Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/6CC04D08208111EEA9CB4C0FC4F9AE02.roa
File:                     6CC04D08208111EEA9CB4C0FC4F9AE02.roa (raw, json)
Hash identifier:          5YO5smvG73nvBbTAyVpqN9NdSIHg6H0jDHKRMwkykB0=
Subject key identifier:   2F:B2:25:50:ED:85:7B:1D:E4:B5:94:D8:4E:A5:D6:8F:79:31:F2:BF
Certificate issuer:       /CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1
Certificate serial:       0751
Authority key identifier: 70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/6CC04D08208111EEA9CB4C0FC4F9AE02.roa
Signing time:             Wed 12 Jul 2023 06:57:54 +0000
ROA not before:           Wed 12 Jul 2023 06:57:54 +0000
ROA not after:            Sat 30 Dec 2023 00:00:00 +0000
asID:                     57455
IP address blocks:        2400:5180::/33 maxlen: 33

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1873 (0x751)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1
        Validity
            Not Before: Jul 12 06:57:54 2023 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=64ae4ef2-4128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fc:5b:f2:2f:99:3b:35:9b:3c:15:bb:09:3d:
                    76:8f:e6:e5:42:9d:ee:16:26:8c:b7:4c:23:f2:e4:
                    24:c8:28:93:b8:bc:23:f1:94:96:24:27:0e:2c:38:
                    18:96:0b:f5:c3:81:2d:80:96:c1:9e:ea:7d:a9:5a:
                    3d:f0:b4:4c:f3:28:ae:20:f6:90:77:90:83:41:63:
                    e3:4a:23:b4:41:a1:fb:e5:c7:20:aa:56:73:16:0e:
                    e5:33:ea:4d:96:c8:97:ce:24:70:c8:85:98:cb:9d:
                    84:5d:f6:fc:c9:cd:93:34:2b:89:14:d7:ef:87:5f:
                    cb:9a:fa:90:6c:72:2a:4b:25:73:12:2d:d2:88:52:
                    54:59:fc:f1:33:cf:70:03:9a:ab:31:21:7a:ff:50:
                    d2:89:a5:1f:46:a3:33:42:e3:45:64:5e:e9:e7:b8:
                    50:f3:c9:e3:e8:fa:6c:9c:a8:50:c2:d8:3c:e6:e8:
                    98:84:30:5e:cd:87:53:3c:74:3e:a3:1b:b6:b1:41:
                    99:8c:12:6f:5f:4b:80:8c:c1:76:c8:4f:9e:b5:63:
                    41:35:2b:a0:71:01:9e:9b:4a:81:42:46:bd:3f:63:
                    30:63:8d:64:69:4b:5f:30:3f:d9:91:77:f9:7d:49:
                    66:ab:a7:43:f5:b7:33:8c:cc:29:53:cb:6a:83:53:
                    d7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B2:25:50:ED:85:7B:1D:E4:B5:94:D8:4E:A5:D6:8F:79:31:F2:BF
            X509v3 Authority Key Identifier:
                keyid:70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/6CC04D08208111EEA9CB4C0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:5180::/33

    Signature Algorithm: sha256WithRSAEncryption
         15:c6:d5:5e:51:cf:c2:73:de:d7:56:47:d6:5f:c9:98:aa:66:
         a7:b2:69:24:a3:f7:4b:d1:e7:8a:08:05:17:c1:9d:db:09:ba:
         3f:8b:90:aa:1b:ff:23:cf:b1:05:fe:b4:33:39:6a:bc:56:01:
         a9:43:b8:5f:4f:0c:1a:97:24:b5:fb:aa:cb:8f:09:c1:c2:cd:
         72:07:61:e5:5a:2c:5b:ef:62:ba:4f:c9:9f:3a:9d:65:79:1d:
         00:df:16:45:2d:a9:57:38:69:be:cf:41:00:cd:c4:31:8e:5f:
         5d:93:a1:be:3f:8e:07:c9:41:f0:47:21:79:cd:ed:86:a2:d3:
         e9:c9:d4:39:c8:7c:b3:51:4b:a8:ca:0f:9f:7a:0b:5a:20:2e:
         ed:0d:d1:9a:9e:ba:0c:25:e9:ca:a0:ef:07:9e:53:a6:21:82:
         59:34:f5:fa:48:4e:52:d3:e5:42:ca:8b:54:f3:4c:ad:90:6c:
         54:53:f4:ed:e3:61:54:fd:ff:b6:a7:29:60:a2:c5:85:b6:ac:
         01:5f:97:a0:74:16:60:1d:01:9a:be:48:0a:9d:e9:25:75:4b:
         f7:3d:f4:1f:51:7e:7d:43:1f:06:08:97:48:71:2f:07:fe:3c:
         c0:fe:fc:4a:0e:8e:33:85:93:59:a6:4d:4d:ce:40:cd:10:98:
         ef:c1:3e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----