Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/279A20FE771711E98C9E8245C4F9AE02.roa
File:                     279A20FE771711E98C9E8245C4F9AE02.roa (raw, json)
Hash identifier:          MhACjfkJ2j2yhsRayDTP8kr248vvDBGRZSiEPd8tRZg=
Subject key identifier:   2A:A2:9B:DC:D4:5F:F9:29:0E:8F:44:5D:D0:C6:AC:ED:9C:77:49:1B
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       24BB
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/279A20FE771711E98C9E8245C4F9AE02.roa
Signing time:             Tue 02 Aug 2022 04:22:53 +0000
ROA not before:           Tue 02 Aug 2022 04:22:53 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     139058
IP address blocks:        2402:9e80:50::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9403 (0x24bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Aug  2 04:22:53 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=62e8a69d-6b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e1:31:26:54:d6:11:67:d9:70:0a:e4:62:6d:
                    0b:d8:b5:69:4b:f3:10:99:e8:fa:70:26:f7:21:1d:
                    1c:b0:4a:7b:74:ed:06:12:67:d6:eb:50:ab:e5:8c:
                    6f:91:a0:a3:d5:15:81:ef:dd:d8:b9:7a:ba:17:cc:
                    66:91:71:5e:ed:6c:99:ad:0a:1f:93:c4:29:29:f9:
                    4b:c2:74:83:0e:fc:f5:fb:ac:00:06:ee:36:8d:c1:
                    de:98:86:00:b6:44:7f:37:69:40:d2:7b:92:bb:c2:
                    d3:41:89:f4:8e:14:4a:72:e6:53:69:45:d0:6f:37:
                    e4:04:da:53:94:27:f3:a2:34:bc:92:f1:1e:fc:06:
                    ad:67:26:b4:41:58:5b:82:07:fa:44:e4:22:29:82:
                    ed:97:74:8c:d2:43:e4:77:c9:e4:27:c9:e8:1c:0d:
                    b3:a7:f4:19:4c:95:0d:cc:71:0c:d8:7d:5f:df:48:
                    96:aa:c6:7f:6b:98:38:dd:38:81:5c:1b:c2:6e:e3:
                    a9:56:e5:92:91:ea:3c:25:d5:3f:30:18:c8:17:80:
                    1b:9b:f1:18:ac:8a:99:4f:8e:42:3a:cf:64:95:b5:
                    fc:08:e5:e1:58:7e:a0:4a:c8:16:aa:73:2c:30:52:
                    a2:b9:ce:5d:11:2a:96:8b:0c:30:85:50:4f:a9:f9:
                    f6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A2:9B:DC:D4:5F:F9:29:0E:8F:44:5D:D0:C6:AC:ED:9C:77:49:1B
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/279A20FE771711E98C9E8245C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:50::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:21:e5:08:c2:f4:11:1d:f6:c1:db:85:58:2f:d2:e2:1e:c8:
         5b:c3:ea:f4:35:38:7b:14:bb:07:94:a0:83:03:0d:83:0f:d3:
         1c:62:ba:c6:d7:65:f1:d2:71:4a:ed:c0:04:b6:88:75:bd:f9:
         48:3a:b6:eb:4a:02:ec:a7:85:b6:ad:bf:10:e6:a0:83:f5:d6:
         6f:cf:39:74:6f:8f:c2:f6:d4:89:22:64:0b:e6:e4:8f:2e:ec:
         28:69:1d:74:3b:8f:3b:2e:5a:c7:a1:07:cc:ce:60:91:a8:08:
         1b:09:e6:19:17:9c:93:fa:2d:f6:c5:4b:5e:9a:1d:45:0f:f0:
         47:2d:ab:d6:71:07:84:48:b7:b2:df:8e:ab:db:6c:19:b4:c0:
         07:5f:d1:da:24:c9:a7:27:50:ad:ba:34:03:80:26:7c:96:4a:
         30:19:6d:04:a5:b2:d2:8b:05:38:22:1f:f9:0c:90:14:06:36:
         f2:bf:de:1d:b9:50:f9:c6:93:65:3d:dc:b8:a1:24:ba:df:66:
         29:fa:e4:43:9a:08:d7:d3:ac:b8:f7:65:b3:a4:6c:e1:d5:7f:
         51:b7:0d:a1:52:d6:e2:f2:77:85:59:74:2d:0b:e0:de:5b:fc:
         2f:82:3d:bd:d4:eb:79:d2:b4:67:5c:bd:0f:2d:35:34:51:a0:
         ef:45:d8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----