Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/ACB78CEABCFA11EDAD328D3AC4F9AE02.roa
File:                     ACB78CEABCFA11EDAD328D3AC4F9AE02.roa (raw, json)
Hash identifier:          2+qHQeYMsMfyh98w5nbsbdwIVNZNi2lC0s2UpuQGwpU=
Subject key identifier:   4D:0C:2E:EC:B6:03:A1:75:A0:C0:C5:CD:37:91:70:4F:24:68:04:2B
Certificate issuer:       /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Certificate serial:       022F
Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/ACB78CEABCFA11EDAD328D3AC4F9AE02.roa
Signing time:             Tue 29 Aug 2023 15:21:08 +0000
ROA not before:           Tue 29 Aug 2023 15:21:08 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     136600
IP address blocks:        2401:1740:6000::/48 maxlen: 48
                          2401:1740:8000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559 (0x22f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
        Validity
            Not Before: Aug 29 15:21:08 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64ee0ce3-04d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c0:90:b1:9c:26:a0:f5:0b:8a:25:36:7c:c2:
                    6b:a1:be:9a:20:ac:8c:e9:5a:d4:60:7c:63:b2:69:
                    41:25:47:6d:67:2f:e1:93:f1:d6:55:a6:06:53:2d:
                    b8:16:03:d5:92:46:1d:c7:fa:eb:e6:d5:1a:3b:59:
                    d4:9b:f3:a0:58:f9:68:c2:e6:22:87:77:2e:13:57:
                    37:e2:ea:d8:b8:e1:1f:c4:e8:77:0a:4e:c7:c1:48:
                    02:7b:a6:71:ee:c0:4f:2d:0d:19:22:13:a6:15:27:
                    1a:d0:44:b1:3b:eb:c0:12:9b:f3:ea:ff:dd:53:d6:
                    7b:13:cc:18:5a:c2:39:cc:06:8b:2e:34:3b:10:97:
                    33:b6:84:cc:13:be:bd:43:67:8f:ca:a9:35:d8:7f:
                    50:f8:9b:0a:77:00:96:4b:4b:36:01:03:77:2d:06:
                    71:0d:13:70:f4:87:e6:62:33:cb:79:56:24:b9:d7:
                    9c:b3:82:9d:b3:7e:2f:43:ae:1c:20:9c:4e:80:b2:
                    d8:9a:3e:3e:5e:ee:87:62:a8:76:9c:dc:22:58:25:
                    39:f5:4f:63:d1:5c:50:d3:0d:e4:5b:f1:cf:50:b3:
                    fe:89:be:0f:26:59:c1:9c:14:12:a3:1a:9d:bb:1f:
                    f3:2b:4e:37:aa:79:4e:cd:c8:2a:83:3b:58:40:70:
                    d9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0C:2E:EC:B6:03:A1:75:A0:C0:C5:CD:37:91:70:4F:24:68:04:2B
            X509v3 Authority Key Identifier:
                keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/ACB78CEABCFA11EDAD328D3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:1740:6000::/48
                  2401:1740:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:bb:6e:6f:96:0b:51:73:80:cf:d4:ec:2e:27:f1:68:04:7d:
         ae:bc:23:15:05:e9:df:a2:61:9a:cf:f9:aa:91:9c:84:b4:f8:
         20:59:60:10:1b:3b:68:fb:85:a3:4e:fa:8d:b2:81:2b:d7:ea:
         18:19:75:5e:64:de:1e:21:4b:8e:6b:11:a0:36:f1:a2:de:14:
         03:a3:35:0e:52:96:04:a6:df:ab:1a:01:e1:68:a2:ec:6b:ed:
         7e:ce:cf:92:87:88:2b:5b:3d:18:23:ce:79:70:f8:08:11:40:
         74:9e:24:33:91:1d:a8:64:c1:74:c9:f8:55:c2:63:36:1a:2c:
         3e:4a:7d:90:e6:cd:20:d4:37:f6:49:69:0e:cc:db:70:d1:af:
         1a:98:8e:cf:dd:1e:8b:1e:ff:8c:14:dc:34:4b:89:77:89:bc:
         2a:56:df:8a:da:03:dc:5f:24:30:c4:b1:e3:21:50:ff:e1:fc:
         27:07:7b:8d:ad:c2:df:2f:ce:7e:83:24:26:b2:26:03:90:91:
         57:bb:c4:79:26:24:2a:96:05:89:71:40:af:64:b2:d2:bb:e1:
         fe:91:c9:dc:db:fb:f1:c7:9d:eb:2e:24:93:40:51:59:b5:84:
         03:e8:7e:64:eb:41:d7:5a:16:69:31:d8:3e:cc:d0:c2:94:81:
         f8:09:d6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----