Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/815373A46A9611EDA3B7CA66C4F9AE02.roa
File:                     815373A46A9611EDA3B7CA66C4F9AE02.roa (raw, json)
Hash identifier:          WcDvmlqrzpBPEPhITbp4uevDYDY9vqOkh1ysln/DDBQ=
Subject key identifier:   E1:ED:24:D1:54:3F:18:7D:CB:E5:CB:03:31:41:54:45:4D:71:D6:58
Certificate issuer:       /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174
Certificate serial:       0596
Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/815373A46A9611EDA3B7CA66C4F9AE02.roa
Signing time:             Sat 26 Aug 2023 23:00:10 +0000
ROA not before:           Sat 26 Aug 2023 23:00:10 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     136607
IP address blocks:        103.152.100.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1430 (0x596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174
        Validity
            Not Before: Aug 26 23:00:10 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64ea83fa-b4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f7:db:bf:dd:49:fd:d3:85:42:68:75:31:3a:
                    2c:65:8c:93:38:4a:4e:d6:e6:f0:7a:9f:5f:ba:bf:
                    ef:62:6d:bd:bf:fa:3a:07:38:2f:5a:4e:ca:31:26:
                    82:dc:36:1d:e7:aa:58:6a:6c:68:de:aa:e9:79:ff:
                    f1:40:77:6a:d1:d1:67:55:25:f6:39:bd:c2:24:20:
                    3e:7c:f0:9f:c0:a2:a9:ac:f3:92:85:4f:ba:4a:93:
                    bc:3e:f6:f9:57:f5:80:3e:36:bc:1b:ff:11:95:f8:
                    4e:9a:f1:b6:b7:26:fd:9a:17:21:5e:d1:1c:7c:3b:
                    e7:fb:ac:0d:97:a6:8b:23:9b:5d:67:a8:b7:d3:bb:
                    50:33:1d:45:48:e1:e8:32:03:29:2a:46:b6:56:f2:
                    c2:b3:7d:b6:03:54:cd:e6:56:ae:6d:ae:3f:c9:92:
                    66:99:d6:1e:7b:c6:50:a9:c8:4a:dc:54:2d:24:a5:
                    de:43:f0:15:61:44:b5:08:a5:4e:5f:49:96:ec:87:
                    98:8f:17:02:75:96:6c:f6:24:e8:24:d8:f3:e3:78:
                    8d:37:54:f6:88:a9:b4:9c:6e:76:a1:e8:cb:f8:ef:
                    23:8d:ff:4d:88:ce:d1:b6:d3:25:e2:5f:26:65:e5:
                    1a:00:0d:91:09:00:ff:05:b1:4c:9b:e7:91:f1:6f:
                    f6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:ED:24:D1:54:3F:18:7D:CB:E5:CB:03:31:41:54:45:4D:71:D6:58
            X509v3 Authority Key Identifier:
                keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/815373A46A9611EDA3B7CA66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:87:a6:b2:06:76:b8:ae:96:8b:e2:8c:d3:e6:a9:35:a7:e7:
         53:1f:d2:95:60:31:c6:3e:77:e6:cf:97:6a:02:27:65:e7:90:
         61:68:67:8e:e0:e6:86:40:43:b0:87:cc:4b:ed:d2:f6:6a:87:
         37:af:c4:58:b4:b4:0b:9c:0a:46:4c:28:61:03:aa:78:16:e7:
         ea:fb:e8:ae:40:34:35:c1:03:11:9d:f8:fa:c5:ae:91:cc:0d:
         48:f4:c9:dc:41:58:ad:82:ec:d5:9c:1c:48:d9:36:7b:21:50:
         04:30:e3:02:4f:3e:79:ed:b8:0b:27:ef:6f:f2:c7:6e:96:3c:
         98:db:64:b2:cc:9e:0d:17:ca:83:c7:29:a5:50:28:fb:03:46:
         d4:e6:24:31:56:11:b6:48:70:30:41:ae:4e:82:58:f1:e0:07:
         7e:2e:62:14:bd:05:be:a7:2e:4c:ee:7e:16:5a:e4:54:58:04:
         41:f9:bf:03:51:f2:be:ff:4c:b6:75:f0:b4:e3:56:dd:6f:f7:
         36:42:49:24:d4:21:4f:ff:bd:a7:02:b9:1d:6c:1f:4e:c1:d5:
         a8:02:b4:27:d3:17:b3:9f:98:38:20:b9:d8:9d:af:06:60:a5:
         1c:2b:df:6a:ce:16:7a:e1:b3:97:07:bc:b1:b5:7a:f4:46:7f:
         6d:5d:db:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----