Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/953F646AF0AE11ED90D28A58C4F9AE02.roa
File:                     953F646AF0AE11ED90D28A58C4F9AE02.roa (raw, json)
Hash identifier:          7ocKZBO32hfhLYzcTcp0PRNcqGj6vzQtO9V8D06rh4c=
Subject key identifier:   EB:09:ED:32:5F:46:26:6C:E1:E5:B4:C2:1C:10:48:92:90:6A:E8:04
Certificate issuer:       /CN=A916E323/serialNumber=C161E985961FD957E667EF2E8CAA7737FA9285D1
Certificate serial:       06
Authority key identifier: C1:61:E9:85:96:1F:D9:57:E6:67:EF:2E:8C:AA:77:37:FA:92:85:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/953F646AF0AE11ED90D28A58C4F9AE02.roa
Signing time:             Fri 12 May 2023 10:20:14 +0000
ROA not before:           Fri 12 May 2023 10:20:14 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     136246
IP address blocks:        103.193.73.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E323/serialNumber=C161E985961FD957E667EF2E8CAA7737FA9285D1
        Validity
            Not Before: May 12 10:20:14 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=645e12de-445f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6f:b6:e7:5b:6f:4b:12:ea:74:5d:89:ad:36:
                    3f:7a:3a:1a:a2:9f:0d:dc:f7:21:53:4d:ae:f7:7f:
                    a3:ec:3c:a0:07:b3:82:7f:46:ed:72:6c:2e:4c:71:
                    fa:17:ec:76:e9:24:70:c7:65:8d:a9:5d:25:cb:7b:
                    0b:d5:f5:f0:d5:d9:67:50:d4:fb:2d:f9:8a:f7:5d:
                    35:ff:d1:8c:7c:d0:9e:ea:08:76:35:53:f9:28:6b:
                    91:b9:6a:70:a8:a4:92:0a:b3:37:6c:08:1e:52:c6:
                    47:cc:20:0c:55:45:9b:2c:43:7b:58:17:5e:43:b8:
                    b4:7c:24:83:12:5a:b8:1d:4c:5b:f9:e7:4c:5d:0c:
                    bc:9c:f6:7e:02:db:50:df:a1:e2:0e:6c:d2:e6:c1:
                    2a:b3:cc:bc:32:21:ed:e2:b0:c4:ad:4f:ec:71:7e:
                    f0:47:5d:b2:09:2d:3c:62:84:65:32:eb:b0:a2:4a:
                    6b:27:6a:57:75:4e:c4:87:a7:4c:c2:cd:fe:b2:d7:
                    14:90:a7:c2:ea:8b:a9:51:5f:60:b8:42:2a:c7:cf:
                    b9:a2:47:cc:36:73:c6:6f:8f:d2:0c:f0:35:28:66:
                    69:04:77:a7:5e:32:08:4b:d3:5e:c6:83:af:68:99:
                    7b:81:fa:cf:e5:d3:60:9c:09:aa:79:19:b2:d0:19:
                    33:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:09:ED:32:5F:46:26:6C:E1:E5:B4:C2:1C:10:48:92:90:6A:E8:04
            X509v3 Authority Key Identifier:
                keyid:C1:61:E9:85:96:1F:D9:57:E6:67:EF:2E:8C:AA:77:37:FA:92:85:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/953F646AF0AE11ED90D28A58C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:00:2f:f0:63:92:75:ff:38:4d:83:df:1a:d6:ea:10:07:7a:
         d2:36:e1:66:f2:2e:10:ea:20:f6:7d:6b:65:f1:be:61:80:31:
         4a:54:47:3b:5f:fc:ae:6f:9a:b9:78:40:3e:09:cb:ce:3c:bf:
         36:c8:2e:1f:a3:7c:da:8c:18:d8:ea:79:54:fa:f7:ca:aa:f0:
         5c:fb:c2:78:5e:64:b3:fc:49:44:be:2b:3a:bb:f1:ab:07:32:
         c5:4a:7b:39:ee:14:1a:11:ce:45:29:c0:a0:ec:bb:c0:5a:17:
         4d:cc:56:37:cb:8d:05:6a:85:b6:84:24:ae:d9:e7:9a:af:b4:
         74:61:54:93:cb:f4:b6:87:68:58:e5:67:1c:2c:29:88:1e:55:
         dd:b4:50:2b:4d:ad:3f:e7:6d:6b:b0:e1:34:ff:71:b7:a6:49:
         26:86:07:c8:cd:83:21:12:83:0f:05:0b:b5:2d:1c:30:33:4c:
         9a:fd:5b:d4:72:ad:e7:33:79:e6:b3:88:d6:e8:96:99:c8:09:
         96:c4:8d:0b:43:15:d8:c3:48:8d:ea:d1:79:52:c1:a6:0e:09:
         73:c8:f1:68:eb:07:e9:77:f1:cb:43:dc:64:be:ed:c1:b2:fa:
         2a:12:a9:3c:fa:76:b5:f1:ed:52:84:bf:4c:3d:a1:47:84:bc:
         38:39:3e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----