Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/F0E8281ACBA711EC903FA165C4F9AE02.roa
File:                     F0E8281ACBA711EC903FA165C4F9AE02.roa (raw, json)
Hash identifier:          1Y15gYxUJDAp0EBfrlP8K1Ya/0tfzAExqeuvme7GtCE=
Subject key identifier:   E3:CD:43:3A:05:7E:B4:5A:67:D6:68:CA:E6:4C:4A:74:3D:33:66:1E
Certificate issuer:       /CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Certificate serial:       1076
Authority key identifier: B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/F0E8281ACBA711EC903FA165C4F9AE02.roa
Signing time:             Thu 05 May 2022 06:26:45 +0000
ROA not before:           Thu 05 May 2022 06:26:45 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     141677
IP address blocks:        14.192.51.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4214 (0x1076)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
        Validity
            Not Before: May  5 06:26:45 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62736e25-2898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d7:aa:14:7f:69:4b:d9:3f:c2:d7:f0:5a:d6:
                    6d:0a:1f:52:0e:53:07:9e:34:a9:05:5f:0d:16:03:
                    19:53:f7:d6:45:75:64:2b:00:c5:28:18:7a:90:63:
                    90:20:66:11:58:62:d0:5d:42:01:0e:8c:c7:74:bf:
                    07:fd:ff:91:bd:1e:e0:55:99:c3:21:be:48:b1:1f:
                    24:8d:7e:cf:a7:86:d9:31:b0:eb:59:2f:3c:77:2c:
                    42:c7:66:e6:d7:a7:6e:de:5f:05:0e:ec:bb:b4:d6:
                    57:d3:35:93:3b:12:0e:bc:1c:49:fa:6c:45:c7:6a:
                    f2:5e:7f:0b:bc:61:ab:85:d2:e0:32:63:30:66:6b:
                    54:70:99:4a:da:e0:eb:af:6a:3f:cd:a6:03:0f:87:
                    33:39:13:df:3f:03:0a:8c:2a:ce:0a:d7:57:ed:26:
                    5d:0f:e0:17:80:fa:23:db:d1:2f:7b:f8:c6:90:c9:
                    e6:98:22:39:a8:df:1a:83:7c:32:9b:0b:54:97:ca:
                    8f:f9:15:25:06:08:e9:0f:8a:ef:b2:9e:82:06:0b:
                    5a:77:b7:b0:17:1c:37:ad:0e:17:33:8d:7f:d3:c9:
                    f5:75:91:08:7f:e0:7c:ad:f6:66:0e:d2:49:ba:54:
                    e7:3d:7b:8a:ec:c6:8d:24:09:12:41:3f:95:31:e1:
                    3d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CD:43:3A:05:7E:B4:5A:67:D6:68:CA:E6:4C:4A:74:3D:33:66:1E
            X509v3 Authority Key Identifier:
                keyid:B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/F0E8281ACBA711EC903FA165C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:ac:1b:19:70:51:a6:5f:65:52:93:f1:ee:a0:42:ae:56:96:
         83:a2:a7:60:a7:2f:1f:db:cb:0d:fa:11:68:a9:a9:87:87:97:
         3c:de:e8:ca:47:f5:28:ec:6f:4a:af:ed:9b:53:80:9f:2b:87:
         52:62:88:24:41:b7:65:bb:81:65:82:25:33:71:51:43:71:30:
         13:46:4a:3d:96:51:b0:4c:3b:9e:98:c0:c2:23:17:92:1d:c5:
         c7:13:bb:9b:a1:ae:09:f1:eb:4a:38:d0:e7:d9:76:6b:bd:36:
         a3:6b:d6:4e:9b:f9:a8:75:a4:95:f4:24:0b:7c:c8:6e:ca:8c:
         7c:40:54:65:15:00:49:a6:0a:8d:67:7a:cf:3c:d4:91:36:fc:
         1c:1a:2f:83:67:e8:41:54:e8:b7:77:1a:7b:bb:52:49:9c:29:
         be:19:c9:30:9c:38:39:74:2f:17:6e:79:f4:da:aa:8c:73:65:
         43:6d:14:4e:ab:df:72:fb:88:cc:ea:5f:8e:c1:b5:40:8e:d8:
         e1:df:32:e1:a3:ad:3c:68:25:5a:5d:f0:09:70:c0:bb:e0:27:
         34:d6:4b:c4:48:a0:49:f4:96:a7:65:a5:67:e0:59:42:bc:a9:
         2a:66:83:c7:b9:d6:c0:bd:c2:a2:7f:0e:07:0c:7a:b3:ed:e5:
         5f:46:b6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----