Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/70550A28F47911EDAB508B20C4F9AE02.roa
File:                     70550A28F47911EDAB508B20C4F9AE02.roa (raw, json)
Hash identifier:          M3V6j5b6CLZA/mVLFPSNDetxvBMd1XvWZcmbYYhbbyM=
Subject key identifier:   3C:33:CF:4E:8C:71:63:A0:60:E4:5B:1C:BA:36:D1:03:C3:94:4D:EB
Certificate issuer:       /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial:       04F4
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/70550A28F47911EDAB508B20C4F9AE02.roa
Signing time:             Wed 17 May 2023 06:09:54 +0000
ROA not before:           Wed 17 May 2023 06:09:54 +0000
ROA not after:            Mon 28 Aug 2023 00:00:00 +0000
asID:                     45820
IP address blocks:        14.194.0.0/18 maxlen: 24
                          14.194.64.0/18 maxlen: 24
                          14.194.128.0/18 maxlen: 24
                          49.200.0.0/14 maxlen: 14
                          49.249.0.0/17 maxlen: 24
                          49.249.128.0/18 maxlen: 24
                          182.156.0.0/18 maxlen: 22
                          182.156.0.0/22 maxlen: 24
                          182.156.4.0/23 maxlen: 24
                          182.156.8.0/21 maxlen: 24
                          182.156.16.0/22 maxlen: 24
                          182.156.20.0/24 maxlen: 24
                          182.156.21.0/24 maxlen: 24
                          182.156.22.0/23 maxlen: 24
                          182.156.24.0/21 maxlen: 24
                          182.156.32.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1268 (0x4f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
        Validity
            Not Before: May 17 06:09:54 2023 GMT
            Not After : Aug 28 00:00:00 2023 GMT
        Subject: CN=64646fb1-2f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:30:29:d4:90:f7:b2:ed:f1:cd:65:1e:4f:98:
                    60:e4:35:1d:ad:0a:32:62:73:3c:e2:0c:e1:27:f1:
                    06:8b:b5:2c:9b:a3:9b:86:d4:58:cd:be:3c:19:22:
                    d4:3b:57:ea:55:fe:de:9a:6b:53:de:b2:b3:c3:57:
                    bf:26:6d:95:40:b9:04:ef:14:76:47:ee:74:37:f7:
                    8c:1e:3f:a6:22:22:c2:a6:04:99:f2:75:47:a7:0f:
                    95:37:34:26:35:32:a2:ae:08:45:85:84:32:d2:60:
                    6d:bd:36:6e:ec:f9:20:a1:b4:10:41:48:58:0f:a0:
                    58:fd:b9:76:09:95:1f:bf:24:16:d5:9d:06:7a:7d:
                    e0:60:c2:fa:7e:25:5c:e4:34:86:ff:fa:3f:8a:da:
                    ae:72:c8:67:bd:c2:9f:e6:88:55:f0:bf:7b:5c:7c:
                    e8:62:cc:5a:dd:46:57:4f:e7:63:44:7d:97:f9:ae:
                    68:fc:d6:a1:6c:f5:a0:2a:e3:b2:cc:37:7a:f3:af:
                    85:45:e6:9c:80:05:ec:0c:92:a2:6f:71:45:ed:d5:
                    6a:08:a1:75:43:be:37:18:f7:d8:e2:a6:95:40:ec:
                    38:73:11:e8:d7:cd:80:1d:66:9a:34:ec:23:ad:08:
                    2a:b6:b2:c4:06:e6:82:6c:ba:11:68:fb:be:62:fb:
                    4b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:33:CF:4E:8C:71:63:A0:60:E4:5B:1C:BA:36:D1:03:C3:94:4D:EB
            X509v3 Authority Key Identifier:
                keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/70550A28F47911EDAB508B20C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.194.0.0-14.194.191.255
                  49.200.0.0/14
                  49.249.0.0-49.249.191.255
                  182.156.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5d:14:63:c4:38:d4:67:56:57:f3:01:7b:85:02:55:21:db:74:
         15:ca:d8:62:c8:ae:fd:cb:4b:96:fb:41:65:9e:04:06:35:4c:
         c8:08:06:ba:b9:7a:69:2b:0d:c8:40:f6:fe:42:7c:ea:2c:ca:
         85:08:c0:7c:fc:56:04:24:c5:9a:39:41:d5:1f:35:3b:98:cf:
         bc:01:a3:96:62:2f:43:ae:99:70:aa:29:3a:89:22:99:88:21:
         77:7d:a2:21:8b:83:c8:47:3e:bf:05:8f:69:dc:0c:2e:6e:56:
         4b:55:6a:be:96:0c:de:b6:d0:dd:47:c6:7c:4f:c3:5c:e9:3f:
         c5:27:f3:d9:a7:85:21:d3:f0:47:fd:b9:59:5e:0b:ba:d3:cb:
         2f:b8:72:39:10:ec:88:7e:2c:29:39:6a:28:cc:85:dc:06:92:
         c9:ed:21:1e:49:31:07:00:d2:34:b5:06:d5:4c:5c:0d:1d:2c:
         b4:28:ac:1a:7b:b7:43:d9:d0:94:b9:bc:5d:04:a4:21:15:0f:
         48:a1:a4:1b:1a:19:dc:ce:ff:95:ea:2c:a0:a3:06:cc:63:91:
         21:99:6d:10:d5:7c:2b:85:aa:84:e4:39:50:ca:3e:a6:7b:1a:
         f9:40:9c:94:51:00:12:ee:c1:4b:1d:b2:20:25:be:79:50:a7:
         94:95:45:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----