Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D7230764312911EDB244411CC4F9AE02.roa
File:                     D7230764312911EDB244411CC4F9AE02.roa (raw, json)
Hash identifier:          4ktjVaTtz6JWnPSadE2yraRlOiwJ97EjjhOviMWMNj8=
Subject key identifier:   31:2D:7A:D4:0C:1B:9C:4D:FA:3F:46:76:01:60:1E:E7:06:B5:FD:42
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0A8D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D7230764312911EDB244411CC4F9AE02.roa
Signing time:             Tue 07 Feb 2023 10:09:11 +0000
ROA not before:           Tue 07 Feb 2023 10:09:11 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        115.167.16.0/22 maxlen: 24
                          115.167.60.0/22 maxlen: 24
                          115.167.104.0/22 maxlen: 24
                          115.167.112.0/22 maxlen: 24
                          115.167.116.0/22 maxlen: 24
                          175.110.68.0/22 maxlen: 24
                          175.110.72.0/22 maxlen: 24
                          175.110.76.0/22 maxlen: 22
                          175.110.80.0/22 maxlen: 24
                          175.110.84.0/22 maxlen: 24
                          175.110.88.0/22 maxlen: 24
                          175.110.92.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2701 (0xa8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Feb  7 10:09:11 2023 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=63e22347-c397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:08:e9:62:60:ca:1e:50:e8:d0:22:39:13:6a:
                    7b:de:9d:f0:18:7d:34:78:ea:c8:23:7b:33:f4:b5:
                    93:69:13:4b:ea:37:6f:2f:fe:9e:29:28:85:39:37:
                    0d:a0:96:18:8b:90:35:fb:b1:db:9f:b7:92:40:19:
                    a3:31:65:d3:7b:50:0b:4e:2b:e8:7b:54:cf:c9:05:
                    55:19:6b:f5:24:f5:76:19:b2:b7:91:91:65:bc:98:
                    69:b0:c1:53:69:b4:63:87:a2:e9:1b:b4:9b:66:79:
                    b8:a6:50:4f:20:31:22:bc:d0:70:3a:6c:63:0a:88:
                    d4:04:51:8d:a0:d5:eb:07:83:b1:98:7a:98:b3:ae:
                    ef:4e:3f:5d:02:b9:87:b8:fd:5b:74:bf:ab:51:48:
                    25:e6:7b:ab:fc:b3:54:ce:54:46:6b:82:d7:73:ed:
                    f7:4b:53:2d:82:84:64:5c:bf:28:61:59:6d:fd:dd:
                    c5:b0:91:01:c6:73:da:41:cf:35:1d:2d:2f:8e:82:
                    0f:18:fa:cb:cc:40:67:d3:1b:62:9c:d3:e2:d1:00:
                    d8:ff:f9:48:5f:9d:62:b1:0e:a0:b1:8e:51:34:50:
                    20:cf:53:9a:c7:3b:6f:84:40:40:44:d5:13:4d:8d:
                    48:73:22:d1:4c:ef:3c:dd:67:6c:07:41:c0:29:9d:
                    bd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2D:7A:D4:0C:1B:9C:4D:FA:3F:46:76:01:60:1E:E7:06:B5:FD:42
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D7230764312911EDB244411CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.16.0/22
                  115.167.60.0/22
                  115.167.104.0/22
                  115.167.112.0/21
                  175.110.68.0-175.110.95.255

    Signature Algorithm: sha256WithRSAEncryption
         59:93:b2:87:a9:de:b8:ea:3d:16:ff:33:7c:3c:b3:71:3b:eb:
         4b:7f:a0:ce:5d:c2:25:e2:79:ad:e6:09:9f:19:b2:1d:8f:03:
         e5:01:47:50:56:54:70:8d:11:a2:2d:4d:51:7b:9e:1d:87:a8:
         bc:dc:c8:18:d4:33:13:e2:4f:ec:16:f2:b3:6f:d6:e2:5d:73:
         9e:62:13:9b:25:48:4b:ae:48:dd:21:1c:c9:8d:17:80:b9:5c:
         dc:60:cd:b1:86:b6:f9:04:22:69:41:0f:bc:25:c9:e3:03:aa:
         d1:57:00:43:30:c4:56:82:0e:1a:ed:32:0d:dc:fe:39:59:33:
         77:27:d9:45:9c:17:05:d7:86:63:00:3d:3c:e4:91:ea:db:1f:
         ad:88:cb:75:e1:3a:81:70:5e:8f:78:85:c5:3a:ce:8f:19:56:
         7e:bd:0f:1a:21:b7:0a:3e:02:59:3d:55:48:1c:d7:bb:6f:03:
         da:12:31:af:43:89:d3:3b:e5:75:46:b1:1f:71:89:87:62:8d:
         be:5b:f1:53:2a:0b:70:37:51:4d:c4:f0:49:8d:2e:bb:fb:57:
         a1:4b:d1:a1:5c:42:de:d6:c0:38:80:bd:1d:bd:de:37:67:72:
         a7:ee:c1:ec:a9:04:2c:0d:88:82:67:01:d6:9f:11:d1:df:ed:
         cd:5e:f9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----