Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/0492A76253A511EC922C8D5EC4F9AE02.roa
File:                     0492A76253A511EC922C8D5EC4F9AE02.roa (raw, json)
Hash identifier:          pS5Qbfmj9T3R0LPyuuwaMGzh4JYFWGE9sXxOn/PenVE=
Subject key identifier:   B0:7F:8E:17:B4:63:D3:E6:BE:8C:AA:89:25:95:B8:08:C7:A6:1E:6A
Certificate issuer:       /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454
Certificate serial:       027E
Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/0492A76253A511EC922C8D5EC4F9AE02.roa
Signing time:             Mon 21 Nov 2022 03:52:47 +0000
ROA not before:           Mon 21 Nov 2022 03:52:47 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     149053
IP address blocks:        103.177.124.0/23 maxlen: 24
                          2001:df0:2240::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 638 (0x27e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454
        Validity
            Not Before: Nov 21 03:52:47 2022 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=637af60f-25da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:8b:69:dd:20:75:f8:57:54:5d:93:df:92:
                    d1:5a:f5:3f:6c:23:f9:bd:14:19:6f:d1:75:6e:06:
                    ec:7c:53:85:cb:f4:7b:58:41:c5:d6:64:70:04:e4:
                    7c:52:bf:2c:01:fb:55:b3:15:5b:52:d1:f8:00:06:
                    b0:f0:bd:2b:89:eb:a5:51:cd:c0:e7:ee:62:bd:f7:
                    3b:ad:00:60:72:9e:25:94:e3:ea:13:68:a3:f9:7e:
                    31:2f:9e:8c:6a:83:a5:45:58:11:f5:81:fa:da:de:
                    31:12:6d:7c:28:5e:d6:f6:21:71:f9:f4:85:48:5b:
                    ef:78:4e:43:d0:69:51:0c:e4:05:e8:fd:c8:d5:0c:
                    50:e8:7b:a3:a3:a3:93:48:65:d4:8d:52:95:2b:ff:
                    62:e1:1e:a4:f6:1b:f3:aa:a5:f6:0c:0e:ec:46:97:
                    9e:11:8c:a5:56:6d:cf:26:cc:c5:b6:86:f8:ac:91:
                    6d:e5:fa:65:a5:89:85:7d:20:c5:45:b9:e8:a2:39:
                    92:bc:e6:80:f5:63:4b:6c:7b:ae:2b:a8:c0:34:73:
                    0e:74:42:75:8e:e8:6f:94:6e:17:2a:0b:20:25:dd:
                    0b:15:77:07:e0:02:c6:cc:11:dc:99:01:b0:3c:01:
                    a2:48:d5:cb:e8:b5:cd:da:b7:ac:f6:dc:51:7f:70:
                    fd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7F:8E:17:B4:63:D3:E6:BE:8C:AA:89:25:95:B8:08:C7:A6:1E:6A
            X509v3 Authority Key Identifier:
                keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/0492A76253A511EC922C8D5EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.124.0/23
                IPv6:
                  2001:df0:2240::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:35:0a:42:0b:87:cb:1f:fe:03:eb:97:09:29:29:a9:ec:e4:
         9f:51:6f:69:88:7c:bd:80:58:82:ab:21:34:74:c9:cd:9d:20:
         13:88:4e:04:27:36:a1:61:b3:89:1c:72:8f:27:a2:9c:b1:49:
         32:66:99:7f:60:9d:03:cf:54:e5:3b:c0:ba:6d:12:5e:9b:7d:
         24:f9:e1:93:bc:5b:42:a9:d3:b2:aa:9e:63:ac:fe:3b:c6:88:
         4b:dd:18:71:8c:fd:a6:43:3e:29:e2:2e:57:b1:95:58:f6:3c:
         29:12:76:69:6e:79:62:0d:75:48:70:61:2e:7a:ec:55:0d:b3:
         8a:a4:3a:2a:ac:61:40:fd:37:76:6e:f6:06:b6:df:8b:14:e5:
         88:cc:0c:87:e3:17:32:71:9b:a3:ad:4a:88:f8:cf:cc:d6:c1:
         06:3a:2e:9f:d5:b0:f8:85:2e:01:8a:50:1d:09:21:73:4f:3f:
         13:11:be:b9:52:92:7f:a0:31:90:ec:55:d2:69:7c:d2:5f:2b:
         47:e7:00:bd:f4:d4:7d:48:55:ad:1e:c0:9e:54:36:e4:94:b5:
         b6:eb:96:22:d5:ce:cd:e3:d2:1c:1d:26:ff:58:63:b7:0e:34:
         86:4b:45:d1:f4:00:2e:c1:97:46:e3:a8:04:2d:b5:73:4a:c8:
         33:05:ae:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----