Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/54A388580CA411ED96936D79C4F9AE02.roa
File:                     54A388580CA411ED96936D79C4F9AE02.roa (raw, json)
Hash identifier:          pRzDGCBFBvG5qEQhhA8rhJPDB6udxdIQdb90V4j6YB0=
Subject key identifier:   F8:09:26:73:A6:54:56:67:17:74:77:F6:E8:05:53:71:3C:F4:60:BD
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0220
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/54A388580CA411ED96936D79C4F9AE02.roa
Signing time:             Wed 27 Jul 2022 16:33:33 +0000
ROA not before:           Wed 27 Jul 2022 16:33:33 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     38239
IP address blocks:        58.137.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 27 16:33:33 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=62e168dd-29a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3c:49:52:80:5f:95:1f:58:1c:bb:78:ad:a4:
                    e3:cf:07:6d:97:5d:ba:04:b0:68:d0:2b:c4:e4:fa:
                    2c:21:a4:ee:9c:cc:0d:64:36:b6:81:58:17:e9:94:
                    09:67:96:43:22:9f:60:41:7b:54:db:9a:0d:3d:d8:
                    4a:e7:cc:84:ad:d3:a9:de:b7:b9:67:ee:43:24:b4:
                    8c:e0:a5:11:a6:ce:d2:cb:da:8a:fa:95:a7:9d:6d:
                    d7:2d:1e:30:0c:20:c7:2b:6b:76:ab:91:fa:ad:43:
                    23:69:ba:75:68:40:15:e7:0d:ee:51:3f:9b:ca:68:
                    0e:9a:55:7e:88:b1:6e:76:62:68:d8:28:f9:c6:d0:
                    09:55:b4:91:52:d2:60:6e:e2:86:f0:00:d7:a8:98:
                    4f:a2:2f:a8:fc:1b:30:7a:48:c1:51:d3:30:c3:42:
                    c7:ee:43:9a:3e:cf:51:79:d4:bf:48:93:87:08:de:
                    73:6e:c9:99:14:2b:74:cf:57:a4:7b:2e:cd:12:8a:
                    08:c1:15:08:b9:82:2d:02:1c:64:5d:95:44:aa:aa:
                    22:f4:ce:c9:f7:26:bc:33:92:7a:79:2f:c3:79:37:
                    bb:a8:8d:ef:12:61:7c:30:4a:7e:9c:bf:33:f1:0a:
                    9c:91:a7:f5:d9:90:2e:b1:4c:24:2e:69:28:78:33:
                    83:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:09:26:73:A6:54:56:67:17:74:77:F6:E8:05:53:71:3C:F4:60:BD
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/54A388580CA411ED96936D79C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.137.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:8a:01:75:fa:61:e7:38:b8:2c:d4:57:a3:64:b2:cb:17:20:
         e1:e4:50:7a:c4:6e:6d:dd:30:ed:a6:a8:9e:fe:3c:e6:75:08:
         ee:b3:4f:5f:f1:15:df:85:7b:fb:0b:35:09:8a:24:7b:ae:67:
         52:6a:2b:5d:58:0c:db:70:3b:81:78:18:14:71:3b:59:a5:62:
         13:ed:62:e0:fa:51:b0:74:2c:58:17:51:85:f1:82:49:5e:77:
         db:c6:5f:f7:75:7b:11:fa:a5:8f:f3:0e:a2:0c:ff:0b:78:f6:
         83:59:95:9e:1b:0f:63:50:f5:1a:a5:e7:f3:34:4a:d5:b7:12:
         b7:77:d6:86:f9:ce:a8:79:52:fb:1f:ac:75:0b:75:a0:09:b9:
         54:d5:19:69:bb:f8:7a:70:8b:7b:67:23:5b:06:90:65:20:6a:
         c8:7e:db:61:59:d3:60:3c:b5:57:23:6c:5a:0e:19:37:47:77:
         d4:e2:6a:8a:5b:58:ef:4a:15:47:bd:29:cf:80:39:b3:e2:ac:
         8a:bb:18:9c:43:10:bd:a1:25:73:fd:0d:3e:fb:0e:30:19:25:
         d4:67:d4:bb:b1:da:45:0d:fa:8b:23:6a:c4:4d:e5:1d:10:4c:
         66:3e:8c:29:7d:fc:10:0d:2c:89:e9:72:47:d6:9a:a5:7f:fd:
         22:b6:27:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----