Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/7523B54008B611EDACE57065C4F9AE02.roa
File:                     7523B54008B611EDACE57065C4F9AE02.roa (raw, json)
Hash identifier:          5JRLhiKIr0xC/GJUDxwx+vcx05VDHcuv0h+SufaxaYo=
Subject key identifier:   FD:86:1D:8D:8E:23:84:FA:1C:99:6A:A1:C6:61:47:7F:D0:D0:BB:99
Certificate issuer:       /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial:       0499
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/7523B54008B611EDACE57065C4F9AE02.roa
Signing time:             Wed 15 Nov 2023 04:44:24 +0000
ROA not before:           Wed 15 Nov 2023 04:44:24 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     147027
IP address blocks:        110.164.234.0/24 maxlen: 24
                          110.164.235.0/24 maxlen: 24
                          2403:6200:7928::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1177 (0x499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
        Validity
            Not Before: Nov 15 04:44:24 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=65544ca8-b43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:39:5c:38:26:b4:8b:b0:e2:80:bd:9d:a9:bc:
                    1f:b9:f2:7b:20:db:82:89:f7:fb:89:ac:35:23:b6:
                    e8:10:af:43:ae:2b:8d:91:70:9e:95:d6:f6:a9:30:
                    25:48:a2:7f:39:a0:a5:86:78:d1:d3:83:ec:e0:7a:
                    99:dd:88:4e:73:39:aa:c2:ad:fa:bd:81:28:fb:0d:
                    21:b2:05:a1:ac:7d:a7:33:a8:c2:9e:11:0f:fa:ee:
                    df:c2:08:bd:62:d9:90:e9:03:18:9e:b4:f7:be:2a:
                    2b:ec:66:9e:83:e0:3a:b7:ae:74:0e:45:0c:82:5d:
                    76:de:9e:40:1b:89:1b:28:0f:77:05:4d:4d:7b:f6:
                    a1:58:81:eb:19:36:4c:17:0f:fb:56:b3:cf:d5:19:
                    ea:97:24:06:0e:78:6c:95:71:62:21:8e:06:76:a7:
                    d7:8b:47:16:27:d5:b4:72:49:70:81:1a:44:00:68:
                    34:ac:75:f2:e6:4c:cc:03:8e:d7:0d:57:23:c2:fb:
                    ed:6b:87:38:be:1a:73:60:a8:c2:72:7d:90:48:b2:
                    27:b0:5f:41:35:0c:a8:db:bc:46:79:fe:0e:03:06:
                    16:e4:b5:b4:d5:d0:4b:05:89:c3:85:1e:85:f6:22:
                    e6:90:9b:c7:23:3f:80:19:62:d9:3a:78:cc:cc:a5:
                    0a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:86:1D:8D:8E:23:84:FA:1C:99:6A:A1:C6:61:47:7F:D0:D0:BB:99
            X509v3 Authority Key Identifier:
                keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/7523B54008B611EDACE57065C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.164.234.0/23
                IPv6:
                  2403:6200:7928::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:ba:54:59:65:8c:ad:f1:90:26:d8:4e:db:13:e1:5e:0f:b8:
         cc:d3:51:01:80:bb:e1:a4:b8:22:64:b3:2e:fe:da:b0:80:49:
         0f:9f:b3:43:16:69:6c:90:19:6e:f9:08:b6:04:14:92:c8:ba:
         94:c4:d2:6b:13:52:c9:83:0d:1e:ce:a3:6d:90:9b:f4:ec:f7:
         94:39:47:0f:cd:1f:6a:64:86:1a:17:6e:40:d8:7d:70:7a:f4:
         74:f8:d7:5c:2a:30:96:93:5d:a8:23:05:05:10:a1:1e:cd:55:
         9f:08:f7:09:a9:37:fd:4b:6b:eb:a1:19:99:27:a9:50:58:5d:
         c7:8e:68:6d:9c:ce:c6:19:10:9a:a9:62:bc:27:66:b6:f9:65:
         c1:e9:60:a2:6d:aa:42:a2:99:e2:ba:29:fc:66:26:5b:b7:40:
         c5:9f:f5:6e:25:d9:67:df:43:d9:ae:18:25:58:57:b1:c1:7c:
         e3:05:9d:04:1a:b6:33:d0:5f:56:64:35:22:6e:04:2e:01:d4:
         95:0e:72:c6:b3:48:d3:71:fa:84:ae:0b:b9:f5:57:b2:5b:fc:
         80:cd:4c:60:03:ee:1d:6d:b3:8a:d1:18:47:14:b3:3f:8e:b9:
         79:bb:6d:5c:c4:c0:58:d6:b2:e2:43:d9:e2:a2:1c:15:9e:f4:
         a9:cf:9d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----