Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EBCAC2141B6411ECAAB1D328C4F9AE02.roa
File:                     EBCAC2141B6411ECAAB1D328C4F9AE02.roa (raw, json)
Hash identifier:          SiI1T32bIbX6JhzgdXRQMbVQf5PpTATEA+JNo5FcVHU=
Subject key identifier:   41:78:49:DD:F8:88:84:35:2F:BA:4F:D5:2E:24:24:5C:65:F2:66:71
Certificate issuer:       /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial:       3360
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EBCAC2141B6411ECAAB1D328C4F9AE02.roa
Signing time:             Tue 12 Sep 2023 15:31:09 +0000
ROA not before:           Tue 12 Sep 2023 15:31:09 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     142502
IP address blocks:        2405:8a00:ffff::/48 maxlen: 48
                          2409:e:e1::/48 maxlen: 48
                          2409:e:e2::/48 maxlen: 48
                          2409:e:e3::/48 maxlen: 48
                          2409:e:e5::/48 maxlen: 48
                          2409:e:e7::/48 maxlen: 48
                          2409:e:e9::/48 maxlen: 48
                          2409:e:eb::/48 maxlen: 48
                          2409:e:ed::/48 maxlen: 48
                          2409:e:ef::/48 maxlen: 48
                          2409:f:f2::/48 maxlen: 48
                          2409:f:f4::/48 maxlen: 48
                          240a:eabc:abce::/48 maxlen: 48
                          240a:eabc:abcf::/48 maxlen: 48
                          240a:eabc:dabc::/48 maxlen: 48
                          240a:eabc:dabd::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13152 (0x3360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
        Validity
            Not Before: Sep 12 15:31:09 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6500843c-8c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ea:53:5e:81:5f:f3:d9:c2:fa:48:d5:f9:c9:
                    90:86:4e:67:45:a2:47:f1:24:37:dc:da:69:df:80:
                    21:ed:f1:ee:00:da:ea:0c:b6:88:24:fb:ba:91:4d:
                    8e:88:ca:06:17:89:9f:a2:9b:b4:54:a0:fc:5e:aa:
                    b6:f5:d4:72:4d:93:c1:2c:51:11:06:a4:98:0b:67:
                    67:c2:41:e5:e5:a1:34:2b:95:6c:76:e3:99:a9:38:
                    bd:88:9f:60:af:29:4a:39:8d:1c:78:e8:b8:d4:23:
                    29:55:84:d5:dc:35:bb:e2:a8:91:90:a7:04:6b:ea:
                    c4:3d:90:89:b9:13:86:cf:97:8a:f3:8e:45:34:a6:
                    39:90:f3:d7:eb:df:1b:cc:82:19:79:34:9e:5f:d3:
                    12:6c:19:6e:a8:34:1b:19:93:ab:2b:40:8d:65:61:
                    cc:f1:dd:54:42:36:8b:4c:07:e0:ad:4f:8c:be:32:
                    6d:66:c2:15:ba:fa:e6:15:cf:80:b4:bc:6b:28:0c:
                    96:27:10:76:04:b1:6a:0d:7a:bd:73:2f:06:5f:6b:
                    97:06:dc:44:7a:c5:6d:0a:06:31:95:40:d1:8f:39:
                    4e:3d:5c:ff:aa:17:87:69:b2:95:04:f9:9e:66:4c:
                    27:7c:ca:68:fe:05:6e:2c:50:f0:32:2c:2d:d0:12:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:78:49:DD:F8:88:84:35:2F:BA:4F:D5:2E:24:24:5C:65:F2:66:71
            X509v3 Authority Key Identifier:
                keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EBCAC2141B6411ECAAB1D328C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8a00:ffff::/48
                  2409:e:e1::-2409:e:e3:ffff:ffff:ffff:ffff:ffff
                  2409:e:e5::/48
                  2409:e:e7::/48
                  2409:e:e9::/48
                  2409:e:eb::/48
                  2409:e:ed::/48
                  2409:e:ef::/48
                  2409:f:f2::/48
                  2409:f:f4::/48
                  240a:eabc:abce::/47
                  240a:eabc:dabc::/47

    Signature Algorithm: sha256WithRSAEncryption
         f0:bc:90:26:5c:ad:76:bb:c3:e5:54:bf:09:d5:9f:fe:7e:95:
         2d:7e:23:27:ed:6b:de:77:1a:a5:fe:2c:ad:47:35:d3:94:e7:
         1d:b2:b9:66:26:c8:6b:61:82:05:53:23:93:cd:a7:01:78:f0:
         8e:2d:f6:0f:c5:c1:e3:80:a4:1c:d3:4e:ba:79:b8:19:ed:0b:
         af:80:52:c9:8f:ae:c4:0c:2a:27:a9:c0:69:63:aa:a4:fc:74:
         57:c8:0f:5f:0b:83:80:c9:31:62:4b:68:06:7e:bb:d5:ea:1e:
         7a:c0:29:a8:47:a8:24:08:bb:be:3e:be:29:fb:05:be:a0:d4:
         b2:a3:3f:f1:0f:cc:e7:d6:66:09:0e:94:86:95:a8:d4:7d:07:
         44:0b:57:f0:c3:f6:0e:86:81:b4:66:99:8f:ae:55:c1:07:3c:
         24:9c:2a:94:b1:44:62:03:22:8d:a8:89:70:06:56:9d:8e:4c:
         31:e4:01:8a:1a:b9:dc:4d:44:c7:96:88:2c:03:7b:0c:4f:ee:
         e6:3b:3a:85:5b:cb:3a:76:d2:d6:a5:99:a1:8f:8e:85:3a:1c:
         ef:e4:a9:7b:16:92:68:15:9e:5a:17:14:66:a7:aa:dd:41:34:
         94:46:d6:76:a1:85:96:85:44:ff:1c:34:af:ae:4e:50:d5:66:
         a7:c4:e0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----