Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/BACBFFFE9E8011EBA7C3FC6CC4F9AE02.roa
File:                     BACBFFFE9E8011EBA7C3FC6CC4F9AE02.roa (raw, json)
Hash identifier:          pqW9f8vd4/q+wP5+9TA7/natgC8UGp76yjtKRsBjczE=
Subject key identifier:   32:4E:D0:BA:BE:A3:B4:B6:9C:02:7E:47:05:5F:2C:81:04:12:96:5D
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0A4C
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/BACBFFFE9E8011EBA7C3FC6CC4F9AE02.roa
Signing time:             Sun 14 May 2023 22:14:31 +0000
ROA not before:           Sun 14 May 2023 22:14:31 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     141749
IP address blocks:        2406:840:f890::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2636 (0xa4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 14 22:14:31 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64615d47-3842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:20:20:68:bd:62:bf:ad:3e:66:b9:05:ee:77:
                    b3:ee:bc:a0:2c:b5:cb:f7:ca:54:98:e8:df:1c:ac:
                    be:f9:57:c6:d8:a6:39:2a:74:97:8d:c6:e1:47:1f:
                    01:73:d1:a8:3a:39:5c:49:ad:be:7d:42:db:07:62:
                    5a:39:9a:c0:8a:fe:da:aa:eb:f7:04:eb:37:5e:18:
                    97:96:8d:65:0d:f1:98:19:f3:a0:db:2c:65:50:68:
                    cc:90:93:a7:13:c1:57:f3:eb:dd:b4:4b:28:92:0b:
                    9c:73:ff:47:da:91:79:1c:b5:b1:a4:7f:9e:72:e9:
                    f9:25:65:15:e6:16:fc:58:54:b1:c8:7b:64:ad:e0:
                    1b:09:71:18:e4:f2:69:0c:a6:f3:b4:c4:0f:fd:83:
                    83:f9:1b:e9:4c:23:96:7a:77:21:b6:bc:15:98:2d:
                    c1:31:24:1b:30:5e:cf:db:70:bb:cd:24:82:a1:86:
                    76:07:88:43:e4:b6:06:48:98:9a:61:29:97:7b:29:
                    72:8c:5a:db:08:cf:e8:c8:e1:90:b9:d1:e1:d4:df:
                    c5:3b:93:2a:d0:ac:cd:74:60:46:3c:b6:81:8d:16:
                    6f:4e:e6:66:14:b8:77:50:79:90:50:e8:ba:95:7e:
                    e9:76:59:0b:75:a1:f2:62:b3:33:b7:ff:5a:ad:d2:
                    37:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4E:D0:BA:BE:A3:B4:B6:9C:02:7E:47:05:5F:2C:81:04:12:96:5D
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/BACBFFFE9E8011EBA7C3FC6CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:f890::/44

    Signature Algorithm: sha256WithRSAEncryption
         79:87:11:ce:84:97:cd:d0:fd:26:14:38:ab:3c:12:5b:2a:59:
         0c:7c:46:78:c7:91:b5:b5:8c:e5:df:87:09:db:85:21:5b:f9:
         80:f0:36:61:5c:f5:df:ab:08:25:24:68:5e:a7:c3:af:ac:30:
         27:c4:68:42:05:91:35:41:0a:b5:b5:1b:6e:95:98:57:43:10:
         11:60:99:6e:15:cd:49:4c:e5:c7:24:a3:eb:e5:5e:cb:eb:78:
         02:79:83:f3:8a:c9:58:02:38:20:b6:5c:f6:42:ba:79:df:03:
         57:0b:92:cf:e2:1b:aa:00:e7:d3:f5:d4:e7:4c:ba:d9:5c:38:
         69:57:9a:27:1c:30:18:12:36:dd:8b:c2:bb:d6:3c:25:5a:55:
         14:4e:3c:9c:f1:59:75:8a:0a:9b:a9:49:c1:c6:38:21:ec:f6:
         0a:54:16:65:a6:26:f0:4e:44:7f:82:78:81:9d:0f:f5:59:ee:
         dd:a5:53:1a:4b:4f:db:33:fd:49:32:5a:4b:48:57:84:6d:c6:
         71:6c:25:94:e4:97:15:5a:b2:31:aa:a9:15:08:98:ed:aa:9b:
         c6:75:a0:18:1c:1b:7e:9c:44:f3:dc:83:01:54:d0:c3:f4:87:
         ec:6b:81:64:d6:88:a3:0a:a3:b2:51:78:ed:e9:dc:01:b7:31:
         9e:8f:26:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----