Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/F084E1D20E7311EEB4DBBC54C4F9AE02.roa
File:                     F084E1D20E7311EEB4DBBC54C4F9AE02.roa (raw, json)
Hash identifier:          3iJwxgYhTVZI1yYh/ZrMRVOJ/YxmCAiHAPzAV63sZdE=
Subject key identifier:   88:CF:6D:0F:7E:17:25:2C:6B:48:39:33:AB:D0:5D:BF:F7:AB:F3:26
Certificate issuer:       /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial:       07
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/F084E1D20E7311EEB4DBBC54C4F9AE02.roa
Signing time:             Mon 19 Jun 2023 07:36:02 +0000
ROA not before:           Mon 19 Jun 2023 07:36:02 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     202662
IP address blocks:        2401:b60::/32 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
        Validity
            Not Before: Jun 19 07:36:02 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64900561-0219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b6:52:61:06:a1:e1:ea:34:74:93:c2:75:bf:
                    5f:e0:94:b4:b6:a1:58:19:f0:26:53:8b:66:10:2d:
                    1d:06:36:0a:b7:3b:4b:ad:a6:13:e9:8b:2d:d1:e3:
                    2d:17:a2:44:03:17:3a:24:1f:f9:0a:aa:17:af:19:
                    7f:96:90:82:f8:91:93:94:0d:40:f1:ae:94:5e:ff:
                    d9:75:46:5c:3c:6f:76:78:2e:10:7f:01:3b:4f:3f:
                    64:af:f8:e3:0e:da:30:a8:1b:e4:69:e1:71:d0:51:
                    0d:dd:3c:b0:b7:bd:65:9f:c1:ea:d1:de:f5:79:87:
                    28:61:ab:52:09:03:e9:b8:51:e5:43:17:72:82:72:
                    dc:e2:a2:9e:9d:50:cc:93:8e:9e:48:b0:77:95:b7:
                    5a:37:7c:ce:68:de:50:ff:6d:16:6d:ee:49:4a:c0:
                    2b:c6:5f:c5:92:97:d7:9d:66:53:00:5e:72:76:bb:
                    19:fe:a8:b0:8f:11:00:8d:c4:66:95:70:cd:08:18:
                    67:f6:e7:66:d1:b1:0d:0a:38:79:e6:c4:33:8e:90:
                    96:f9:cd:e9:8c:98:5a:3c:b5:5f:de:2f:5b:c6:54:
                    b7:ae:c8:9e:3e:d6:b6:80:36:2e:52:63:6e:72:36:
                    09:77:bd:d7:91:7e:22:f5:09:9e:bd:28:f5:30:c7:
                    6b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CF:6D:0F:7E:17:25:2C:6B:48:39:33:AB:D0:5D:BF:F7:AB:F3:26
            X509v3 Authority Key Identifier:
                keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/F084E1D20E7311EEB4DBBC54C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:c8:bc:a9:af:d2:20:60:fe:e4:b5:42:3f:03:e2:d9:3a:61:
         38:b5:b3:3a:db:c2:83:7f:4d:1e:8c:2f:91:ec:12:2c:e3:39:
         f5:31:d6:b7:27:a8:44:af:95:5f:06:a2:da:09:1e:44:94:cd:
         d6:bd:75:b5:cf:c4:52:99:de:ea:66:43:4f:88:aa:2f:3e:e6:
         b3:df:ea:5f:37:af:1a:e7:7e:9d:a9:e6:38:a1:a4:60:f5:7e:
         d9:cc:78:12:08:42:e8:9e:79:39:62:ca:c6:9c:4a:66:9b:17:
         e5:28:37:bd:b4:ff:28:b1:64:5d:a0:02:c5:d1:48:ba:37:7f:
         34:d9:9c:64:b0:eb:91:3c:d8:d3:10:1f:d1:34:d0:0a:61:ef:
         c9:36:11:f5:48:60:3c:fc:7f:0d:af:b3:2c:0d:17:1c:ec:7e:
         f6:98:ee:b5:5b:d9:56:4d:1f:35:0c:4b:9c:a4:60:2e:22:5d:
         9a:d7:19:82:0a:ec:4f:1f:68:2c:f7:01:83:44:81:74:64:8b:
         78:70:e8:9b:18:f8:e6:1c:ca:a9:00:5f:3f:72:09:47:35:ea:
         c9:61:b4:96:48:6e:68:21:58:4e:b0:84:c5:45:fa:fd:24:c5:
         1e:a9:1f:22:c4:f6:c8:f0:73:e3:da:ab:13:5d:fe:f8:4b:4e:
         f5:32:4e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----