Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/83606396837711EE83E14C68C4F9AE02.roa
File:                     83606396837711EE83E14C68C4F9AE02.roa (raw, json)
Hash identifier:          b1EEeCRhyEet2aqV3GCVm2ylTJ4ZO9/AIGI2JJxtM/0=
Subject key identifier:   B0:ED:AA:F6:72:49:20:28:F7:BD:6E:17:55:F5:E7:17:79:74:92:5F
Certificate issuer:       /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial:       280B
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/83606396837711EE83E14C68C4F9AE02.roa
Signing time:             Wed 15 Nov 2023 05:26:22 +0000
ROA not before:           Wed 15 Nov 2023 05:26:22 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     399045
IP address blocks:        122.254.66.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10251 (0x280b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
        Validity
            Not Before: Nov 15 05:26:22 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6554567e-3c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9d:60:11:e5:fa:66:8f:a5:d2:fa:28:bf:00:
                    33:87:90:13:7d:ca:fb:bf:b2:55:27:ea:88:b8:24:
                    da:be:76:eb:e4:45:53:07:ce:52:b4:7a:6d:22:8e:
                    ee:eb:5a:cf:4f:0f:f1:66:32:f5:14:eb:48:f7:91:
                    da:aa:fc:2e:53:97:72:5e:ea:63:69:7e:1c:c8:c3:
                    f1:48:9e:f7:9d:9f:74:1c:ea:3f:c6:25:b4:91:52:
                    91:09:27:62:dc:f4:fc:de:3d:32:12:2e:2c:df:d9:
                    a6:37:10:1c:e4:f2:e2:78:a8:2e:27:a3:6c:5e:14:
                    66:0d:14:a5:92:58:5a:b7:16:dd:a8:50:be:43:75:
                    24:a1:ee:cf:58:f8:fc:4e:5f:e8:93:3d:9c:84:5f:
                    d2:d8:41:52:36:c8:27:0b:bd:78:c5:db:51:30:d4:
                    ac:e1:a0:89:9c:9a:58:d8:67:02:11:fd:f3:2d:9d:
                    ac:d2:70:47:3b:53:c0:e8:d1:82:19:43:e1:af:05:
                    2e:a8:e3:a5:9f:c7:5d:80:7d:f4:16:71:a1:87:5d:
                    95:eb:af:e9:2a:73:ef:8d:5a:b4:db:f5:17:1f:52:
                    bc:71:3d:b0:92:89:90:5d:dd:4f:d1:5b:e7:36:e3:
                    79:88:41:43:de:53:d1:4a:7d:49:18:40:c5:bd:9e:
                    9a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:ED:AA:F6:72:49:20:28:F7:BD:6E:17:55:F5:E7:17:79:74:92:5F
            X509v3 Authority Key Identifier:
                keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/83606396837711EE83E14C68C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:61:b5:0b:ce:75:d1:4b:ae:3e:c0:ea:3b:10:af:eb:d7:16:
         2f:a5:d4:f3:5d:74:e4:24:3c:49:76:a3:4f:b3:50:23:6f:24:
         ed:fe:28:8f:28:a6:5d:f3:88:ba:db:ae:09:4b:b6:af:fb:a7:
         6b:e8:64:6a:ee:4e:72:c9:6f:d5:ec:d1:c1:90:c7:64:b4:ee:
         3d:39:67:7d:25:6d:01:a1:71:e8:75:f0:7f:3a:18:d3:4a:c3:
         cf:b4:ec:61:ee:c4:b3:1f:72:c8:27:2f:e3:93:25:34:f5:cb:
         47:db:3a:fd:15:4a:60:19:a1:69:7c:a8:6d:97:a9:18:c5:d6:
         f9:5c:df:61:cb:e6:2d:1f:25:77:5a:84:4a:e2:64:fe:9d:08:
         5f:cc:00:4d:c5:08:8f:93:20:d7:77:8d:96:ca:0c:65:53:6e:
         88:66:65:78:ad:26:ff:f6:05:db:73:dd:5f:69:75:30:c3:b4:
         26:b7:6b:41:eb:fb:08:5c:7c:ed:3b:fd:61:bd:7f:4c:ec:73:
         60:29:ff:45:6d:07:43:3a:26:c7:c0:dc:72:b6:c9:92:f0:99:
         7a:b3:4d:cd:52:c7:76:4c:2a:6a:e4:36:71:8a:09:6a:22:78:
         12:b8:ac:94:c8:18:1d:20:1a:48:92:fa:89:9c:45:27:b0:d4:
         cb:e4:96:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----