Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/C6BC93E8402A11EEAC7DEF72C4F9AE02.roa
File:                     C6BC93E8402A11EEAC7DEF72C4F9AE02.roa (raw, json)
Hash identifier:          jOM6Hkgactl6lz7fjFPOGTN8Wqofzk/QdCIdXUVbU8s=
Subject key identifier:   3C:FF:8A:E7:92:25:39:42:8A:60:EB:4C:3E:C6:32:CB:C6:9D:56:F9
Certificate issuer:       /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Certificate serial:       02
Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/C6BC93E8402A11EEAC7DEF72C4F9AE02.roa
Signing time:             Mon 21 Aug 2023 13:58:17 +0000
ROA not before:           Mon 21 Aug 2023 13:58:17 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     24424
IP address blocks:        113.197.104.0/23 maxlen: 23
                          2401:fa00:40::/43 maxlen: 43
                          2401:fa00:40::/48 maxlen: 48
                          2401:fa00:41::/48 maxlen: 48
                          2401:fa00:44::/48 maxlen: 48
                          2401:fa00:45::/48 maxlen: 48
                          2401:fa00:47::/48 maxlen: 48
                          2401:fa00:48::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247
        Validity
            Not Before: Aug 21 13:58:17 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64e36d78-339e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:d6:f5:14:b9:95:e4:3d:ab:14:96:04:85:
                    96:31:b7:04:2c:3f:17:94:e9:f7:e6:e4:52:b6:4b:
                    39:21:c9:eb:5f:f5:c4:7e:26:08:b8:02:53:df:46:
                    a7:85:28:4f:90:da:8c:bf:73:4a:3b:08:36:3d:9e:
                    dd:f9:ff:c6:ce:8f:e2:a7:2a:dc:45:a7:49:19:b4:
                    e6:d6:71:b8:1e:eb:cd:40:4f:03:e4:6e:2a:fa:03:
                    4f:7e:62:e8:ea:96:7d:03:86:9f:11:dc:45:d8:92:
                    3e:9f:40:f6:c3:5f:12:36:10:69:54:4e:5a:52:08:
                    ac:94:79:90:fb:63:9b:37:1e:7d:5f:fb:22:2f:25:
                    48:47:9f:ac:f8:0d:0e:46:09:49:81:31:1a:8c:df:
                    a5:7e:f9:1a:2c:cc:1b:80:da:d3:d9:17:12:a2:bb:
                    4d:bc:c8:1b:60:22:14:22:a0:98:24:e2:9d:9d:d9:
                    06:15:9d:4a:b6:eb:66:82:6c:74:09:da:2e:b0:86:
                    44:85:0d:19:16:7e:ed:1d:8a:01:41:92:4d:db:c5:
                    8b:b1:45:c7:a8:77:7a:1d:79:72:2f:0b:93:16:f9:
                    36:5f:3b:da:80:e8:41:ee:49:e9:2f:29:0e:44:0f:
                    a8:5f:d1:56:c0:b5:6a:15:1e:2e:29:bd:dc:f1:07:
                    dd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FF:8A:E7:92:25:39:42:8A:60:EB:4C:3E:C6:32:CB:C6:9D:56:F9
            X509v3 Authority Key Identifier:
                keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/C6BC93E8402A11EEAC7DEF72C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.197.104.0/23
                IPv6:
                  2401:fa00:40::/43

    Signature Algorithm: sha256WithRSAEncryption
         1e:06:c9:48:de:0d:35:63:55:29:e4:f5:5a:16:c3:ab:e7:10:
         43:bb:e9:72:30:00:1e:2e:9c:70:33:b5:95:f7:7d:53:ec:71:
         5a:25:fb:48:f3:b0:ac:03:34:1c:13:7a:05:70:7c:22:5b:13:
         74:94:a3:81:7f:17:01:4b:93:33:04:b3:d5:7d:21:86:e9:6f:
         9b:85:bc:a4:82:1b:6d:57:69:97:83:29:8a:a0:f8:d8:e2:63:
         00:6d:c2:71:51:a0:c2:58:68:1a:d0:24:67:ce:48:7b:78:68:
         0e:c1:1b:42:cb:a7:04:d5:81:e9:46:c9:52:a2:e7:33:af:bd:
         21:ef:57:98:51:28:db:cb:c2:66:cc:66:77:17:8c:7d:ba:63:
         ed:a0:55:c4:44:38:85:1c:f4:99:a7:c3:fa:f2:3b:39:d9:30:
         68:ed:0f:a9:3a:97:39:b7:85:0b:c4:14:7c:da:ac:08:c9:4d:
         3e:fd:2d:62:06:90:e2:e6:05:df:87:f8:85:28:62:27:f8:25:
         a3:07:19:cb:f2:a9:f4:54:4b:d3:31:98:28:93:51:cd:39:2e:
         7c:bc:f8:6c:70:b7:c8:cd:75:f5:7b:8d:f6:28:93:b4:e7:ee:
         23:fe:e1:af:1a:62:2c:ec:c9:dc:fe:79:7a:8b:a2:a5:55:ab:
         6a:ea:44:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----