Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91685DF/AB7357AECD6D11E9A6C26E46C4F9AE02/C2618C1C048F11EEB7391C0AC4F9AE02.roa
File:                     C2618C1C048F11EEB7391C0AC4F9AE02.roa (raw, json)
Hash identifier:          K0BIwIWg1DUfnNyh6gUQgEz9Yx7xZneX3xocwXOAxKw=
Subject key identifier:   CC:FA:EB:8A:C4:6E:64:DC:C5:8A:BC:7A:0A:9E:EF:26:C5:20:86:F8
Certificate issuer:       /CN=A91685DF/serialNumber=BF237EE623BD2853AC04554EB812280434A85A8F
Certificate serial:       0BF9
Authority key identifier: BF:23:7E:E6:23:BD:28:53:AC:04:55:4E:B8:12:28:04:34:A8:5A:8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vyN-5iO9KFOsBFVOuBIoBDSoWo8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91685DF/AB7357AECD6D11E9A6C26E46C4F9AE02/C2618C1C048F11EEB7391C0AC4F9AE02.roa
Signing time:             Tue 06 Jun 2023 17:29:59 +0000
ROA not before:           Tue 06 Jun 2023 17:29:59 +0000
ROA not after:            Wed 29 May 2024 00:00:00 +0000
asID:                     149768
IP address blocks:        103.134.216.0/24 maxlen: 24
                          103.134.217.0/24 maxlen: 24
                          103.134.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3065 (0xbf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91685DF/serialNumber=BF237EE623BD2853AC04554EB812280434A85A8F
        Validity
            Not Before: Jun  6 17:29:59 2023 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=647f6d16-65ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:01:89:10:8d:e8:94:7f:90:ed:60:ea:56:8a:
                    e5:ed:e7:79:4b:88:2d:e1:4f:0d:e2:00:83:ca:4d:
                    2b:7f:96:1d:56:1d:b8:8f:ff:de:29:49:f2:74:3c:
                    8e:fb:71:0a:3e:ab:cc:be:ae:1d:5e:30:47:eb:6c:
                    52:72:f9:a3:9c:c8:15:80:8d:c6:d3:4b:03:64:73:
                    2a:6f:44:fc:83:fc:9a:df:97:de:83:15:eb:ae:96:
                    f9:a9:40:43:9c:cf:d4:e3:d1:d0:9c:04:e9:13:4f:
                    85:c4:92:48:e3:67:1b:f0:af:df:bb:49:88:a6:ed:
                    48:89:df:36:db:23:10:cc:72:0e:f5:9d:bc:81:02:
                    59:ea:74:48:07:fc:d1:f4:02:74:6d:5f:87:91:b8:
                    08:32:5b:4e:71:a8:97:7d:e1:d5:b7:91:8e:8b:ce:
                    b0:1d:f7:fa:2c:31:f0:7c:b3:c4:01:83:34:cb:b5:
                    e7:c8:0b:10:e6:12:0b:b1:77:8b:c4:b5:2f:3e:4e:
                    71:af:33:6b:75:cb:1e:8e:23:d2:7a:1e:73:70:f9:
                    14:90:21:6c:2c:f6:8d:97:ed:05:7f:e3:67:c3:53:
                    8a:c1:bd:28:50:c4:f5:76:3e:ab:93:2b:a4:53:84:
                    eb:51:af:3d:5f:2a:6a:fb:06:16:6a:22:1a:8b:33:
                    35:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FA:EB:8A:C4:6E:64:DC:C5:8A:BC:7A:0A:9E:EF:26:C5:20:86:F8
            X509v3 Authority Key Identifier:
                keyid:BF:23:7E:E6:23:BD:28:53:AC:04:55:4E:B8:12:28:04:34:A8:5A:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91685DF/AB7357AECD6D11E9A6C26E46C4F9AE02/vyN-5iO9KFOsBFVOuBIoBDSoWo8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vyN-5iO9KFOsBFVOuBIoBDSoWo8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685DF/AB7357AECD6D11E9A6C26E46C4F9AE02/C2618C1C048F11EEB7391C0AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.216.0-103.134.218.255

    Signature Algorithm: sha256WithRSAEncryption
         ba:2a:d7:60:ef:93:35:51:ce:af:86:71:3c:42:53:a8:bd:4a:
         b4:95:4d:89:27:3d:82:fc:4b:56:1c:20:a5:3a:b9:7f:19:41:
         94:0b:93:20:ca:f7:ca:3b:3d:8b:7c:95:a1:58:56:0c:3a:56:
         3e:c9:9a:1f:bb:b0:a8:62:2c:1e:95:af:8d:ad:bf:3d:1c:60:
         e5:21:e7:d6:38:ce:0d:cd:d9:1b:ea:da:a0:d9:d1:61:b2:6b:
         9a:b3:f8:0b:66:51:ca:b9:66:31:65:d0:3d:2d:ad:b9:2b:8f:
         d5:ab:82:73:36:ad:59:82:07:e3:71:d0:8e:b2:0a:f1:a3:a7:
         95:0c:e5:c9:17:02:c8:e0:b5:60:c7:8d:9f:42:0d:b5:ca:41:
         24:c9:a3:ac:dc:93:3c:be:91:b3:a6:7a:2b:88:5b:25:d2:48:
         9e:92:34:7c:b0:d6:51:5e:65:35:71:54:71:a2:28:0e:52:85:
         b9:08:b9:e8:54:fb:1f:e5:f4:38:b2:69:d7:f4:cf:43:b6:aa:
         07:a1:8c:fa:0f:58:a8:98:9a:43:70:27:de:4e:55:26:8f:46:
         f6:a4:b1:04:56:a3:d7:55:e7:1b:6b:3b:c5:5d:7b:87:c3:24:
         13:42:10:81:d7:21:86:90:79:ed:3c:cc:f0:b3:08:38:13:8a:
         d9:5e:01:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----