Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A57BC1DC64D811EDA41EF047C4F9AE02.roa
File:                     A57BC1DC64D811EDA41EF047C4F9AE02.roa (raw, json)
Hash identifier:          85qgBj2rC9RPDAWlec/7Xk+nEb6u+pvqe4aAXU7KSzc=
Subject key identifier:   CE:46:31:98:7F:65:03:C2:7E:69:F8:4F:5E:C4:7A:1C:F1:19:F8:FE
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       09E5
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A57BC1DC64D811EDA41EF047C4F9AE02.roa
Signing time:             Thu 24 Nov 2022 10:29:23 +0000
ROA not before:           Thu 24 Nov 2022 10:29:23 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     38547
IP address blocks:        115.167.2.0/24 maxlen: 24
                          115.167.72.0/22 maxlen: 24
                          115.167.78.0/24 maxlen: 24
                          115.167.108.0/22 maxlen: 24
                          175.110.96.0/24 maxlen: 24
                          175.110.105.0/24 maxlen: 24
                          175.110.111.0/24 maxlen: 24
                          202.92.16.0/24 maxlen: 24
                          202.92.17.0/24 maxlen: 24
                          202.92.23.0/24 maxlen: 24
                          202.92.24.0/24 maxlen: 24
                          202.92.24.32/27 maxlen: 27
                          202.92.25.0/24 maxlen: 24
                          202.92.26.0/24 maxlen: 24
                          202.92.27.0/24 maxlen: 24
                          202.92.28.0/24 maxlen: 24
                          202.92.29.0/24 maxlen: 24
                          202.92.30.0/24 maxlen: 24
                          202.92.31.0/24 maxlen: 24
                          2400:9560:1::/48 maxlen: 48
                          2400:9560:5::/48 maxlen: 48
                          2400:9560:9::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2533 (0x9e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Nov 24 10:29:23 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=637f4782-357d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:23:84:e5:5e:6f:1c:a3:41:f6:e3:cb:67:c6:
                    eb:b5:a2:0b:4d:4e:7c:21:3b:34:b3:1f:4e:9a:4a:
                    98:20:37:3b:37:8a:14:74:ed:a5:43:1f:11:fa:fa:
                    ff:0b:69:23:c9:e1:0b:58:12:77:53:4d:fe:7f:29:
                    82:15:d7:d1:d4:be:ca:8c:7a:df:14:ac:7a:8f:a5:
                    ba:bf:d4:79:9a:d8:8f:c2:21:36:6b:fa:e6:31:3e:
                    69:de:2d:df:96:06:33:41:9a:76:6f:df:47:6c:2a:
                    19:8f:f3:94:4d:1e:33:9e:c1:58:58:88:ad:0a:21:
                    fa:90:35:10:35:5a:ec:bf:f1:5a:b4:87:2e:d8:15:
                    8f:09:c3:60:42:03:12:50:1d:0e:f0:a0:b3:a1:8a:
                    53:01:10:1b:a5:4d:2f:9b:df:b6:8a:a1:ea:fd:f0:
                    5c:c2:1a:49:48:f1:a7:a3:47:4b:56:2a:ce:4d:6b:
                    00:dd:1e:7d:6b:c3:ba:f4:4f:b5:d3:89:ee:59:e9:
                    96:7e:2a:be:67:87:1e:b6:dc:f5:c3:b1:b7:39:f8:
                    37:a6:2d:a3:68:d7:e2:bd:26:c4:db:c5:14:ca:a1:
                    b4:48:f3:03:3c:dd:4a:2a:77:e3:3b:31:41:64:26:
                    81:75:51:27:b5:97:a6:ae:4f:4b:af:c0:69:1b:f5:
                    76:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:46:31:98:7F:65:03:C2:7E:69:F8:4F:5E:C4:7A:1C:F1:19:F8:FE
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A57BC1DC64D811EDA41EF047C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.2.0/24
                  115.167.72.0/22
                  115.167.78.0/24
                  115.167.108.0/22
                  175.110.96.0/24
                  175.110.105.0/24
                  175.110.111.0/24
                  202.92.16.0/23
                  202.92.23.0-202.92.31.255
                IPv6:
                  2400:9560:1::/48
                  2400:9560:5::/48
                  2400:9560:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:d8:9f:32:52:bb:e8:16:89:7f:97:89:db:69:12:b4:30:8b:
         06:02:a9:e0:72:2b:69:b8:40:d5:f5:36:51:73:e7:36:37:d5:
         8c:7e:a3:ee:2b:16:85:c4:e6:33:1f:ce:b7:05:3e:99:d1:26:
         24:80:39:6a:3e:61:ea:5d:bb:50:88:57:72:37:16:b1:4c:23:
         d0:a6:76:a3:ab:86:59:fe:f5:ed:5e:48:e6:96:85:86:d4:b8:
         7d:99:c3:19:da:6b:cf:9e:2d:93:1c:a3:27:a2:28:26:4d:31:
         ae:3f:29:bc:79:79:f8:47:06:e0:76:30:d3:5c:98:57:cf:3c:
         34:6c:10:10:87:cc:e6:42:db:f2:4c:af:cd:3e:4f:66:f8:c5:
         f9:15:f5:b0:7b:f0:4e:1b:d1:e0:ba:de:58:f7:bd:2d:4f:bc:
         d2:8b:1b:3f:4d:f0:2b:be:bd:5c:fa:0e:5f:5f:88:ad:50:dd:
         79:00:12:f7:4a:de:f1:0b:67:d0:3f:02:02:82:fa:56:1b:8c:
         ee:fd:2d:4e:c9:bc:3e:3c:93:9c:d7:27:5c:6c:d1:7f:0a:94:
         42:cc:8c:ce:b0:ec:5a:da:2f:57:ab:e8:5d:22:40:e4:79:87:
         c7:31:72:78:c5:93:78:9f:c0:70:42:5b:8a:72:0c:c4:8a:0c:
         8c:f5:8e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----