Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/FF0E3A32F86211EC87804819C4F9AE02.roa
File:                     FF0E3A32F86211EC87804819C4F9AE02.roa (raw, json)
Hash identifier:          C15q6xRCDOliyowTIkOLBm2veYE+ZaRPWCG4Q0xahcU=
Subject key identifier:   AE:4E:7B:45:F6:09:D1:E6:56:7A:EB:03:68:2E:6C:83:E2:8A:65:25
Certificate issuer:       /CN=A911B55C/serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699
Certificate serial:       02
Authority key identifier: A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/FF0E3A32F86211EC87804819C4F9AE02.roa
Signing time:             Thu 30 Jun 2022 10:54:22 +0000
ROA not before:           Thu 30 Jun 2022 10:54:22 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     149995
IP address blocks:        103.190.84.0/23 maxlen: 23
                          103.190.84.0/24 maxlen: 24
                          103.190.85.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B55C/serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699
        Validity
            Not Before: Jun 30 10:54:22 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=62bd80dd-2034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0f:90:4c:ff:51:d7:ce:c6:7e:90:ff:65:c8:
                    51:8c:e1:e9:86:3e:b2:d9:bc:04:31:79:b4:1f:c8:
                    8e:83:f2:b5:7e:3b:70:54:f6:b3:c7:ec:21:85:ed:
                    71:7d:91:b9:c6:b5:39:9b:ba:62:56:30:6a:56:3b:
                    a5:db:53:58:b4:f9:ae:28:a3:3b:b1:d5:a4:fc:da:
                    27:61:47:fb:cb:e3:7c:fa:60:36:d6:8f:80:04:d0:
                    6b:3a:9e:98:9e:78:5a:8e:83:35:41:d0:0c:57:b5:
                    b7:55:ff:f5:c2:8d:3f:28:2e:c4:41:86:1c:dc:2a:
                    95:28:98:c5:67:59:05:90:68:83:7a:cd:16:63:39:
                    02:e6:81:eb:71:4f:93:d5:c3:23:d4:4a:e8:d7:07:
                    e2:2a:77:3c:17:92:f0:ba:31:33:e8:9b:cf:cc:d0:
                    ba:c4:04:15:b0:ad:14:9a:a7:7d:ad:31:e1:8a:cd:
                    4d:c5:90:91:23:3a:94:9c:95:73:1b:44:36:59:4b:
                    ae:58:ac:18:03:58:e6:92:7e:14:3a:07:5e:30:ee:
                    c0:d3:0b:2d:16:f6:16:dc:ae:3a:d5:24:6b:20:a5:
                    5e:ad:c8:3c:80:76:85:17:4f:62:c7:e0:80:af:1f:
                    a4:83:70:e2:f4:9c:4a:17:e9:61:e7:ad:8f:42:11:
                    9f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4E:7B:45:F6:09:D1:E6:56:7A:EB:03:68:2E:6C:83:E2:8A:65:25
            X509v3 Authority Key Identifier:
                keyid:A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/FF0E3A32F86211EC87804819C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:ed:52:19:cb:44:4b:fb:cf:21:8e:3a:e7:44:2a:c9:87:d3:
         7e:bc:80:5b:13:79:8c:b5:69:ca:99:ee:05:ea:fb:3d:6e:ab:
         e4:b9:2b:13:61:35:2e:a2:e0:31:87:cc:e9:0a:7e:e8:67:c0:
         50:aa:7a:f4:86:c3:5a:3b:c2:f2:f3:af:79:c8:16:1c:73:4d:
         82:5c:97:1a:9d:a2:b4:36:35:37:a2:17:47:bd:55:ac:ca:79:
         03:8a:e3:6c:7a:90:53:ca:b7:84:a4:03:31:5c:81:77:06:a5:
         77:1f:8c:d9:92:4d:03:23:3c:7d:6e:9f:20:1c:2d:76:50:0a:
         6a:88:e0:74:12:93:0e:a8:54:c1:fe:e9:88:d8:c1:3f:ef:ea:
         c4:95:8a:04:78:0a:fe:3b:cf:71:f2:8f:f5:47:a2:8c:12:a2:
         59:7f:19:66:bc:3a:e1:2a:bb:98:65:2f:d0:75:58:d3:9d:2b:
         3d:f4:1c:31:e4:0c:cf:50:0c:00:7c:49:ab:e1:b3:f1:70:85:
         72:22:ce:28:2b:42:ca:14:b3:fa:5e:00:d5:79:a0:21:d2:36:
         6b:23:51:b5:41:52:82:0e:ca:8f:16:ae:db:ac:67:a7:b6:30:
         b4:43:b1:74:a6:b5:41:a2:d7:e4:18:c2:c9:0a:b0:a9:bb:6a:
         c3:6a:f1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----