Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/8B44055EED5011ECB1C96925C4F9AE02.roa
File:                     8B44055EED5011ECB1C96925C4F9AE02.roa (raw, json)
Hash identifier:          w0Hu3TEVtlh4Xh/2otenU4qcQmyI4Iu/ktSJceRbDeI=
Subject key identifier:   5B:EB:2E:4C:0A:A4:52:E7:51:51:2B:3B:D5:3A:05:D3:8E:E2:F3:0D
Certificate issuer:       /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial:       04
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/8B44055EED5011ECB1C96925C4F9AE02.roa
Signing time:             Thu 16 Jun 2022 09:11:46 +0000
ROA not before:           Thu 16 Jun 2022 09:11:46 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     208171
IP address blocks:        103.189.190.0/24 maxlen: 24
                          103.189.191.0/24 maxlen: 24
                          2001:df0:d840::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
        Validity
            Not Before: Jun 16 09:11:46 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=62aaf3d1-f119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3a:63:a1:2e:7c:14:a9:6e:ef:cd:7d:c0:80:
                    71:53:df:2e:a5:40:99:10:03:d4:eb:d0:5f:df:78:
                    bd:72:f5:5e:51:16:dc:2c:3b:41:7a:9b:4a:c4:fc:
                    5b:64:06:dc:c8:d5:10:e1:8c:43:dd:33:9d:cb:b6:
                    ce:00:9b:e4:63:e9:be:f5:22:2e:20:b2:25:68:ef:
                    57:5e:fd:f2:6a:b8:7b:a8:58:13:24:ff:34:c5:4e:
                    b7:8d:6c:d0:46:aa:5d:02:9b:f1:b4:f1:c6:4d:93:
                    71:bc:45:74:bb:d4:55:8d:48:c6:0a:6f:d8:16:1e:
                    e0:c3:24:9f:27:61:fc:41:0c:8b:7d:12:dd:32:06:
                    9a:ba:18:f5:3d:6e:0c:d2:c2:29:36:51:31:5e:56:
                    64:21:42:7b:6e:cb:ab:0b:aa:41:19:18:b0:44:29:
                    64:b1:0a:bb:06:58:c2:53:43:56:41:22:f2:56:01:
                    31:0f:9c:3b:3c:34:3f:7f:dc:1c:5c:43:30:9d:4f:
                    8a:df:2c:90:0d:ca:6e:3d:2b:2d:92:79:1c:3c:2d:
                    06:14:7a:fd:af:9d:e8:da:c9:51:bd:36:a3:9c:88:
                    7e:94:c7:13:8a:90:70:2a:cf:58:7a:20:d7:50:18:
                    4b:6e:db:9f:8b:7a:1a:63:e7:32:9c:94:8e:8f:1c:
                    0e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EB:2E:4C:0A:A4:52:E7:51:51:2B:3B:D5:3A:05:D3:8E:E2:F3:0D
            X509v3 Authority Key Identifier:
                keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/8B44055EED5011ECB1C96925C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.190.0/23
                IPv6:
                  2001:df0:d840::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:7f:34:1d:3b:4a:67:5a:db:c0:d2:cd:32:fb:26:2c:01:94:
         55:14:72:ee:64:63:da:c9:ca:e5:44:d0:69:88:56:62:94:3c:
         d2:65:23:81:94:29:d6:67:ba:b2:7e:d0:4a:b3:d8:d1:68:0d:
         fa:48:62:90:4f:69:24:84:d8:63:14:ba:49:94:54:50:87:4e:
         48:4b:63:d7:c9:0d:03:ac:60:23:ea:c8:64:31:e7:e8:e5:5d:
         1d:bc:9b:8d:49:07:90:a1:a2:27:2c:03:97:df:e3:72:18:b5:
         57:23:5b:03:98:86:98:31:ce:32:d2:81:b6:5a:96:90:9d:ec:
         05:74:9f:a7:95:72:5a:ba:bc:59:83:e8:07:60:82:de:19:9d:
         89:22:f1:e6:94:7d:7d:67:96:dc:df:ee:ff:56:6e:8a:9b:d9:
         52:8f:89:fa:5e:1b:86:ac:81:da:7a:99:45:5e:7c:2c:aa:ac:
         91:ea:e1:9b:9e:0f:4f:94:d0:50:af:83:a9:0a:97:1f:03:99:
         ed:b4:d2:af:c2:04:b1:8d:b3:00:1d:0f:73:c2:83:c5:56:b9:
         ac:b7:a3:1f:05:bf:32:3b:fc:98:e0:96:cd:1b:0f:87:58:38:
         51:ef:a2:c3:c2:a2:c6:22:32:49:a7:17:22:fc:0d:fb:5d:5e:
         41:9b:85:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----