Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/5373A586068511EE9F71F964C4F9AE02.roa
File:                     5373A586068511EE9F71F964C4F9AE02.roa (raw, json)
Hash identifier:          y/ioNxAiSft+US17QttkvxzRPp8pHOQXS6yiXwW05w0=
Subject key identifier:   6D:B3:6F:4E:F5:8F:7E:D9:24:5F:E3:44:84:1D:E0:68:14:4D:FC:4E
Certificate issuer:       /CN=A91A1D4A/serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A
Certificate serial:       05
Authority key identifier: C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/5373A586068511EE9F71F964C4F9AE02.roa
Signing time:             Fri 09 Jun 2023 05:20:20 +0000
ROA not before:           Fri 09 Jun 2023 05:20:20 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     151400
IP address blocks:        2401:8e0::/32 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1D4A/serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A
        Validity
            Not Before: Jun  9 05:20:20 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=6482b693-7807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:71:74:c3:b4:4d:bb:c3:7b:40:bd:56:9e:60:
                    15:4b:1e:1b:7f:66:3c:11:ef:7b:31:e8:d0:bb:1f:
                    98:80:34:e3:62:f2:6b:c6:a2:6d:83:71:1b:ee:6d:
                    4f:f8:a3:95:ec:fb:13:7b:c1:09:dc:79:e1:b6:f9:
                    16:34:37:9a:86:91:2e:d7:49:ea:07:49:23:d3:d1:
                    06:99:21:34:b2:5f:e5:7d:7b:99:d6:7d:a6:6f:8b:
                    99:8f:30:24:50:5e:db:1f:94:2c:b1:50:5e:29:cb:
                    32:78:b2:d4:6f:25:cd:05:15:7f:97:e0:c8:1a:94:
                    a3:74:36:25:5d:c9:85:c3:88:43:22:50:0f:97:22:
                    01:eb:f9:d9:ff:4f:a1:c1:dc:80:d3:ea:ef:9c:0e:
                    ad:6c:47:ea:fa:a0:1a:2c:1e:72:53:b8:bb:f1:44:
                    11:e2:d2:d2:53:ec:10:86:e2:4d:f1:46:1b:21:02:
                    c7:e8:b7:6f:d0:aa:16:4f:8e:f7:b0:f4:8c:d7:de:
                    c7:85:88:74:96:3f:3a:19:eb:ed:00:5c:af:38:b8:
                    89:ec:2b:2d:40:e7:ef:e9:c6:23:09:83:1f:da:c2:
                    88:86:a5:5d:18:b5:46:dd:41:13:3b:0d:c9:b5:95:
                    71:ee:c0:aa:44:a4:10:44:4f:9c:e0:ff:67:6c:96:
                    db:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B3:6F:4E:F5:8F:7E:D9:24:5F:E3:44:84:1D:E0:68:14:4D:FC:4E
            X509v3 Authority Key Identifier:
                keyid:C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/5373A586068511EE9F71F964C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:8e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:84:cc:36:87:d7:55:06:a8:ab:40:2b:79:5a:ad:cc:c9:11:
         c9:68:62:8c:ea:8f:e4:f5:20:81:40:50:2a:a1:6d:21:b0:bf:
         c0:30:b0:b2:8d:4e:3e:13:6e:be:8d:f6:01:26:ad:de:c3:53:
         f8:79:4d:23:93:bd:03:9a:2f:a4:a3:74:86:e5:6b:93:d0:a2:
         22:c3:fc:aa:da:77:55:1d:63:4a:a8:d8:78:b0:6c:12:6e:ae:
         1d:20:97:fa:0b:86:a8:34:4a:0b:67:b9:12:ae:9f:8f:d5:93:
         01:c2:f2:f1:34:1c:dd:65:34:93:d4:84:a3:a3:17:7e:5f:6a:
         93:ec:89:de:2a:f7:82:cd:7b:aa:a4:bf:36:75:8c:e9:35:5c:
         10:12:93:b2:de:ec:d0:ab:e8:2b:1b:53:0f:93:53:74:f3:70:
         5a:93:4d:8c:32:03:c8:23:8e:a8:b6:df:39:0f:b1:27:76:5a:
         dd:2b:dd:c0:a0:1e:85:7f:8b:69:0e:0b:ee:e4:37:1b:3d:b5:
         0c:0f:a2:0d:6d:f5:3d:04:7c:97:d6:a2:b5:af:c3:4a:90:87:
         50:bd:5b:e5:78:82:d6:3c:76:08:93:f6:90:2c:6a:b0:36:91:
         fb:85:c1:58:70:15:b5:05:21:d3:21:34:91:e7:1b:cd:84:f3:
         a0:55:20:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----