Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/819F6A3A302A11EDA52C3963C4F9AE02.roa
File:                     819F6A3A302A11EDA52C3963C4F9AE02.roa (raw, json)
Hash identifier:          1xsoF/g4mwqZ9hly404hQejmuJElo4QmzxpFVWQiPow=
Subject key identifier:   65:CE:49:64:0B:BE:61:35:73:50:E0:CD:BF:E1:D6:E5:0A:8C:7D:C2
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       3213
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/819F6A3A302A11EDA52C3963C4F9AE02.roa
Signing time:             Fri 17 Mar 2023 06:21:07 +0000
ROA not before:           Fri 17 Mar 2023 06:21:07 +0000
ROA not after:            Wed 29 May 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        122.8.16.0/22 maxlen: 22
                          122.8.20.0/22 maxlen: 22
                          122.8.32.0/22 maxlen: 22
                          122.8.56.0/22 maxlen: 22
                          122.8.116.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12819 (0x3213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Mar 17 06:21:07 2023 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=641406d2-89d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d9:0b:d1:41:e1:68:c3:78:6e:f8:b2:76:29:
                    bc:d4:b7:ac:69:49:b3:60:60:be:30:b8:5f:0a:d9:
                    e0:c5:1b:df:44:6f:1a:dc:c0:2d:1f:7a:f0:16:21:
                    5d:e9:62:b4:55:0c:43:a6:e6:46:25:57:a3:ca:7d:
                    5e:dd:5a:63:87:43:be:db:4f:0b:01:9f:ec:ae:9d:
                    24:be:b2:ec:2c:9a:ea:ac:b6:1a:aa:14:c6:df:38:
                    66:64:72:b5:d0:4b:1f:b3:de:a5:45:f9:d1:c7:c8:
                    49:dc:91:b0:9a:a5:23:bc:6a:d8:2f:ce:de:aa:72:
                    b3:ea:38:76:73:78:44:f2:67:4e:9e:7f:4b:d6:59:
                    11:6a:47:3f:bc:ab:84:45:e6:79:e0:d9:cb:30:fa:
                    b6:c7:b8:d1:ad:dd:62:ff:b6:7f:f4:a5:e1:8d:3d:
                    2b:4d:1c:55:84:d8:56:74:ce:44:f9:d7:a3:fc:8e:
                    3a:a2:ff:85:9c:4d:8e:c1:a1:c5:35:08:67:a9:c2:
                    e8:e3:9b:3a:d0:80:69:1d:f8:43:78:66:97:1d:a7:
                    89:e6:49:65:f9:56:b7:0c:32:83:8d:4e:1e:31:44:
                    77:e7:a8:30:f4:be:39:09:62:e8:36:45:61:0d:50:
                    6c:cc:68:6f:6b:ff:d9:8c:08:03:8b:3b:9e:db:35:
                    b3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CE:49:64:0B:BE:61:35:73:50:E0:CD:BF:E1:D6:E5:0A:8C:7D:C2
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/819F6A3A302A11EDA52C3963C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.8.16.0/21
                  122.8.32.0/22
                  122.8.56.0/22
                  122.8.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:d4:d5:6b:41:28:90:ad:17:bd:e1:6f:e1:6a:5e:a7:30:a1:
         7d:4f:84:69:03:31:ce:11:8c:bf:3a:93:96:7b:a8:da:9f:db:
         db:10:0a:db:07:eb:1d:61:fa:89:ef:35:5c:37:e5:5e:1d:38:
         47:16:ea:ec:16:29:93:14:82:0a:37:05:74:43:9f:c9:c6:03:
         4e:99:5d:d1:d2:40:af:37:8e:a6:fa:77:f5:dd:7b:1b:73:64:
         16:c4:b5:03:59:59:78:3d:49:be:b6:10:94:7b:f7:14:ae:73:
         20:ac:03:ec:ef:ef:f6:48:9b:73:38:c0:e5:15:7d:48:fb:0a:
         e7:16:96:ab:7d:86:85:dd:ad:7f:cb:44:64:d9:6c:d7:20:d8:
         61:92:5c:db:2d:d7:94:7b:e8:b8:cc:59:6a:fb:c7:94:7f:8d:
         f6:ad:50:d6:d3:ed:f5:73:de:94:b1:f0:07:31:9b:e1:94:e7:
         30:f5:81:13:ee:db:83:e3:43:05:2f:1a:8c:54:08:73:d1:9c:
         9d:fa:7d:c8:6a:c9:36:f4:70:8b:97:f4:59:bc:2a:c0:09:f6:
         3a:7b:64:d6:60:3d:99:99:af:28:8b:86:6a:b0:27:3b:fc:92:
         aa:c9:0c:94:81:0c:7e:48:96:68:01:2e:93:81:db:04:61:b4:
         33:8e:df:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----