Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/3E31A8325E8C11ECB4988236C4F9AE02.roa
File:                     3E31A8325E8C11ECB4988236C4F9AE02.roa (raw, json)
Hash identifier:          v5mra2Mg5GWN1xzw0iQHvxEBNgfNPRVkIvOGTxwaLZo=
Subject key identifier:   1D:CF:BD:17:7E:3C:2C:FE:30:36:9D:8E:E9:E1:BF:AD:04:25:38:FB
Certificate issuer:       /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial:       0328
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/3E31A8325E8C11ECB4988236C4F9AE02.roa
Signing time:             Sun 02 Oct 2022 03:22:36 +0000
ROA not before:           Sun 02 Oct 2022 03:22:36 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     142586
IP address blocks:        2407:d340:f000::/38 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 808 (0x328)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
        Validity
            Not Before: Oct  2 03:22:36 2022 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=633903fc-a041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dd:64:68:0d:d9:23:13:3d:ac:e0:49:ca:e8:
                    21:d8:43:ce:48:56:4c:39:0e:39:2c:53:65:dc:47:
                    d6:1f:ee:f7:68:80:92:19:44:cd:f7:60:e6:98:4a:
                    e4:4d:9c:21:39:e7:48:0c:63:33:29:57:f7:ab:6b:
                    55:43:e7:e8:3d:5c:be:79:13:06:98:c1:a1:9c:63:
                    c5:33:87:b1:c2:56:d2:c7:d1:7a:b7:38:8f:1f:81:
                    3e:6a:eb:94:a6:0b:e5:f5:50:19:2a:3b:a1:ad:b2:
                    5f:75:5d:4d:51:56:c7:cf:a7:ad:e6:e4:af:f3:ee:
                    f2:3f:dc:9e:68:2b:9e:12:22:20:7b:cd:6e:16:42:
                    c9:8e:b1:7e:5c:9e:bb:e2:d7:66:66:67:dc:1b:be:
                    6f:63:53:b2:6c:41:b9:1f:2c:53:e8:e0:f9:39:4c:
                    8d:e9:0b:48:41:ac:44:2b:2a:39:b5:5c:6c:02:29:
                    fe:43:2c:35:b2:df:5a:73:c1:ca:c0:fe:8c:5d:20:
                    9e:f1:4b:75:17:96:57:fd:49:3c:2b:49:6f:2c:51:
                    1e:ea:69:ba:01:b6:09:eb:a6:e7:d4:ab:a3:78:cc:
                    94:ee:47:9f:1e:70:ab:5c:b2:05:90:55:f6:96:2d:
                    fe:a2:3a:91:1c:e1:27:f9:1c:a0:1f:0e:40:48:97:
                    c4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CF:BD:17:7E:3C:2C:FE:30:36:9D:8E:E9:E1:BF:AD:04:25:38:FB
            X509v3 Authority Key Identifier:
                keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/3E31A8325E8C11ECB4988236C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:d340:f000::/38

    Signature Algorithm: sha256WithRSAEncryption
         89:26:95:1a:17:36:63:e8:15:1a:d0:e9:7e:f3:fa:df:57:52:
         2a:05:ed:74:f4:d9:30:b7:1d:ca:af:c3:78:c3:fd:25:f3:ed:
         67:29:57:f6:4f:fe:24:01:55:02:e8:83:6e:ae:78:f0:13:6b:
         41:62:a1:11:e6:68:4b:1d:a9:11:c0:48:e6:d4:f0:f4:e7:1f:
         03:6e:07:e0:21:f4:df:e7:55:6a:32:8b:a0:69:14:1d:87:1f:
         b3:90:b2:6a:82:f1:36:a4:1e:72:77:27:d3:d0:1a:61:f1:87:
         41:8d:9c:8c:c5:7c:f0:98:69:f4:e1:98:b3:66:24:9a:3a:5e:
         d8:b1:cf:9c:89:a5:fd:03:72:df:7b:2c:88:78:74:5a:e8:a3:
         fc:51:93:42:78:9e:1b:2e:62:6c:9e:e1:3f:31:7e:ff:46:ea:
         09:a0:27:9b:d1:e2:34:c5:56:c5:1a:57:bd:f7:93:8c:53:98:
         fb:6c:21:a4:fb:19:5f:e1:03:8b:8c:66:b7:e8:bf:30:8d:af:
         11:32:ae:3b:96:f9:96:62:a3:52:7d:8a:4a:97:87:03:48:2f:
         5a:54:94:9f:60:12:8a:2e:02:56:28:8e:cf:f5:80:03:0e:54:
         09:99:80:e9:93:9a:c4:3c:57:78:fd:18:87:e5:6a:31:48:ff:
         5b:dc:64:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----