:91:40:ce:35:
                    71:80:7e:8b:71:12:71:12:e0:c7:17:6a:28:ab:5d:
                    4f:ba:85:32:b3:a6:11:39:34:ff:e4:cc:0d:f7:38:
                    0b:9f:a4:ee:30:7c:1e:38:22:c9:a0:10:5f:c7:69:
                    81:06:17:39:46:c6:de:99:41:bf:f4:da:9d:b5:d6:
                    c1:e0:a8:52:53:ed:07:56:89:fe:96:fb:10:ba:69:
                    b7:1c:dc:ac:48:cc:33:63:9d:ad:0e:74:c0:c2:64:
                    e9:d6:1f:b1:7e:bd:49:53:48:1f:3f:9b:9f:de:55:
                    94:43:66:57:af:4b:60:76:77:36:20:6c:52:35:91:
                    1b:b0:70:bb:94:3b:09:cd:c5:6b:6f:13:8c:1d:e0:
                    fa:c0:5d:fe:d6:a0:c3:f4:d2:c7:e6:58:1c:d7:d9:
                    4b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:10:47:F3:F8:E9:EE:1A:84:EB:93:AA:2D:0E:6C:6B:54:1E:76:CD
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/935A31F81C9111EDB7CECA3FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.2.0/24
                  115.167.50.0/24
                  115.167.72.0/22
                  115.167.100.0/22
                  115.167.112.0/22
                  175.110.88.0/22
                  175.110.104.0/24
                  175.110.107.2/32
                  175.110.107.14/32
                  175.110.107.114/32
                  175.110.108.0/22
                  202.92.16.0-202.92.21.255
                  202.92.23.0-202.92.31.255

    Signature Algorithm: sha256WithRSAEncryption
         a6:7b:d3:3a:9e:58:6b:76:79:ff:ab:36:cf:77:fa:ab:4b:02:
         97:58:69:3d:a3:fd:8b:13:18:f1:30:36:53:c6:fc:eb:78:9d:
         c4:10:07:20:08:7e:82:92:6f:12:7a:89:06:42:18:60:fa:cf:
         8d:49:a7:bd:14:95:d4:9a:e4:29:25:1f:19:38:de:3f:38:44:
         41:b5:68:44:74:cc:25:63:05:39:67:13:3e:97:a8:1f:a0:f1:
         46:3a:de:84:bd:df:84:b8:19:80:25:e3:cc:67:5e:3c:ee:c0:
         55:5c:57:6c:11:f9:41:39:08:84:b1:ad:a8:6c:cc:49:8b:17:
         32:95:8f:54:2f:a1:29:30:cb:df:f5:84:bb:4d:86:86:88:26:
         40:f2:f5:8f:54:7d:8f:1e:06:37:12:1c:75:f1:d5:bc:fc:df:
         ac:7c:97:86:86:18:b4:a9:e4:60:cb:a9:08:9d:a9:26:f1:a5:
         45:83:3f:45:0c:1e:d9:1b:c4:ff:c5:1b:ba:21:e6:de:d3:c1:
         27:6a:3e:34:d8:ca:c9:f3:a3:4b:7e:4a:0c:4d:5f:dd:96:5a:
         e9:b8:75:eb:5e:0f:27:32:5f:1a:80:7e:14:44:be:25:4b:5c:
         3d:8f:d6:22:0a:c6:a8:fe:7a:28:28:ba:ba:a7:09:0b:dc:23:
         cd:9e:d5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----