Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/251E65CAC25911EC9A26E286C4F9AE02.roa
File:                     251E65CAC25911EC9A26E286C4F9AE02.roa (raw, json)
Hash identifier:          hoRhtBm3u/tvrp2PnOzb8EvWnWHVfcRcSpoAjUbqgTY=
Subject key identifier:   39:6A:F5:23:CC:10:DF:13:56:F3:3A:07:B6:91:C7:50:49:5A:54:ED
Certificate issuer:       /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial:       098F
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/251E65CAC25911EC9A26E286C4F9AE02.roa
Signing time:             Sat 22 Apr 2023 03:58:18 +0000
ROA not before:           Sat 22 Apr 2023 03:58:18 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     24121
IP address blocks:        103.8.176.0/22 maxlen: 22
                          103.8.180.0/22 maxlen: 22
                          2407:b001::/32 maxlen: 32
                          2407:b001:1000::/40 maxlen: 40
                          2407:b001:3000::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2447 (0x98f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
        Validity
            Not Before: Apr 22 03:58:18 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64435b59-0476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:4d:ea:b9:03:88:0f:5f:f3:da:87:d8:6b:
                    59:fe:eb:25:48:e8:27:d3:46:c5:9f:ca:d0:5b:69:
                    b0:24:3a:e6:84:b8:84:40:cf:e6:2b:82:d8:7b:7e:
                    9e:71:9e:2c:64:e7:23:c0:60:42:30:cd:18:6f:ca:
                    87:4c:4b:73:83:a1:97:50:59:d0:93:6f:d8:70:c7:
                    49:a9:56:30:d5:04:64:77:2c:59:6c:79:c8:1a:32:
                    8b:ed:e3:0f:49:31:5a:fb:43:6e:ea:80:86:de:93:
                    6a:ac:36:29:0a:c4:eb:12:f9:82:fe:3f:3b:3f:ec:
                    1e:57:81:60:a5:9f:db:3d:74:99:36:22:8b:56:fa:
                    05:13:b8:f2:11:fa:67:d0:a7:48:07:c4:c7:dc:4d:
                    63:d8:89:fd:57:cc:c0:78:e9:7c:2a:4e:50:2d:a7:
                    1b:30:d6:05:34:d2:d8:0c:80:00:28:2e:6d:09:33:
                    62:cd:d7:a9:3a:35:c1:b0:26:e8:a1:38:a0:31:a9:
                    c9:d7:f2:0b:40:e4:cf:35:35:f8:1c:71:fb:d4:be:
                    c3:1f:9c:b0:5e:f7:df:a5:fd:40:75:c2:89:e9:c0:
                    67:3a:c8:e8:68:3a:f1:46:ca:e8:37:c9:29:85:d4:
                    d9:22:06:8e:b8:eb:c9:0d:31:55:12:43:34:31:40:
                    b5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6A:F5:23:CC:10:DF:13:56:F3:3A:07:B6:91:C7:50:49:5A:54:ED
            X509v3 Authority Key Identifier:
                keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/251E65CAC25911EC9A26E286C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.176.0/21
                IPv6:
                  2407:b001::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:13:3a:3c:13:8c:4a:0f:0c:c2:ce:a6:b1:2a:48:ab:fb:fa:
         c4:c9:66:d1:2c:e0:fd:53:80:cb:1d:65:9b:3f:c1:7e:73:e4:
         68:bc:e1:51:82:52:99:be:4a:f2:4e:e9:cd:94:34:56:67:ca:
         df:39:f2:d9:03:85:2a:d9:e8:27:26:69:49:e8:8d:dd:47:01:
         66:ed:c5:dc:a8:d6:a9:28:9d:b0:32:6d:de:f0:94:96:66:e1:
         89:85:63:da:60:73:7a:e4:10:c7:23:06:0c:25:64:26:25:5f:
         ec:35:88:8f:56:f9:38:90:06:c7:e8:c9:12:11:cc:13:ad:90:
         c9:0d:6b:e9:09:97:f2:c8:d9:84:65:fc:c0:d0:73:56:54:8e:
         3a:8c:33:0e:5c:8b:79:7d:f2:d1:d6:3f:de:f5:0c:90:44:ac:
         f9:7a:1e:5b:28:c6:e7:46:1b:f2:2f:81:b2:9b:3e:de:14:be:
         76:f5:ed:bb:b8:a7:3c:ed:91:6e:31:75:23:14:e3:15:b1:3d:
         3a:4f:f8:9c:84:3a:8a:3f:58:d8:c7:a3:d2:86:52:85:46:7a:
         13:77:c7:d5:31:e9:a9:e8:d6:19:d6:ad:50:ea:4f:5f:43:5b:
         a3:bd:cb:dc:ec:16:19:11:7e:9f:07:38:38:e5:7c:7b:e7:4d:
         48:61:3f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----