Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/01A750843E8C11EDA0D15634C4F9AE02.roa
File:                     01A750843E8C11EDA0D15634C4F9AE02.roa (raw, json)
Hash identifier:          iXTQ+oLfdEjwJlw2tz0NCW2IiEVP76LQMQPNzS4G1DE=
Subject key identifier:   78:86:82:A3:CF:5A:10:17:32:83:4B:20:BD:22:0D:E0:A6:2F:8A:B2
Certificate issuer:       /CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
Certificate serial:       0197
Authority key identifier: 62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/01A750843E8C11EDA0D15634C4F9AE02.roa
Signing time:             Tue 27 Sep 2022 17:44:16 +0000
ROA not before:           Tue 27 Sep 2022 17:44:16 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     142615
IP address blocks:        103.170.230.0/23 maxlen: 26

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
        Validity
            Not Before: Sep 27 17:44:16 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=63333670-353a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:50:b7:89:28:58:e8:a6:12:5f:fb:4e:4d:
                    78:71:c7:11:40:7c:ff:59:3f:20:cc:23:90:d5:34:
                    5b:2b:18:ad:cd:c7:b0:2f:64:e3:04:d6:07:8a:64:
                    e4:a4:5f:fd:2c:3e:74:ad:1a:09:73:e9:f0:03:88:
                    7b:21:9f:0d:6e:6e:15:70:4b:18:ec:89:80:2d:db:
                    b5:87:40:38:2f:bf:11:68:c2:7f:e2:55:0e:79:16:
                    82:cf:50:17:a7:90:a9:5e:55:42:47:07:42:b1:e6:
                    7f:25:4a:92:63:40:cb:f3:2c:8e:7d:ee:16:ba:5f:
                    b5:a7:2d:c4:6b:e4:63:88:d7:21:69:29:e6:ac:0a:
                    22:80:a7:3c:a4:ef:96:84:92:06:60:9b:86:76:ef:
                    38:29:21:cf:55:6d:63:35:82:f0:72:af:23:62:02:
                    85:2a:89:4e:01:64:ac:a0:b7:12:6e:c0:d2:57:0e:
                    b7:52:f5:9c:28:49:48:4c:52:0f:fb:27:83:6a:64:
                    30:ce:2f:42:3a:18:09:c3:09:f1:73:3c:0b:14:7c:
                    e6:88:8b:20:d9:a8:f4:a1:7f:26:e2:53:aa:1b:6d:
                    61:6a:6e:43:9f:a7:db:ee:3c:80:39:36:9d:c8:89:
                    bf:71:c3:ee:71:fe:3d:fa:30:51:23:8c:4b:00:db:
                    56:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:86:82:A3:CF:5A:10:17:32:83:4B:20:BD:22:0D:E0:A6:2F:8A:B2
            X509v3 Authority Key Identifier:
                keyid:62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/01A750843E8C11EDA0D15634C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:5f:78:88:5c:e8:60:aa:aa:9e:ff:8d:14:6e:2a:83:57:f6:
         6f:7a:21:82:70:22:1c:e1:c5:77:78:b6:aa:e0:4a:c3:3b:72:
         d0:4a:e3:f6:71:75:24:df:6a:78:65:a9:2c:0b:e8:0a:05:48:
         fd:fd:c4:ad:a2:40:d5:e6:21:3d:27:be:4c:07:24:ba:3b:ca:
         9f:17:75:ca:58:04:e3:1d:15:4c:1a:b3:64:49:18:28:ca:ed:
         25:4a:9b:e7:9d:3d:92:f5:0e:b0:e0:9b:be:c5:9c:47:b6:69:
         3d:7a:d8:87:64:f6:29:14:f5:89:f6:13:35:91:e3:bf:9a:cc:
         4c:35:33:f3:95:8e:ec:83:de:cf:3a:78:32:9e:cc:f6:c0:88:
         b9:db:66:b8:a0:60:b6:51:50:2d:84:9d:13:01:1c:93:dd:c8:
         e3:27:8f:ae:78:62:28:f8:b8:af:d9:45:e1:c0:fd:c5:68:d9:
         b6:f5:d6:63:73:09:b5:67:1c:20:35:fd:91:19:cf:71:19:67:
         f5:c0:af:44:88:85:63:69:0a:5a:87:10:8d:20:ff:20:e2:d8:
         01:db:18:a6:4f:53:ea:18:a8:ac:fa:c7:f8:a2:ec:92:d1:50:
         70:b6:93:90:4d:bc:ba:eb:c7:b8:79:df:05:14:53:df:94:ad:
         c4:15:d9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----