Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/11C774520C5611EDBBC3A10FC4F9AE02.roa
File:                     11C774520C5611EDBBC3A10FC4F9AE02.roa (raw, json)
Hash identifier:          +T0noQRIZZ3HpVSqD6A5YfDDwp2f4P7DT9rlIW2OcUI=
Subject key identifier:   03:68:93:66:BF:EC:BA:FE:08:DB:B9:4C:BB:3C:91:96:89:94:7A:64
Certificate issuer:       /CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
Certificate serial:       026B
Authority key identifier: 91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/11C774520C5611EDBBC3A10FC4F9AE02.roa
Signing time:             Fri 23 Dec 2022 04:03:26 +0000
ROA not before:           Fri 23 Dec 2022 04:03:26 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     142600
IP address blocks:        103.178.66.0/24 maxlen: 24
                          103.178.67.0/24 maxlen: 24
                          2001:df0:3540::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 619 (0x26b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
        Validity
            Not Before: Dec 23 04:03:26 2022 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=63a5288d-6999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b1:e9:25:a4:44:97:a8:2f:6d:9d:d2:31:8e:
                    d8:3b:41:46:00:cc:56:6f:ec:2d:4d:3c:49:8f:7f:
                    a0:5f:d1:cf:80:f4:0c:df:af:51:42:a6:7b:3b:e1:
                    d2:8a:d7:7e:87:3d:16:f1:8c:1b:f0:b6:59:d5:4d:
                    b7:60:8e:04:7b:1b:cf:2c:36:79:b2:f8:63:35:59:
                    0f:fa:4d:73:85:66:ba:af:59:d3:bf:f1:f8:22:d2:
                    67:98:df:c1:33:2f:11:ea:bb:d5:c8:83:0e:45:1c:
                    39:6c:27:33:5e:1d:6b:d8:f0:f8:f8:42:af:7b:a9:
                    7b:57:dc:ef:8d:24:d2:03:92:81:48:12:d5:d3:3b:
                    4e:d1:7e:61:8a:a9:f2:20:a9:8e:3e:27:d3:8d:b1:
                    0f:6b:76:13:7b:71:b7:b8:55:6f:15:05:5b:96:c3:
                    00:44:f4:3d:45:53:af:10:03:76:e5:05:1a:69:d1:
                    f9:a3:f2:3c:0a:99:fa:18:c2:f3:0a:e4:13:6f:fc:
                    bb:6b:76:64:31:c0:5f:42:1c:18:21:cc:11:8b:74:
                    79:ff:f0:00:f0:00:95:e9:21:0f:52:d6:67:e1:c4:
                    d7:5a:d2:bd:e0:ff:3b:19:c9:42:03:6e:60:c1:4b:
                    68:68:62:7f:54:b9:62:b7:ec:67:9e:49:15:bc:aa:
                    ee:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:68:93:66:BF:EC:BA:FE:08:DB:B9:4C:BB:3C:91:96:89:94:7A:64
            X509v3 Authority Key Identifier:
                keyid:91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/11C774520C5611EDBBC3A10FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.66.0/23
                IPv6:
                  2001:df0:3540::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:1c:24:e2:62:8b:9d:f8:d7:f7:ba:7b:86:37:44:82:be:a7:
         e2:10:35:9e:3f:4e:cd:10:db:4b:27:f6:c4:b1:f2:06:2f:d2:
         43:64:b7:13:dc:0d:38:95:27:ed:47:30:50:9a:55:ea:ea:4f:
         9c:93:ab:d3:17:18:12:e8:84:d9:e6:88:51:14:8f:06:69:03:
         19:71:1d:49:c4:28:49:c5:79:37:f9:87:b0:0b:a5:2d:82:a6:
         9d:15:72:25:9f:f9:1a:54:7b:4c:d5:ae:cd:78:af:07:1e:7a:
         78:31:a2:df:57:93:a5:c9:af:a0:29:94:f3:ac:8b:de:cf:3d:
         0c:66:25:50:7a:a9:72:c1:36:23:b8:2f:ef:22:ad:40:fa:00:
         c9:09:54:69:56:75:38:6a:97:ed:ff:ef:a1:40:6b:84:f1:85:
         ca:05:d7:af:f6:44:70:ee:02:63:bc:7c:16:68:7c:42:2c:d9:
         65:d9:2a:72:01:c9:ed:7b:6f:0e:50:f9:24:a1:d8:b9:6e:29:
         84:88:9e:d4:c5:94:68:e0:78:9c:9b:7a:80:56:e0:98:74:38:
         8d:aa:e0:e1:e9:95:22:a0:91:fb:18:34:78:ed:02:03:94:e5:
         c2:9e:02:6a:9e:6f:0e:30:e3:98:e7:9a:07:86:b5:a9:b3:b8:
         4f:a4:2c:f0
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjYwNUIxMTAvBgNVBAUTKDkxMzM4NjkwREVCQTU3OENFNzM4MjE4QTlFMjIwODU0
RDFCNTI3NUYwHhcNMjIxMjIzMDQwMzI2WhcNMjQwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2E1Mjg4ZC02OTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnLHpJaREl6gvbZ3SMY7YO0FGAMxWb+wtTTxJj3+gX9HPgPQM369RQqZ7O+HS
itd+hz0W8Ywb8LZZ1U23YI4EexvPLDZ5svhjNVkP+k1zhWa6r1nTv/H4ItJnmN/B
My8R6rvVyIMORRw5bCczXh1r2PD4+EKve6l7V9zvjSTSA5KBSBLV0ztO0X5hiqny
IKmOPifTjbEPa3YTe3G3uFVvFQVblsMARPQ9RVOvEAN25QUaadH5o/I8Cpn6GMLz
CuQTb/y7a3ZkMcBfQhwYIcwRi3R5//AA8ACV6SEPUtZn4cTXWtK94P87GclCA25g
wUtoaGJ/VLlit+xnnkkVvKruzQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFANok2a/
7Lr+CNu5TLs8kZaJlHpkMB8GA1UdIwQYMBaAFJEzhpDeuleM5zghip4iCFTRtSdf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjA1Qi85ODE3RDI3MjY0
Q0MxMUVDOTZENEE1NThDNEY5QUUwMi9rVE9Ha042NlY0em5PQ0dLbmlJSVZORzFK
MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tUT0drTjY2VjR6bk9DR0tuaUlJVk5HMUoxOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjYwNUIvOTgxN0QyNzI2NENDMTFFQzk2RDRBNTU4QzRGOUFFMDIvMTFDNzc0NTIw
QzU2MTFFREJCQzNBMTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnskIwDwQCAAIwCQMHACABDfA1QDANBgkqhkiG9w0BAQsF
AAOCAQEAPxwk4mKLnfjX97p7hjdEgr6n4hA1nj9OzRDbSyf2xLHyBi/SQ2S3E9wN
OJUn7UcwUJpV6upPnJOr0xcYEuiE2eaIURSPBmkDGXEdScQoScV5N/mHsAulLYKm
nRVyJZ/5GlR7TNWuzXivBx56eDGi31eTpcmvoCmU86yL3s89DGYlUHqpcsE2I7gv
7yKtQPoAyQlUaVZ1OGqX7f/voUBrhPGFygXXr/ZEcO4CY7x8Fmh8QizZZdkqcgHJ
7XtvDlD5JKHYuW4phIie1MWUaOB4nJt6gFbgmHQ4jarg4emVIqCR+xg0eO0CA5Tl
wp4Cap5vDjDjmOeaB4a1qbO4T6Qs8A==
-----END CERTIFICATE-----