Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/502B087E4E2511EDA49B5C52C4F9AE02.roa
File:                     502B087E4E2511EDA49B5C52C4F9AE02.roa (raw, json)
Hash identifier:          54oige2SqtAq1xa/9HljxZnVDU4ZcShl8+totkPLdAo=
Subject key identifier:   F8:6B:33:2C:A1:57:DD:70:BD:42:78:E2:1F:B3:18:5C:51:AD:70:AB
Certificate issuer:       /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial:       07C5
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/502B087E4E2511EDA49B5C52C4F9AE02.roa
Signing time:             Mon 17 Oct 2022 14:09:28 +0000
ROA not before:           Mon 17 Oct 2022 14:09:28 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     15083
IP address blocks:        139.190.0.0/22 maxlen: 22
                          139.190.12.0/22 maxlen: 22
                          139.190.24.0/22 maxlen: 22
                          139.190.100.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1989 (0x7c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
        Validity
            Not Before: Oct 17 14:09:28 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=634d6218-ef12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:09:05:14:2c:a7:d6:96:2f:d9:02:68:7e:69:
                    03:73:92:b4:38:c0:b6:71:54:a3:c5:b9:be:cd:86:
                    cd:27:95:73:fc:fa:24:b5:2b:e5:1f:14:55:3e:ea:
                    77:57:48:28:1f:80:e2:fd:46:ef:d8:c8:78:63:fb:
                    ee:2a:3d:53:cd:ec:50:b2:67:b4:61:fc:68:54:2d:
                    b9:f4:39:52:dc:1d:4f:99:87:dc:24:5f:49:4f:85:
                    78:06:19:0d:a5:79:1f:4f:a7:b6:ff:51:72:a2:15:
                    6f:5c:d3:bc:f1:7f:d9:b2:d5:41:d1:bd:fc:8a:06:
                    cc:72:f1:fc:2b:05:16:97:3e:7d:07:4e:39:12:a2:
                    37:fe:b9:75:cb:ed:11:7a:2e:8b:03:a9:9d:ff:4c:
                    f0:a3:85:aa:84:4a:ce:7b:b5:35:46:41:9b:b9:af:
                    11:31:1a:13:4b:b0:cb:5e:25:bc:20:63:d0:85:a9:
                    cc:3f:c9:75:7d:b9:ca:7d:74:54:f3:17:dd:df:d7:
                    4e:0f:45:ba:26:80:f4:61:67:9e:75:e9:d2:b1:1b:
                    38:14:5c:b0:0d:ba:69:20:2f:5f:76:d4:4d:76:16:
                    58:09:7a:3e:65:fc:22:b4:f9:21:47:6d:13:28:07:
                    b3:53:33:41:57:dd:fc:42:63:d3:b5:1d:63:93:bd:
                    c1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6B:33:2C:A1:57:DD:70:BD:42:78:E2:1F:B3:18:5C:51:AD:70:AB
            X509v3 Authority Key Identifier:
                keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/502B087E4E2511EDA49B5C52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.190.0.0/22
                  139.190.12.0/22
                  139.190.24.0/22
                  139.190.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:88:19:fc:0e:8b:a4:04:bb:55:b7:67:46:1a:05:d3:9e:00:
         de:fd:1e:0b:e2:18:ea:7f:fb:52:b9:3e:65:65:e1:9b:74:ae:
         b4:5a:1d:68:c3:1d:f1:f1:7e:c9:7c:d7:a3:8c:bf:47:e1:31:
         94:d4:17:bb:61:5b:2f:fa:47:48:a7:cb:39:4b:9b:8d:b5:c4:
         9d:1e:4e:91:e9:e0:1e:e8:13:d6:6a:f3:eb:f6:89:db:66:a5:
         50:c0:aa:ba:6e:df:73:fd:bf:8b:a0:28:b8:e2:3b:16:57:85:
         b5:90:77:58:86:1b:73:f3:3e:80:5e:5b:4c:91:3a:91:63:a8:
         e2:ed:e1:cb:c5:e4:e5:9c:f9:a2:ac:4d:b1:02:ca:55:0e:f8:
         69:2d:82:67:8a:a4:dc:d7:8c:95:cf:73:11:22:ad:32:2e:e6:
         94:aa:b6:7c:bd:b0:5f:f0:1f:24:42:2a:16:2d:1c:40:41:35:
         fe:54:70:56:49:e4:33:40:1c:eb:5e:d8:c2:fb:50:b3:8a:de:
         fe:89:04:d1:ee:85:3f:2a:07:57:c5:55:6e:f9:28:c9:b6:4e:
         14:b8:2e:22:96:9f:66:98:f2:cb:a7:1d:36:be:bd:cc:76:b4:
         30:6b:15:ff:15:83:65:ad:fd:df:b8:8d:d4:e4:79:51:e3:2f:
         0d:f7:fb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----