Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91767B0/DAFF4CFA04FC11EA80506616C4F9AE02/8E1EEE2A04FE11EAB778E81CC4F9AE02.roa
File:                     8E1EEE2A04FE11EAB778E81CC4F9AE02.roa (raw, json)
Hash identifier:          F1go961uPRCOEWBEhzBS5WE9bNVhP823U59kxw5dCck=
Subject key identifier:   04:50:28:ED:F6:55:2D:EE:15:99:57:92:7E:98:BD:2A:63:E7:48:CD
Certificate issuer:       /CN=A91767B0/serialNumber=F1DF85F9CFB35CB310C30D59CD6006369AC69011
Certificate serial:       0B23
Authority key identifier: F1:DF:85:F9:CF:B3:5C:B3:10:C3:0D:59:CD:60:06:36:9A:C6:90:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8d-F-c-zXLMQww1ZzWAGNprGkBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91767B0/DAFF4CFA04FC11EA80506616C4F9AE02/8E1EEE2A04FE11EAB778E81CC4F9AE02.roa
Signing time:             Wed 08 Nov 2023 19:27:22 +0000
ROA not before:           Wed 08 Nov 2023 19:27:22 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     10148
IP address blocks:        45.113.232.0/22 maxlen: 22
                          103.6.252.0/22 maxlen: 22
                          115.146.80.0/20 maxlen: 20
                          2407:ae00::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2851 (0xb23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91767B0/serialNumber=F1DF85F9CFB35CB310C30D59CD6006369AC69011
        Validity
            Not Before: Nov  8 19:27:22 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=654be11a-51c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8a:86:62:fe:e5:8f:ba:c3:7c:e8:79:cc:d2:
                    21:71:a9:27:de:4d:90:10:77:5f:19:4a:58:ad:16:
                    4d:87:35:76:29:38:8b:9a:6a:b0:00:3c:80:b9:b4:
                    8c:27:d2:7f:5e:89:5d:a5:6a:cd:b6:49:ed:c3:82:
                    f5:d9:c6:41:e2:fe:d5:b3:28:09:fa:02:9b:f3:79:
                    2b:49:f7:3e:96:af:c4:59:8c:12:de:51:9b:6c:0d:
                    fd:c4:b2:27:78:f8:29:fc:57:75:e2:c2:39:67:21:
                    85:50:f7:8a:ce:09:4c:a0:7d:8a:c4:70:4b:e6:14:
                    08:43:04:e8:e9:b4:05:48:03:d6:2d:de:70:3d:46:
                    1c:aa:f4:e1:af:38:b0:8f:8d:e6:b8:f3:3c:0a:f2:
                    53:ce:23:a3:72:4e:72:d5:f6:dc:d4:f0:d9:53:a5:
                    12:81:ae:ca:7d:bc:f2:78:e6:6e:40:90:f3:b0:c2:
                    29:08:55:b5:74:75:1d:44:f0:8d:2e:c8:70:da:04:
                    14:64:27:e8:db:c9:f2:e5:48:67:a1:4c:7b:6f:2c:
                    e0:d3:80:90:0d:1e:99:7d:13:cb:5c:e8:01:80:6a:
                    ca:4a:e3:be:6d:bd:84:f2:9d:16:bd:95:c3:4f:32:
                    0f:3e:dd:d6:ca:33:e9:fc:2d:fc:3b:68:38:b6:1f:
                    11:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:50:28:ED:F6:55:2D:EE:15:99:57:92:7E:98:BD:2A:63:E7:48:CD
            X509v3 Authority Key Identifier:
