Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A0DBCB02843711EEA5DBE177C4F9AE02.roa
File:                     A0DBCB02843711EEA5DBE177C4F9AE02.roa (raw, json)
Hash identifier:          nHWgjNEiRxshurMHavaNdPKWM4ZcLx91MUZ4FbOEYnI=
Subject key identifier:   C9:27:DE:2D:75:E3:D1:35:C2:4C:20:D6:18:1E:1B:54:F4:C2:E0:67
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0E1E
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A0DBCB02843711EEA5DBE177C4F9AE02.roa
Signing time:             Wed 29 Nov 2023 04:56:42 +0000
ROA not before:           Wed 29 Nov 2023 04:56:42 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     138241
IP address blocks:        115.167.49.0/24 maxlen: 24
                          115.167.56.0/22 maxlen: 24
                          115.167.78.0/24 maxlen: 24
                          202.92.18.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3614 (0xe1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Nov 29 04:56:42 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6566c489-6ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:13:76:b7:0d:61:af:1d:32:ea:7a:04:61:a7:
                    45:64:e6:c8:cf:58:11:5e:32:1c:0f:7e:39:f1:4f:
                    72:80:d0:1d:f3:f7:1f:9c:bd:5a:70:eb:25:10:b1:
                    ad:8a:fb:36:7c:88:f7:00:f7:db:21:66:9b:68:00:
                    a3:50:b8:da:26:9c:0f:04:07:7b:b4:92:6d:e4:3c:
                    12:c9:bb:22:0a:32:ed:f9:1d:6b:06:8e:61:fc:5c:
                    a8:e3:8a:fc:d8:30:e0:50:9f:e8:39:2e:28:52:cd:
                    c2:81:e8:8f:cc:d5:dc:41:a6:2d:f0:b1:06:8e:9a:
                    18:4f:4e:67:f3:f7:35:50:6a:10:30:16:cd:66:6f:
                    8b:e4:61:30:b8:d3:be:4f:c0:d2:34:c0:16:33:93:
                    c8:f6:10:60:3f:5b:35:19:0a:d9:19:ac:48:90:7b:
                    91:e3:93:c1:9e:b5:54:dd:bb:51:6f:e5:b7:e7:b7:
                    35:f0:ec:58:6e:73:6d:a0:46:f4:e0:93:09:1c:60:
                    69:89:50:68:1c:ab:e6:59:0f:61:67:f5:76:bd:33:
                    ab:3e:36:03:8d:6c:e0:c1:46:61:bf:dc:76:76:c1:
                    e5:bf:8a:1d:d5:b6:84:db:9b:e3:53:89:0f:5f:d3:
                    ef:7a:bb:e6:8b:dd:61:67:a6:c2:d3:dd:26:ce:2a:
                    9b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:27:DE:2D:75:E3:D1:35:C2:4C:20:D6:18:1E:1B:54:F4:C2:E0:67
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A0DBCB02843711EEA5DBE177C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.49.0/24
                  115.167.56.0/22
                  115.167.78.0/24
                  202.92.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:bd:7b:ca:a5:b7:2d:47:78:b4:44:58:30:60:b3:f2:dc:6d:
         ec:e1:12:87:dc:fa:e8:01:8b:34:13:39:3a:3c:2d:72:77:e8:
         dc:16:78:3e:1e:6e:00:29:cf:fd:d2:e7:5f:cb:fb:01:00:16:
         4b:b7:f0:44:af:38:54:6e:ab:5f:03:85:55:47:4f:79:f5:83:
         cb:6a:dd:26:25:7d:17:8d:c3:29:8e:a6:92:20:e6:44:10:5d:
         2f:0a:58:0e:04:81:85:61:e6:97:92:96:65:31:ca:7f:6e:88:
         b6:f0:1f:71:22:d5:77:1a:6d:74:92:ab:c6:e1:7f:52:b2:08:
         34:85:fa:8e:87:fb:e9:90:2a:b0:b7:2e:42:a4:c2:c9:3e:bd:
         5b:d2:23:41:e8:c3:bb:69:74:8f:39:da:a3:85:72:a2:d7:09:
         6c:fd:e4:f0:0d:e6:92:01:f8:c0:c9:10:1c:3f:bf:07:c9:6f:
         97:6b:95:46:60:9e:cd:60:16:b5:c1:39:c4:c1:03:d3:14:85:
         d0:e8:fa:57:ce:66:fe:41:06:82:51:31:d8:3d:ab:1d:27:14:
         bf:29:82:2d:76:1e:49:1e:b0:f5:e6:65:ef:5c:c9:68:5f:b8:
         89:10:19:17:00:8e:5e:24:00:b4:25:82:6d:48:2b:8a:8d:41:
         d6:40:f2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----