Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/B7078B12964511EE80786E47C4F9AE02.roa
File:                     B7078B12964511EE80786E47C4F9AE02.roa (raw, json)
Hash identifier:          y2SxYMKf2+962RC4RJN9H3mywEmsi9bfNjeplLkObsg=
Subject key identifier:   17:CC:95:95:70:32:8F:08:95:4F:4F:D2:B6:EB:17:AD:53:4F:55:FE
Certificate issuer:       /CN=A917E42D/serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE
Certificate serial:       09
Authority key identifier: 5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/B7078B12964511EE80786E47C4F9AE02.roa
Signing time:             Sat 09 Dec 2023 03:48:50 +0000
ROA not before:           Sat 09 Dec 2023 03:48:50 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     151374
IP address blocks:        121.50.48.0/21 maxlen: 24
                          2400:ac00::/32 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E42D/serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE
        Validity
            Not Before: Dec  9 03:48:50 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6573e3a1-b5bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:39:59:ec:c8:1b:ee:b2:1f:08:84:4c:5d:42:
                    d3:6a:e2:1f:d0:e9:82:26:a1:56:64:4c:86:9b:f2:
                    2a:21:9f:b4:ff:94:c5:da:03:fa:f4:f3:57:2c:db:
                    64:01:7d:cb:b5:dd:2d:b3:3f:82:1c:f1:d7:38:15:
                    b9:d5:3e:7c:60:b5:5d:46:85:c5:76:d4:95:11:c1:
                    e5:02:3c:23:9b:f9:28:fb:d0:58:bb:66:f5:aa:75:
                    f4:f3:d0:1b:dd:ff:75:5d:cc:87:8b:f0:d7:6f:9e:
                    69:18:a8:50:de:0e:3e:05:7c:1a:3c:01:13:0d:c4:
                    17:49:25:bc:c7:56:9c:02:ed:17:60:06:6e:90:50:
                    9c:42:6a:96:e3:ff:e7:7d:b6:99:a6:ec:63:85:f6:
                    d8:08:b6:5f:47:3a:86:e3:3b:76:e9:55:87:6f:f9:
                    fd:9b:84:37:58:73:b1:39:8b:d5:fc:06:cf:03:73:
                    c7:c9:ed:e4:66:e1:ac:3a:af:aa:5d:40:92:6f:e7:
                    aa:d2:a4:50:ab:58:26:10:93:ad:0c:af:07:87:22:
                    8f:6e:fc:59:bf:6c:5e:94:e9:82:d8:e5:12:0f:3d:
                    da:95:06:04:98:05:b9:2b:87:33:91:b8:8f:60:4b:
                    78:5c:71:00:c8:1a:c9:42:9c:15:4c:47:2a:eb:1f:
                    65:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CC:95:95:70:32:8F:08:95:4F:4F:D2:B6:EB:17:AD:53:4F:55:FE
            X509v3 Authority Key Identifier:
                keyid:5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/B7078B12964511EE80786E47C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.48.0/21
                IPv6:
                  2400:ac00::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:e9:13:d6:ab:22:55:52:d3:97:18:ad:aa:dc:84:20:e5:76:
         11:06:b4:ec:bb:6d:f5:b7:da:50:e6:bc:d1:b6:71:d2:87:f2:
         48:b3:ab:e9:17:4f:65:0b:f0:1b:45:8a:bd:84:cc:c3:68:69:
         4a:8d:34:01:e4:b6:ad:b1:ae:a0:3f:55:63:41:95:1e:c9:a2:
         9b:60:86:05:ab:75:77:e5:85:43:3b:5c:52:94:26:57:80:ca:
         4a:75:72:99:f0:58:71:29:de:77:d5:a9:4c:c4:f0:ae:74:f2:
         0d:e6:00:6b:95:52:b5:72:d6:c5:5d:58:5e:4e:cb:a7:60:19:
         89:dc:a6:01:06:8b:61:7d:21:2e:df:9b:98:76:7d:a0:57:be:
         e2:78:36:c3:5a:9e:6d:48:71:d8:31:cc:88:a1:da:5a:fc:78:
         f5:57:42:53:59:08:be:df:72:1c:b0:50:4d:59:e5:33:ae:99:
         47:29:f3:52:b0:af:c8:b6:aa:ce:2e:c5:bf:af:fd:92:fb:59:
         85:e9:39:34:04:45:49:e2:05:33:9e:53:c8:48:60:5c:bf:13:
         a8:ab:ee:38:90:4c:6b:b7:51:22:5e:e9:9b:3e:b4:05:61:aa:
         e5:f9:9f:26:47:23:3c:0a:a6:e1:bd:de:71:70:a2:a2:b8:b2:
         0d:32:d0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----