Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/75E299C6A6CF11ED8FBD0A82C4F9AE02.roa
File:                     75E299C6A6CF11ED8FBD0A82C4F9AE02.roa (raw, json)
Hash identifier:          5k+y6DCaNS0BrxX5DC2y15VBf3b0X8um1r6f0pBRtd8=
Subject key identifier:   B7:EA:55:BA:E2:3D:CF:56:C3:41:B8:49:A4:85:62:CD:69:3B:D6:E1
Certificate issuer:       /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial:       0836
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/75E299C6A6CF11ED8FBD0A82C4F9AE02.roa
Signing time:             Tue 07 Feb 2023 10:09:09 +0000
ROA not before:           Tue 07 Feb 2023 10:09:08 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     38547
IP address blocks:        139.190.234.0/24 maxlen: 24
                          139.190.235.131/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2102 (0x836)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
        Validity
            Not Before: Feb  7 10:09:08 2023 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=63e22344-f2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:12:f0:37:d3:f8:8a:68:b2:39:86:f6:93:95:
                    b7:b0:d7:86:00:fb:0c:06:e7:b3:a4:d3:bd:d9:fb:
                    a0:f5:2a:d4:e9:e8:7a:82:ea:34:fc:24:dc:25:f8:
                    21:f8:90:a2:64:5a:1f:34:51:73:39:f3:cc:9e:17:
                    77:81:a0:30:1c:d3:8f:a9:5a:4a:81:de:70:5a:90:
                    3b:00:0f:f9:40:b2:4d:3e:05:ac:bb:1d:9e:52:52:
                    6e:f4:86:3e:ee:41:6c:e2:b2:dc:2b:6c:89:38:0e:
                    0c:ac:bf:e5:a0:32:c0:ef:15:5f:50:ba:3c:1c:eb:
                    6b:2a:4e:91:3a:7a:87:84:8d:61:35:97:1b:3d:81:
                    83:b7:2b:89:5b:7b:11:32:b9:85:67:28:b1:2d:05:
                    42:79:90:80:05:c3:43:48:72:e0:21:df:3d:c0:c9:
                    85:66:2d:f8:64:62:70:3e:e7:c0:aa:f7:6f:28:88:
                    47:83:9e:1c:0b:5e:33:4a:9b:11:f9:6f:f5:cf:17:
                    96:c4:6e:25:b8:f3:50:26:8d:09:24:80:8f:51:1d:
                    3d:9e:e5:3d:06:0e:90:fa:11:5f:86:71:2e:60:84:
                    ad:b3:a5:ee:3c:fd:f5:c5:fa:9d:5c:3c:ad:b1:af:
                    4e:ba:f5:1c:58:82:64:a2:a2:f6:8e:99:5c:3b:20:
                    81:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EA:55:BA:E2:3D:CF:56:C3:41:B8:49:A4:85:62:CD:69:3B:D6:E1
            X509v3 Authority Key Identifier:
                keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/75E299C6A6CF11ED8FBD0A82C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.190.234.0/24
                  139.190.235.131/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:fe:93:af:d1:c9:87:c5:b9:aa:d3:9c:66:f3:99:64:f4:11:
         a9:92:28:8d:6d:23:a9:41:c8:0c:9b:69:e1:86:c3:37:2a:c9:
         8f:45:97:3e:52:72:40:32:70:22:14:a8:da:9c:56:25:18:ec:
         e2:0f:91:24:e6:51:db:bf:9b:f8:f3:94:bc:0a:bb:07:2c:41:
         75:d1:2e:0a:66:80:8c:17:00:93:64:eb:8f:9a:5a:3e:24:cd:
         8a:dd:dc:43:27:84:33:3b:66:45:78:0a:92:3b:72:64:6d:64:
         ef:7c:ef:9e:6c:5a:01:a5:4a:07:bf:56:0a:d0:c1:46:07:d9:
         84:22:d7:f7:93:ce:7b:ba:b7:06:34:15:da:5b:c7:f0:1e:1a:
         65:ec:d9:5f:88:da:c1:23:4f:a9:8d:6f:33:23:d3:56:b6:a0:
         96:44:b1:4e:b8:2b:76:c2:f8:b5:63:9b:4a:74:71:39:8a:8d:
         7c:b0:79:67:b7:8f:bc:1c:91:f8:d3:fa:de:be:6b:de:33:a2:
         ad:21:ac:76:1c:79:20:5a:be:44:ba:0c:0b:87:e8:c4:cb:10:
         c2:d7:4e:4d:2a:56:e5:19:30:2c:76:61:be:d7:35:8a:71:bc:
         7a:cd:27:05:d2:aa:18:9c:10:b3:cc:9e:79:70:20:a9:02:de:
         9a:b1:38:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----