Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F02CB5CC095711EAB4285183C4F9AE02.roa
File:                     F02CB5CC095711EAB4285183C4F9AE02.roa (raw, json)
Hash identifier:          lh1cwUL5g3bT/CWiSH+a5VKJE7paoSlQHDbPmrV5eMA=
Subject key identifier:   69:F3:CC:EA:94:F4:32:2C:BF:00:4E:95:28:2E:A8:9E:9A:58:BD:A7
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       0F4A
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F02CB5CC095711EAB4285183C4F9AE02.roa
Signing time:             Wed 16 Aug 2023 18:16:07 +0000
ROA not before:           Wed 16 Aug 2023 18:16:07 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     139299
IP address blocks:        2404:f4c0:f300::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3914 (0xf4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Aug 16 18:16:07 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64dd1267-89fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ef:77:0c:b1:84:0c:50:3f:26:4a:1d:60:a7:
                    e6:20:c3:89:63:a0:5a:73:43:b9:ba:35:2d:3c:60:
                    ee:18:01:ac:bd:8d:58:4a:8b:1b:ab:cb:96:70:09:
                    64:d5:de:1e:1f:40:14:75:78:ff:88:a1:bd:c6:30:
                    29:d0:20:b7:f1:5e:55:3d:77:a9:7d:d7:f8:57:0b:
                    c8:c0:b3:b4:25:23:79:76:d5:98:49:98:64:4c:33:
                    36:1c:c9:85:ef:c1:42:1f:9a:5e:c7:db:7c:5c:c0:
                    e2:b1:8c:b1:6b:97:1b:bd:16:83:a0:60:b6:b4:6c:
                    d3:fe:ec:76:bc:f1:5e:ad:a2:6c:20:cd:14:c5:f9:
                    08:c6:80:24:dc:d2:1e:e7:4e:a7:c7:cf:39:8b:3e:
                    98:5f:7c:81:7f:46:26:c4:aa:0f:67:7e:7e:38:30:
                    4e:a8:06:00:b2:c4:62:23:14:8f:2b:6b:b0:e4:14:
                    39:b6:26:0c:e8:39:14:24:8a:4f:ac:7f:41:b3:70:
                    e7:70:32:3b:04:f0:f0:3a:2f:95:fb:76:9d:54:27:
                    23:3d:93:1c:68:ad:43:ce:c5:3d:47:09:fc:f0:3d:
                    42:21:02:5b:50:46:5d:aa:43:a9:dc:99:4d:e1:96:
                    4c:6d:1b:a6:41:7b:68:35:b2:03:43:a1:fb:fb:05:
                    a0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F3:CC:EA:94:F4:32:2C:BF:00:4E:95:28:2E:A8:9E:9A:58:BD:A7
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F02CB5CC095711EAB4285183C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f4c0:f300::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:04:1c:c2:c3:82:99:28:e5:1e:36:95:0c:45:0c:1d:ae:24:
         5c:b9:b6:3b:2d:78:ab:eb:48:28:54:e3:ea:fe:84:43:d2:47:
         2b:03:a1:fd:8a:f5:b2:c6:52:1c:90:fa:1e:9e:11:72:cc:0c:
         36:59:a4:23:10:b7:34:f0:b3:5e:4b:7a:29:aa:87:e3:c5:b7:
         8b:8e:5f:f4:59:2b:70:61:53:7f:3f:2e:0e:75:2b:84:96:53:
         cb:3d:84:01:57:77:cf:3a:ab:1f:5f:06:db:62:aa:b6:b1:0a:
         64:6d:69:30:64:04:da:de:1e:bd:8c:6b:d5:06:b9:5c:5d:6f:
         7e:c5:6f:72:1f:49:46:59:80:d1:01:6d:01:78:6f:53:dc:5c:
         5f:12:2e:3b:b0:2c:af:df:34:1a:6a:36:bb:87:3a:f7:ec:28:
         eb:f7:79:fe:c6:a1:b9:89:57:06:eb:41:f2:e8:93:ed:21:33:
         13:fe:34:80:07:af:ca:ec:35:02:64:6b:93:ff:df:8f:49:da:
         a6:ee:51:4b:ae:02:8f:8d:3d:4b:0b:dd:2e:5d:91:a8:82:e5:
         3c:39:6a:54:53:52:06:27:07:39:e8:92:12:76:c1:38:38:db:
         3b:41:52:59:b6:85:ce:3a:ef:f8:97:59:23:00:e8:a3:4b:a0:
         8e:22:4c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----