Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/BAC6F9EEBE2A11ECA952CE14C4F9AE02.roa
File:                     BAC6F9EEBE2A11ECA952CE14C4F9AE02.roa (raw, json)
Hash identifier:          pfHRJkdLJpJLfRnD6dk1aqTgAKjEPd6wxWtktLGywQQ=
Subject key identifier:   0D:F1:CC:9D:2A:F2:10:18:0D:EF:B0:0A:A2:18:07:28:6C:FC:1B:56
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       0F50
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/BAC6F9EEBE2A11ECA952CE14C4F9AE02.roa
Signing time:             Wed 16 Aug 2023 18:16:12 +0000
ROA not before:           Wed 16 Aug 2023 18:16:12 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     141011
IP address blocks:        2404:f4c0:f5c0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3920 (0xf50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Aug 16 18:16:12 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64dd126c-33c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3c:f0:0d:e2:d0:63:4f:75:4c:50:ae:fa:df:
                    bb:43:a5:2c:ce:29:a0:32:35:98:1a:c9:77:18:46:
                    57:93:50:2c:0f:fb:96:80:5b:bf:ee:45:bc:c2:47:
                    98:07:48:00:c2:3c:bf:e1:01:86:24:35:ba:42:14:
                    81:10:37:aa:e0:a5:bd:13:a0:28:af:7d:79:e0:f0:
                    d8:76:d5:21:b6:1e:a6:e0:3b:e8:23:f3:fc:22:39:
                    fe:e1:b0:34:f6:b6:57:bf:4f:04:a6:c9:10:53:af:
                    0d:24:4d:18:16:0a:43:22:4c:21:88:61:ab:63:ef:
                    a5:b3:a5:76:4c:67:dd:bb:08:ad:48:c0:77:f9:ee:
                    36:58:0f:cc:20:6d:9b:dc:9d:ff:6e:92:41:48:99:
                    e8:60:4e:4e:1f:2a:6f:87:50:b2:15:cd:ba:32:c3:
                    77:1f:9e:d3:b0:d5:3b:06:a5:5f:a1:bf:cf:50:b2:
                    68:e2:11:f2:b2:bc:a5:68:d2:ef:15:5f:3a:79:94:
                    3f:34:db:dd:44:bd:39:d2:92:e6:0c:d0:d5:0f:12:
                    fd:c4:09:b7:fc:12:04:cf:ef:79:b6:3e:d6:37:17:
                    3a:bd:dc:5c:a3:d9:39:fc:49:9a:a1:a6:06:0b:ec:
                    94:b0:50:2a:7f:8d:97:74:84:4b:f4:5c:c5:9e:da:
                    47:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F1:CC:9D:2A:F2:10:18:0D:EF:B0:0A:A2:18:07:28:6C:FC:1B:56
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/BAC6F9EEBE2A11ECA952CE14C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f4c0:f5c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         c2:76:80:9c:62:80:bf:92:5d:ef:81:4a:b8:f8:3b:eb:72:31:
         72:3b:5f:6e:0c:cc:ba:94:29:b0:bc:a8:d3:fd:54:c0:de:39:
         18:b0:3b:aa:f9:59:60:8f:81:d9:e2:89:19:8a:a0:72:27:0b:
         25:ef:4b:02:09:d1:24:15:2f:cd:ad:ad:fd:82:03:c4:13:be:
         a0:08:a4:d7:d3:a7:f2:fd:74:90:b8:3d:84:5d:18:b7:42:2b:
         fa:44:44:95:58:dc:d2:aa:42:00:be:59:62:02:e4:f3:d5:29:
         2a:6d:68:78:47:22:a7:94:87:ab:b0:95:16:2a:71:89:7f:5b:
         0f:5a:15:1b:ee:c0:03:53:ac:27:b3:c1:87:4c:b4:d3:71:ac:
         13:df:b0:7a:e1:bb:c0:a5:50:c1:42:e8:8d:75:08:cf:1b:13:
         c9:57:e0:50:c7:8f:f2:bb:9e:1c:dd:35:12:80:e8:22:ea:97:
         b5:ff:94:14:12:3d:e2:e8:b7:de:3b:37:61:3d:27:b6:c0:8e:
         56:20:60:4f:db:c6:f5:9c:47:c1:e4:75:9c:55:52:ea:77:06:
         41:b9:b2:1f:8e:9d:99:12:bc:5d:45:87:c7:1a:d8:c6:17:f8:
         e9:48:23:55:05:9d:49:a7:40:64:d4:68:90:56:7e:ea:6d:35:
         37:cb:ab:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----