Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/658550D80F1011EE8031EE24C4F9AE02.roa
File:                     658550D80F1011EE8031EE24C4F9AE02.roa (raw, json)
Hash identifier:          oRD/Fl1nwvnFoqjK8ch/4s/wbWMU+jIcHsbHvE3DhXw=
Subject key identifier:   E5:EA:70:59:45:7B:96:C1:58:28:0B:C0:D7:BF:F2:6E:26:C2:CF:D4
Certificate issuer:       /CN=A915A0EE/serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2
Certificate serial:       06
Authority key identifier: DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/658550D80F1011EE8031EE24C4F9AE02.roa
Signing time:             Tue 20 Jun 2023 02:15:59 +0000
ROA not before:           Tue 20 Jun 2023 02:15:59 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     18081
IP address blocks:        125.2.64.0/18 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0EE/serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2
        Validity
            Not Before: Jun 20 02:15:59 2023 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=64910bdf-4c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:b6:4a:95:65:d2:1f:0a:34:13:85:f9:de:
                    e8:f8:99:79:f7:64:1e:9b:6a:fe:61:70:f8:3b:9c:
                    43:2c:66:fb:3c:23:69:d8:15:8f:68:ba:66:d1:3c:
                    ea:87:eb:de:ef:81:33:71:8f:5b:cc:a4:96:f8:f0:
                    4d:7d:97:42:05:3c:34:ea:11:a3:01:47:10:a7:1f:
                    8c:fc:de:40:d3:6b:67:1b:82:47:fd:eb:66:86:00:
                    04:15:cf:43:56:3c:f1:93:60:4d:a4:22:09:fd:32:
                    79:a6:a9:a2:5a:d5:0d:a8:15:fd:dc:c9:fd:e7:2b:
                    cb:df:7d:31:ec:5b:6e:44:5b:c6:a3:5c:b0:5b:5b:
                    b7:4f:94:e1:2d:63:1f:30:27:66:0b:22:d1:3a:cb:
                    22:5c:2f:1f:6f:9f:8a:5a:61:a1:4a:5f:b4:e0:a9:
                    dc:d0:86:8f:8e:ae:c0:91:c2:70:bc:11:1d:bf:97:
                    9a:02:14:d3:d6:7f:e8:72:d8:2f:ee:41:0f:5d:7f:
                    a5:ee:14:24:46:85:73:62:b9:24:cc:8b:f4:07:e2:
                    6f:e8:46:18:e8:ef:ac:bf:87:94:7c:92:ca:61:55:
                    0c:f0:34:14:c4:df:39:e0:61:01:8e:ee:94:fa:b1:
                    56:c3:5f:47:61:78:24:fd:72:b8:e6:3b:89:4b:3e:
                    92:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EA:70:59:45:7B:96:C1:58:28:0B:C0:D7:BF:F2:6E:26:C2:CF:D4
            X509v3 Authority Key Identifier:
                keyid:DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/658550D80F1011EE8031EE24C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.2.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9a:4e:67:75:64:7f:0d:d8:9f:5a:1e:96:9f:52:65:b8:72:9e:
         23:6d:7e:9d:fc:47:d4:41:86:63:23:aa:68:66:ec:47:9a:bf:
         2e:cc:8f:71:97:09:4b:7b:64:68:19:49:fb:eb:60:3e:1e:c6:
         2d:b2:07:d8:07:05:af:6a:86:0e:86:93:d6:76:23:a0:09:4d:
         88:d1:c3:b4:de:a2:8f:28:96:cc:ae:06:ec:cc:c8:48:81:99:
         ec:60:de:30:e7:b6:fa:0d:ef:7d:bd:30:a7:84:90:d1:c2:7a:
         02:6a:ee:c4:5e:22:ce:9b:50:b4:4d:89:9a:fe:f0:c2:db:49:
         7a:da:0a:cd:77:54:0b:e8:c3:4d:0c:03:3c:76:d8:c6:ab:6f:
         31:d0:7c:bb:2d:bc:71:0a:6e:a5:73:8d:78:4e:55:82:6c:99:
         89:4a:04:de:db:63:05:da:7f:05:db:24:b4:6f:e9:17:a2:0c:
         e5:c5:da:fc:0f:e7:a4:87:e9:03:83:00:9f:28:03:be:1e:5f:
         df:35:cc:2f:2e:d9:9e:f8:da:5c:31:17:e4:e0:5f:2d:f7:d7:
         ac:d9:4c:c3:df:20:d5:74:ce:c5:df:4d:56:53:83:b0:08:78:
         34:b3:12:cb:dc:f3:fa:0b:8c:ac:47:a0:01:fb:b5:f3:5f:68:
         24:96:46:85
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QTBFRTExMC8GA1UEBRMoREY3MUQ5OUY0Q0QzQjM4MzI2QjNFRDQ3QzhFNEE1REY5
ODlFNDJGMjAeFw0yMzA2MjAwMjE1NTlaFw0yMzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0OTEwYmRmLTRjODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+8LZKlWXSHwo0E4X53uj4mXn3ZB6bav5hcPg7nEMsZvs8I2nYFY9oumbRPOqH
697vgTNxj1vMpJb48E19l0IFPDTqEaMBRxCnH4z83kDTa2cbgkf962aGAAQVz0NW
PPGTYE2kIgn9MnmmqaJa1Q2oFf3cyf3nK8vffTHsW25EW8ajXLBbW7dPlOEtYx8w
J2YLItE6yyJcLx9vn4paYaFKX7TgqdzQho+OrsCRwnC8ER2/l5oCFNPWf+hy2C/u
QQ9df6XuFCRGhXNiuSTMi/QH4m/oRhjo76y/h5R8ksphVQzwNBTE3zngYQGO7pT6
sVbDX0dheCT9crjmO4lLPpKTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU5epwWUV7
lsFYKAvA17/ybibCz9QwHwYDVR0jBBgwFoAU33HZn0zTs4Mms+1HyOSl35ieQvIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBMEVFLzU1QzgwM0NBMDlD
MDExRUVCRTEyNTgzQUM0RjlBRTAyLzMzSFpuMHpUczRNbXMtMUh5T1NsMzVpZVF2
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMzNIWm4welRzNE1tcy0xSHlPU2wzNWllUXZJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTBFRS81NUM4MDNDQTA5QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi82NTg1NTBEODBG
MTAxMUVFODAzMUVFMjRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBn0CQDANBgkqhkiG9w0BAQsFAAOCAQEAmk5ndWR/DdifWh6W
n1JluHKeI21+nfxH1EGGYyOqaGbsR5q/LsyPcZcJS3tkaBlJ++tgPh7GLbIH2AcF
r2qGDoaT1nYjoAlNiNHDtN6ijyiWzK4G7MzISIGZ7GDeMOe2+g3vfb0wp4SQ0cJ6
AmruxF4izptQtE2Jmv7wwttJetoKzXdUC+jDTQwDPHbYxqtvMdB8uy28cQpupXON
eE5VgmyZiUoE3ttjBdp/BdsktG/pF6IM5cXa/A/npIfpA4MAnygDvh5f3zXMLy7Z
nvjaXDEX5OBfLffXrNlMw98g1XTOxd9NVlODsAh4NLMSy9zz+guMrEegAfu1819o
JJZGhQ==
-----END CERTIFICATE-----