Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/8AD4577EECDA11EDAEC2CA27C4F9AE02.roa
File:                     8AD4577EECDA11EDAEC2CA27C4F9AE02.roa (raw, json)
Hash identifier:          9yV+sDkWpmpm1bbFBMamMu2xUo4WFs6YVWjbTePMYWI=
Subject key identifier:   4E:3B:E8:74:41:63:A3:E0:34:8C:FF:D3:DA:99:C8:16:ED:4A:09:6F
Certificate issuer:       /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial:       01CD
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/8AD4577EECDA11EDAEC2CA27C4F9AE02.roa
Signing time:             Sun 07 May 2023 13:24:49 +0000
ROA not before:           Sun 07 May 2023 13:24:49 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     64021
IP address blocks:        150.129.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
        Validity
            Not Before: May  7 13:24:49 2023 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=6457a6a1-3c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0b:a9:3f:12:46:f8:a3:5d:7e:fa:72:4d:f5:
                    30:85:31:c4:7a:9a:39:a7:56:8f:36:fb:92:8c:fe:
                    df:1a:c7:53:b9:31:22:38:13:4d:d3:6f:7a:80:34:
                    27:80:2b:86:d8:42:e4:13:9d:58:2b:9c:12:11:c0:
                    ba:16:33:b9:d8:18:b7:02:0b:c7:0d:a2:3f:a8:f1:
                    38:99:85:7f:b3:05:0a:f2:f8:02:99:d8:79:86:96:
                    92:50:ce:eb:85:64:84:e9:79:54:33:07:0c:33:19:
                    18:fe:48:e3:d9:a1:b6:0f:fd:c1:1f:f2:84:e3:61:
                    8b:9b:f8:e3:d6:63:90:9c:7a:3f:9f:5d:1f:81:8f:
                    de:9d:8a:93:ab:31:46:05:27:eb:e3:0f:27:99:b7:
                    16:85:a7:2c:ef:59:b3:30:c1:4b:02:4c:f6:10:0c:
                    e6:bc:82:f4:4a:e7:ed:bc:0d:74:a0:55:15:63:71:
                    cb:24:06:23:db:c3:fb:b6:6c:41:8a:81:8f:06:0c:
                    28:7f:38:ff:83:26:0e:3e:53:47:9d:9d:6e:ab:4b:
                    13:87:06:b1:b9:19:94:77:cb:6f:03:ba:bd:32:c2:
                    1c:cb:37:51:80:21:08:8d:7b:db:3b:2f:ba:46:de:
                    09:7b:65:c5:69:14:20:52:13:b1:c6:63:67:24:ad:
                    8e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3B:E8:74:41:63:A3:E0:34:8C:FF:D3:DA:99:C8:16:ED:4A:09:6F
            X509v3 Authority Key Identifier:
                keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/8AD4577EECDA11EDAEC2CA27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.129.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:f3:12:11:09:45:99:10:42:e5:3f:7c:48:e0:99:f0:38:b6:
         ef:33:cd:1d:3f:49:e1:68:c8:39:3d:4c:89:b4:4b:12:05:5a:
         23:7d:67:66:47:af:8d:cd:75:ae:88:53:cc:49:62:25:df:00:
         34:ef:49:15:8f:65:ed:13:3d:5f:ed:7a:bb:09:ce:65:5a:00:
         89:ba:8a:43:80:fd:3f:7c:3b:82:aa:93:92:bc:21:ec:10:bd:
         8c:ec:63:fb:e0:c7:cd:ba:e9:0f:c6:8d:f4:67:dc:71:48:a0:
         e2:8e:28:43:44:66:4f:aa:6a:97:14:08:ba:c0:62:da:97:3a:
         43:22:ef:44:bf:b0:30:be:18:eb:a8:4e:76:7c:e0:46:c2:3a:
         5e:b4:43:2e:ef:df:e3:60:2e:d9:af:7a:f5:a4:66:95:ee:17:
         5b:e2:0f:f1:98:ed:2d:b7:72:72:00:af:3c:15:02:93:df:b3:
         70:06:9b:09:17:2a:a7:60:63:12:1e:2a:b8:83:6a:bc:ba:48:
         6d:17:9f:a0:56:00:d3:dd:5d:70:6a:da:65:20:8c:47:6f:b3:
         b6:1e:26:07:23:3d:6e:27:88:b0:dc:30:7c:30:57:f0:14:e7:
         ea:e9:eb:06:e7:f8:44:98:2f:b6:e4:df:22:e7:e0:f6:28:2f:
         3f:6a:cf:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----