                keyid:F1:DF:85:F9:CF:B3:5C:B3:10:C3:0D:59:CD:60:06:36:9A:C6:90:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91767B0/DAFF4CFA04FC11EA80506616C4F9AE02/8d-F-c-zXLMQww1ZzWAGNprGkBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8d-F-c-zXLMQww1ZzWAGNprGkBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91767B0/DAFF4CFA04FC11EA80506616C4F9AE02/8E1EEE2A04FE11EAB778E81CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.232.0/22
                  103.6.252.0/22
                  115.146.80.0/20
                IPv6:
                  2407:ae00::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:b6:81:22:b7:e1:26:18:f7:a9:7d:a3:53:a6:f9:60:af:cd:
         16:4f:23:02:9e:8b:59:fc:28:ad:5e:97:b8:c7:3e:21:e3:1e:
         4f:b6:93:06:a2:b0:46:01:45:74:4a:1b:03:e7:fe:73:fe:3b:
         7e:ea:fe:be:99:eb:a2:c3:2b:34:b3:f6:eb:8a:0d:f3:0c:e1:
         a9:34:d8:1c:55:34:b9:5d:94:d6:e0:f4:94:90:c2:d5:ce:fb:
         48:d0:2b:14:d8:0b:4d:1d:4e:19:51:ff:67:f1:e5:78:fc:fb:
         d2:ee:f3:5a:02:7b:6d:73:49:c3:f2:f5:45:62:f8:bb:f4:e2:
         54:cf:2f:09:2a:a7:19:b4:b5:36:80:92:31:a6:56:57:a7:01:
         51:98:17:c8:4a:c6:5d:71:bf:52:0a:05:d9:ef:4d:9a:b6:e5:
         38:18:95:2b:6c:d9:4e:65:e3:bc:5b:0a:63:5c:ab:5d:de:30:
         4e:da:18:29:e2:fa:e3:2d:94:be:5e:d1:57:84:c8:f9:dc:c4:
         04:01:a7:bf:99:e1:07:f9:37:84:07:14:89:47:68:d3:5e:5e:
         03:fd:e6:1f:73:a8:fa:81:56:3b:a7:02:40:4e:85:22:3d:84:
         8e:17:5e:31:0e:2f:97:a5:a1:e1:e1:cd:5b:96:39:4b:35:82:
         93:24:dc:69
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgICCyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzY3QjAxMTAvBgNVBAUTKEYxREY4NUY5Q0ZCMzVDQjMxMEMzMEQ1OUNENjAwNjM2
OUFDNjkwMTEwHhcNMjMxMTA4MTkyNzIyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTRiZTExYS01MWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1oqGYv7lj7rDfOh5zNIhcakn3k2QEHdfGUpYrRZNhzV2KTiLmmqwADyAubSM
J9J/XoldpWrNtkntw4L12cZB4v7VsygJ+gKb83krSfc+lq/EWYwS3lGbbA39xLIn
ePgp/Fd14sI5ZyGFUPeKzglMoH2KxHBL5hQIQwTo6bQFSAPWLd5wPUYcqvThrziw
j43muPM8CvJTziOjck5y1fbc1PDZU6USga7KfbzyeOZuQJDzsMIpCFW1dHUdRPCN
Lshw2gQUZCfo28ny5UhnoUx7byzg04CQDR6ZfRPLXOgBgGrKSuO+bb2E8p0WvZXD
TzIPPt3WyjPp/C38O2g4th8RDwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFARQKO32
VS3uFZlXkn6YvSpj50jNMB8GA1UdIwQYMBaAFPHfhfnPs1yzEMMNWc1gBjaaxpAR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjdCMC9EQUZGNENGQTA0
RkMxMUVBODA1MDY2MTZDNEY5QUUwMi84ZC1GLWMtelhMTVF3dzFaeldBR05wckdr
QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhkLUYtYy16WExNUXd3MVp6V0FHTnByR2tCRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzY3QjAvREFGRjRDRkEwNEZDMTFFQTgwNTA2NjE2QzRGOUFFMDIvOEUxRUVFMkEw
NEZFMTFFQUI3NzhFODFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E
KzApMBgEAgABMBIDBAItcegDBAJnBvwDBARzklAwDQQCAAIwBwMFACQHrgAwDQYJ
KoZIhvcNAQELBQADggEBAJq2gSK34SYY96l9o1Om+WCvzRZPIwKei1n8KK1el7jH
PiHjHk+2kwaisEYBRXRKGwPn/nP+O37q/r6Z66LDKzSz9uuKDfMM4ak02BxVNLld
lNbg9JSQwtXO+0jQKxTYC00dThlR/2fx5Xj8+9Lu81oCe21zScPy9UVi+Lv04lTP
Lwkqpxm0tTaAkjGmVlenAVGYF8hKxl1xv1IKBdnvTZq25TgYlSts2U5l47xbCmNc
q13eME7aGCni+uMtlL5e0VeEyPncxAQBp7+Z4Qf5N4QHFIlHaNNeXgP95h9zqPqB
VjunAkBOhSI9hI4XXjEOL5eloeHhzVuWOUs1gpMk3Gk=
-----END CERTIFICATE-----