Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E178D/0624B4D4201911EEB5DFB129C4F9AE02/BA4F1234201D11EE8BD7393AC4F9AE02.roa
File:                     BA4F1234201D11EE8BD7393AC4F9AE02.roa (raw, json)
Hash identifier:          x+4IeF9lo1rzICQKSFuE5+AxBEC7fSBe699rH2Jpl7s=
Subject key identifier:   62:48:94:64:F3:EF:1E:D2:0D:BE:9B:2C:21:A3:38:D9:65:5C:55:FA
Certificate issuer:       /CN=A91E178D/serialNumber=23448B1856AFDE7CEEBB5924FD8AD805F07E06B0
Certificate serial:       02
Authority key identifier: 23:44:8B:18:56:AF:DE:7C:EE:BB:59:24:FD:8A:D8:05:F0:7E:06:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I0SLGFav3nzuu1kk_YrYBfB-BrA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E178D/0624B4D4201911EEB5DFB129C4F9AE02/BA4F1234201D11EE8BD7393AC4F9AE02.roa
Signing time:             Tue 11 Jul 2023 19:04:15 +0000
ROA not before:           Tue 11 Jul 2023 19:04:15 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     137208
IP address blocks:        103.104.242.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E178D/serialNumber=23448B1856AFDE7CEEBB5924FD8AD805F07E06B0
        Validity
            Not Before: Jul 11 19:04:15 2023 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=64ada7ae-6cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:24:94:1b:a9:ec:9f:bf:84:4e:a3:39:29:9d:
                    45:35:d7:0e:90:a3:56:1f:3c:2e:53:a1:ef:29:d6:
                    07:76:0e:c5:71:20:83:65:47:b7:19:8a:e2:f8:aa:
                    bd:5c:91:27:8e:49:4d:37:6c:ba:96:66:fb:16:50:
                    79:d9:80:1f:e9:0d:f7:d8:33:d6:85:fc:78:63:c2:
                    a9:83:ea:24:99:e3:c8:5d:e4:eb:72:a3:d2:b9:a9:
                    ff:ca:d1:7d:69:bb:69:8c:38:85:9f:33:09:15:9c:
                    61:19:04:14:a7:0a:30:95:47:2d:78:7c:00:c1:7e:
                    f1:39:1e:c9:84:d5:48:21:b5:83:97:7f:4f:ec:03:
                    9d:95:40:dd:19:64:3d:23:24:d1:59:23:85:3c:12:
                    23:cf:97:24:58:f5:c9:5a:0c:fb:64:c8:0d:ef:a3:
                    9d:73:b5:5a:55:7d:08:5d:f3:26:a1:7c:9d:f6:20:
                    0c:dc:ec:48:56:40:87:3c:e7:7c:ae:60:8d:a0:6c:
                    05:8b:30:60:e3:42:19:f1:2d:e3:59:66:94:76:70:
                    34:bb:f0:ee:79:e4:04:01:77:6b:6d:39:4e:7e:44:
                    b5:30:e8:aa:4f:9d:2d:02:45:64:e5:99:08:48:6c:
                    4e:54:01:e9:90:34:df:7a:57:e2:f2:86:b4:b3:6c:
                    f6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:48:94:64:F3:EF:1E:D2:0D:BE:9B:2C:21:A3:38:D9:65:5C:55:FA
            X509v3 Authority Key Identifier:
                keyid:23:44:8B:18:56:AF:DE:7C:EE:BB:59:24:FD:8A:D8:05:F0:7E:06:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E178D/0624B4D4201911EEB5DFB129C4F9AE02/I0SLGFav3nzuu1kk_YrYBfB-BrA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I0SLGFav3nzuu1kk_YrYBfB-BrA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E178D/0624B4D4201911EEB5DFB129C4F9AE02/BA4F1234201D11EE8BD7393AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:b9:d9:52:05:a5:07:48:05:1f:b6:54:19:a3:7c:74:da:47:
         ec:c9:d3:15:ad:1c:77:ae:81:84:6d:a1:0d:3e:5f:40:e8:4c:
         b0:f6:66:60:5f:7e:25:bf:da:a3:d2:fd:c6:a3:02:a4:b5:99:
         59:07:6e:3d:ed:16:bc:37:2b:5b:36:e3:de:19:a3:c9:e8:50:
         ab:91:72:64:b1:cc:e0:44:d8:7c:52:a1:c0:e2:ab:5a:29:6f:
         61:ce:e0:16:eb:3f:26:4a:6f:fc:b6:b5:2c:4b:c6:57:12:0f:
         05:79:ca:de:76:c4:5f:50:5e:ae:68:9b:54:92:d8:a2:14:2f:
         16:2d:24:9d:87:68:01:c3:a1:97:cc:4b:61:c0:d2:59:33:28:
         1d:db:c2:36:61:18:2e:27:c2:87:44:83:78:78:3e:41:44:0a:
         1b:7c:85:d1:1a:8d:69:ca:7f:e7:15:9e:9b:ac:d0:bc:72:e3:
         87:44:e1:44:2d:e3:63:3b:f1:60:35:19:53:1c:72:9e:a9:d1:
         1e:70:c3:99:e0:dc:f5:c3:3a:6c:ac:dc:47:f7:3e:45:8c:83:
         89:91:ce:32:bf:91:fc:3f:5f:19:b3:67:57:91:2f:0c:45:b7:
         0e:44:4d:3f:e7:fb:e6:3c:17:72:8e:fc:ab:b0:ca:dd:5a:09:
         27:88:27:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----