Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/AD571824DD5E11EA83683039C4F9AE02.roa
File:                     AD571824DD5E11EA83683039C4F9AE02.roa (raw, json)
Hash identifier:          BV7EJjBH6K/9DJxCWo+fg1DdIw5g9jF3IfWorpvQa7c=
Subject key identifier:   EC:07:83:2D:AD:E0:87:68:E7:E3:41:1C:BD:8B:BE:54:04:96:2A:7B
Certificate issuer:       /CN=A915664E/serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF
Certificate serial:       0628
Authority key identifier: 39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/AD571824DD5E11EA83683039C4F9AE02.roa
Signing time:             Fri 01 Jul 2022 10:29:12 +0000
ROA not before:           Fri 01 Jul 2022 10:29:12 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     132040
IP address blocks:        2001:df3:f980::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1576 (0x628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915664E/serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF
        Validity
            Not Before: Jul  1 10:29:12 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62becc78-2064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:19:8d:96:eb:b9:bd:b0:4d:47:2a:dd:13:aa:
                    bf:6e:4a:8a:00:b9:bf:39:d2:05:37:8b:c3:49:61:
                    84:c0:44:60:d5:7f:60:b0:d2:d3:68:db:87:b3:4e:
                    1a:41:65:fc:61:b0:35:0b:69:71:b2:6a:9f:ee:0a:
                    ad:7b:3f:2b:0d:3b:1e:f9:12:aa:f0:f7:92:9a:b5:
                    c4:45:d7:a5:68:29:ad:a7:9e:48:5c:01:d0:1e:93:
                    e9:47:d6:1a:6e:a2:2d:4e:0e:fd:f6:51:df:ab:fa:
                    7e:b5:ff:b7:73:76:c6:64:34:cf:b6:1a:0e:db:35:
                    0c:33:e4:c3:25:d5:4a:14:27:bc:40:08:11:05:a1:
                    a2:cd:f6:50:81:82:6c:10:d3:7e:ed:5f:c5:32:9d:
                    62:bb:87:ed:09:8c:1f:b1:b7:24:e6:7c:30:48:7a:
                    42:db:03:cd:93:cd:38:79:ef:a6:a0:f3:9c:f9:2b:
                    5d:a0:b4:ed:19:42:d9:18:6b:e6:fe:bc:82:18:d1:
                    d1:e0:07:cb:42:7f:ae:42:e9:03:f3:64:c0:c6:35:
                    58:01:19:86:5e:0e:53:7c:67:c4:ec:97:47:66:45:
                    26:e8:2c:11:ee:cf:a3:97:c9:4e:92:c5:5d:ad:16:
                    d3:ff:f8:7e:ec:30:99:21:ef:8d:36:ab:b6:7b:ba:
                    6c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:07:83:2D:AD:E0:87:68:E7:E3:41:1C:BD:8B:BE:54:04:96:2A:7B
            X509v3 Authority Key Identifier:
                keyid:39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/AD571824DD5E11EA83683039C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:f980::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:22:7f:e8:b4:4d:2a:27:0f:95:da:de:89:1a:0c:63:65:06:
         71:d0:0b:dc:4a:3e:44:72:3b:ab:3d:9b:58:0f:d2:08:e5:30:
         f6:1b:96:b9:04:a5:20:d3:cc:22:6b:d3:da:80:f6:1e:87:ea:
         1a:9d:e3:95:d8:64:8b:23:2d:45:f3:0d:96:a9:60:b8:66:4d:
         16:72:c6:23:b2:b8:2b:d6:b9:98:c5:1c:ae:f8:0a:df:ea:a7:
         53:a2:c5:7a:92:3d:94:c4:f4:21:51:0a:de:dd:78:3c:02:28:
         fe:f0:c4:38:40:37:fa:c7:e5:2d:95:a2:56:39:b0:2e:15:76:
         a9:67:c5:4e:30:71:20:d6:1b:a7:df:32:dc:e1:7b:5b:a0:ef:
         f6:01:82:f2:fc:a7:ca:b6:01:79:d0:ab:c3:c8:81:67:5a:50:
         a6:b3:4c:f4:0d:ca:ff:2d:fc:6d:aa:d2:7a:4d:91:e8:a0:cc:
         1d:d4:c5:b4:2a:a8:18:aa:90:dd:d7:e6:6c:0b:dc:b1:2e:4b:
         4b:b5:da:f4:ce:34:18:a7:42:ab:a6:72:a8:d6:8a:e1:17:c4:
         31:07:6c:72:ed:1c:b5:fd:65:60:05:23:ac:fd:f7:a5:d2:bb:
         00:9b:4c:51:74:d9:19:68:25:59:23:9d:4b:5f:4c:e4:9d:7e:
         ef:97:3d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----