Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/C2C6998E6A0311EEB70D1D1CC4F9AE02.roa
File:                     C2C6998E6A0311EEB70D1D1CC4F9AE02.roa (raw, json)
Hash identifier:          i3VDJyPZtqKF7UkwTxIIRxwScdtCJ3z1O5TsjzYnkjQ=
Subject key identifier:   80:B0:79:5E:6A:C7:7E:E5:B5:E1:D8:E1:41:31:F0:66:3E:51:0F:B2
Certificate issuer:       /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial:       06A8
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/C2C6998E6A0311EEB70D1D1CC4F9AE02.roa
Signing time:             Mon 23 Oct 2023 00:43:39 +0000
ROA not before:           Mon 23 Oct 2023 00:43:39 +0000
ROA not after:            Sun 31 Mar 2024 00:00:00 +0000
asID:                     46844
IP address blocks:        202.139.227.0/24 maxlen: 24
                          202.139.238.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1704 (0x6a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
        Validity
            Not Before: Oct 23 00:43:39 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=6535c1bb-2248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:27:9d:5b:b2:38:20:e1:54:e5:f8:0f:df:50:
                    b8:95:83:4e:e5:2c:d3:e3:40:22:0e:f9:58:54:85:
                    0d:f5:37:28:48:49:ca:a6:d5:f0:08:1a:d0:20:b8:
                    3a:78:25:ce:75:dc:5c:0e:0b:1a:db:0f:5b:4f:9f:
                    c0:08:56:17:50:2e:34:31:0a:ce:e8:34:71:1a:55:
                    51:08:e1:a5:ef:cb:17:db:e4:7d:e7:b2:a4:0e:ee:
                    43:a1:28:94:e0:06:4c:d6:87:10:25:52:c6:96:e6:
                    f2:2e:03:aa:34:52:7e:cd:aa:ff:dd:77:0a:49:7e:
                    a9:09:5d:79:09:d4:01:b4:c3:80:bd:44:99:11:0f:
                    37:9c:4e:83:d7:38:6b:77:ff:9c:db:1d:54:01:f7:
                    a2:ea:43:69:d6:f6:41:b4:3d:34:91:f7:d3:7b:7a:
                    ca:25:88:13:ff:46:30:89:ea:d1:2b:a4:b0:0c:96:
                    4f:b8:98:fa:fa:c3:60:3e:4a:e0:4c:62:d9:b7:b2:
                    78:a5:44:74:12:db:8d:a5:72:00:fd:6f:33:88:3e:
                    01:3c:09:05:e0:7d:3a:f8:84:9d:1d:b2:5d:30:04:
                    b5:0b:9b:56:c3:cc:00:e8:1c:f8:94:d1:e7:16:e6:
                    47:2d:a1:5c:f5:f5:92:6f:6c:c0:54:a3:98:4e:6c:
                    9a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B0:79:5E:6A:C7:7E:E5:B5:E1:D8:E1:41:31:F0:66:3E:51:0F:B2
            X509v3 Authority Key Identifier:
                keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/C2C6998E6A0311EEB70D1D1CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.139.227.0/24
                  202.139.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:5a:7e:22:f5:4c:e2:fd:e4:7e:3f:f0:34:67:14:4e:84:61:
         21:d4:79:29:e2:6c:6e:5a:eb:46:d5:aa:38:72:bb:f5:17:0a:
         33:d7:1a:c4:6a:48:27:67:47:da:43:65:0b:84:b5:a8:a6:d0:
         a4:ee:3b:09:e9:66:ee:82:d0:3c:90:82:e4:c4:4c:d9:df:7d:
         cd:bb:03:50:61:cf:c5:48:b5:e7:c6:86:bb:7b:76:27:d4:22:
         8b:79:5d:6e:de:7b:99:6c:b8:4f:0f:09:97:ff:79:5d:0c:eb:
         0b:84:4b:dc:81:8e:99:67:44:32:97:8f:b7:b7:57:3e:b0:59:
         c4:9a:c9:de:16:e2:67:4a:1d:a9:a1:e5:94:18:d6:b5:0a:e5:
         d8:7a:4b:72:49:67:53:fe:a4:2d:c5:b0:f0:f7:65:6a:67:e5:
         9a:37:4c:4e:22:5e:65:2d:dc:ff:a8:2d:79:36:0f:95:cf:67:
         8b:e6:84:dc:89:99:df:66:bc:f3:32:3a:87:8f:0e:f0:d9:9d:
         fd:16:19:4f:73:ac:a2:64:f3:d8:f5:4d:11:99:b4:56:ae:c5:
         7e:67:2e:60:74:ba:92:26:2b:db:a9:6d:f8:99:fd:d9:57:d5:
         75:71:3a:89:c4:36:97:56:fc:08:d6:3f:ee:25:d4:ae:c1:6f:
         20:73:85:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----