Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150E4D/49715B7A337E11EEA310AF83C4F9AE02/5BAD34FE803011EEBA69AE59C4F9AE02.roa
File:                     5BAD34FE803011EEBA69AE59C4F9AE02.roa (raw, json)
Hash identifier:          MT1vORgZVRCESwHV79KBx6ZfcYq/VvRpg9VFx8Kw4GM=
Subject key identifier:   2E:8C:26:80:D2:2B:65:38:C0:29:73:49:6F:A1:A6:23:11:05:3D:BF
Certificate issuer:       /CN=A9150E4D/serialNumber=C08C543BC8CA91962166AF12730CEE4BE5B2B6FD
Certificate serial:       3F
Authority key identifier: C0:8C:54:3B:C8:CA:91:96:21:66:AF:12:73:0C:EE:4B:E5:B2:B6:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wIxUO8jKkZYhZq8ScwzuS-Wytv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150E4D/49715B7A337E11EEA310AF83C4F9AE02/5BAD34FE803011EEBA69AE59C4F9AE02.roa
Signing time:             Sat 11 Nov 2023 01:19:28 +0000
ROA not before:           Sat 11 Nov 2023 01:19:28 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     24322
IP address blocks:        2401:2060:5000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D/serialNumber=C08C543BC8CA91962166AF12730CEE4BE5B2B6FD
        Validity
            Not Before: Nov 11 01:19:28 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=654ed6a0-63a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9c:27:5f:64:75:b6:eb:71:38:20:32:55:ee:
                    38:17:16:40:ef:b3:19:66:b1:a8:29:c0:f2:5f:73:
                    d3:c5:91:f1:3a:e2:61:48:39:ec:f5:d9:b5:54:57:
                    59:90:2c:b7:d3:2b:ff:94:64:e9:41:7e:95:a7:49:
                    27:3b:b2:ce:c5:6f:cf:72:f6:ab:5d:18:bb:bf:cc:
                    0d:c7:4d:45:44:cf:66:92:af:e4:90:d1:95:f2:a6:
                    8e:19:13:05:0f:3a:cb:27:5e:e2:8e:18:7f:fa:90:
                    f3:0f:28:4f:6c:47:b1:ff:8f:01:c8:e7:f1:06:3e:
                    90:03:9a:a6:f2:45:95:3a:2c:69:7b:46:79:72:92:
                    58:d5:94:77:11:0f:33:af:a6:16:1d:85:82:d9:1d:
                    02:af:38:3e:28:ac:d4:c7:f8:2f:1e:6e:54:10:31:
                    e6:bf:4f:3f:50:5d:81:9b:79:fb:f7:00:3e:55:34:
                    0f:30:fb:b8:6d:3c:3a:43:69:7d:a5:df:a6:20:e2:
                    a7:11:fb:95:40:33:fa:28:24:b7:82:e3:11:d4:06:
                    30:ef:f9:c4:8b:be:90:98:8d:71:1d:c1:20:36:1b:
                    0e:d4:b8:24:2c:cc:2f:3c:ad:6e:e1:e2:9c:74:19:
                    56:9c:cc:44:a0:b3:80:64:b4:18:59:74:4e:18:90:
                    85:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8C:26:80:D2:2B:65:38:C0:29:73:49:6F:A1:A6:23:11:05:3D:BF
            X509v3 Authority Key Identifier:
                keyid:C0:8C:54:3B:C8:CA:91:96:21:66:AF:12:73:0C:EE:4B:E5:B2:B6:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150E4D/49715B7A337E11EEA310AF83C4F9AE02/wIxUO8jKkZYhZq8ScwzuS-Wytv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wIxUO8jKkZYhZq8ScwzuS-Wytv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E4D/49715B7A337E11EEA310AF83C4F9AE02/5BAD34FE803011EEBA69AE59C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2060:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:f9:92:30:db:45:99:4f:9f:d9:9a:af:64:d8:8f:ae:33:4f:
         b8:0a:b5:73:0e:68:3f:09:95:09:db:38:c7:06:75:99:ad:b4:
         bf:5e:f9:1e:01:fc:5a:0f:b2:1f:0f:94:cb:9a:8d:63:19:d2:
         5a:14:90:6c:76:39:4b:25:f4:c2:82:41:df:f6:39:ed:f0:d2:
         33:75:8c:2d:bf:6b:36:f0:fc:96:04:c7:1d:40:66:fb:4a:c2:
         c4:c5:0c:b9:b3:d8:76:30:fb:71:92:bb:dc:b0:ee:ed:45:46:
         6b:2e:e8:45:59:ea:d4:a4:ed:01:8f:49:46:54:6e:75:da:ff:
         02:2d:f9:57:f4:aa:67:e5:c7:81:5a:bd:67:fb:22:6f:1d:2e:
         69:ba:ae:8a:3d:b4:d1:11:6f:f6:7b:98:06:a4:72:3f:c8:45:
         72:20:a5:98:eb:bf:b9:91:2f:08:9b:46:b3:60:c4:cc:bf:a1:
         6f:74:e6:cb:71:b5:be:fc:fc:d4:ee:9a:83:19:e3:1d:93:d1:
         08:40:d2:07:30:8a:bc:20:c3:7a:c1:8a:02:f7:93:ce:8b:e2:
         80:11:8e:b5:56:f8:6a:eb:c3:f0:60:4f:c8:6e:41:a1:72:42:
         85:17:21:52:e6:45:bc:a2:3d:2d:92:b6:7a:e1:30:f7:0e:2f:
         1c:25:90:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----