Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/44F65272CC8A11ED89D8FD24C4F9AE02.roa
File:                     44F65272CC8A11ED89D8FD24C4F9AE02.roa (raw, json)
Hash identifier:          VDdP3pW/DW0AxiAsf8kJi9PPcMJ61iVKxtQtFcq7YLk=
Subject key identifier:   85:B9:4A:AD:27:1D:91:24:8F:23:55:81:78:A6:03:59:21:E5:B4:2D
Certificate issuer:       /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial:       088B
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/44F65272CC8A11ED89D8FD24C4F9AE02.roa
Signing time:             Wed 24 May 2023 23:25:01 +0000
ROA not before:           Wed 24 May 2023 23:25:01 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     38547
IP address blocks:        139.190.234.0/24 maxlen: 24
                          139.190.235.131/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2187 (0x88b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
        Validity
            Not Before: May 24 23:25:01 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=646e9ccd-a4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:13:ca:80:21:ff:3b:a5:26:f5:fa:56:89:7e:
                    8e:aa:d4:7a:59:62:cd:19:ec:8f:37:9d:34:88:2a:
                    d4:20:67:56:8d:7d:e0:25:f0:22:75:50:0d:5f:e6:
                    70:b4:52:f9:7d:fd:75:d0:1f:5c:52:4a:fd:27:95:
                    f8:58:a1:53:f7:70:e4:18:d8:59:c5:42:ab:08:f9:
                    38:ea:5a:cc:dc:c4:0b:12:c4:e8:af:6a:3a:d1:2d:
                    7b:cb:1a:52:8c:14:9b:4e:18:1b:97:e3:df:84:53:
                    dc:3c:51:f8:e3:33:a1:32:a0:c8:0f:a9:b7:d2:4b:
                    6f:9a:4d:af:77:e2:1a:cf:1e:8f:c4:ff:b7:ea:8f:
                    f5:cd:ec:92:92:a2:ee:b7:a2:a3:65:3b:a0:30:c8:
                    5b:f2:dd:65:17:a2:84:11:88:00:d2:eb:2b:65:6f:
                    76:76:84:eb:ce:54:07:91:06:d1:20:b8:8e:2c:06:
                    1c:10:cc:5a:e6:a9:e7:a2:11:08:dc:f2:1f:f9:6b:
                    40:22:32:13:22:a2:cd:1e:39:94:61:0d:d2:bd:36:
                    ba:76:6a:2b:15:a3:60:8f:f5:ae:66:75:44:b1:fa:
                    e2:e7:6e:30:c7:98:d9:82:f5:f3:ee:3d:c7:18:48:
                    8f:5d:f2:5a:40:b3:7b:aa:08:94:5a:70:4e:3c:af:
                    4e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B9:4A:AD:27:1D:91:24:8F:23:55:81:78:A6:03:59:21:E5:B4:2D
            X509v3 Authority Key Identifier:
                keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/44F65272CC8A11ED89D8FD24C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.190.234.0/24
                  139.190.235.131/32

    Signature Algorithm: sha256WithRSAEncryption
         79:e8:a5:49:d0:76:b4:d9:14:9a:75:09:8e:ee:65:79:bf:4d:
         41:9e:46:a8:9c:5e:9a:9c:39:52:ad:08:17:16:4f:90:29:30:
         37:9f:30:d8:ca:56:2d:40:5d:a2:e4:45:ac:39:27:12:d0:e0:
         de:49:c2:fc:44:33:c7:6a:b1:bb:59:0f:b2:41:08:53:40:ae:
         d8:fa:71:d8:86:21:12:a4:72:41:cf:7d:c6:43:58:24:db:a5:
         30:be:1c:c2:e4:70:ab:9b:62:e0:2e:f8:96:33:ff:af:55:c5:
         e1:94:2a:f0:88:ca:3b:94:97:dc:72:2c:bf:7b:cf:d6:84:3e:
         51:f8:ae:9a:32:87:07:90:a9:04:5c:dd:12:05:82:06:6a:10:
         93:e8:54:76:8e:0f:1d:2b:c3:ba:f5:c8:c3:f4:9d:95:5d:56:
         18:41:cf:fe:9d:b5:39:35:e6:4a:b3:c2:a0:89:87:cf:7b:a9:
         72:15:da:d3:ad:b4:bf:2b:a8:f1:7c:b7:7b:71:54:10:4e:48:
         b6:4f:cc:e6:f6:af:fe:45:8f:73:1b:ef:c5:54:4b:66:ae:e9:
         a8:5a:7c:73:29:c5:77:4a:e4:5d:4b:93:d3:25:39:d8:66:e6:
         fe:d5:76:9f:b0:39:c8:38:55:64:4f:5a:de:85:5c:89:7a:bc:
         68:06:61:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----