Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/0BE50A78AD0911ED8435065FC4F9AE02.roa
File:                     0BE50A78AD0911ED8435065FC4F9AE02.roa (raw, json)
Hash identifier:          WIgY2bxPpY120w6o7bczX/229kSwaGMb6uX8I+zWQhY=
Subject key identifier:   0D:03:5E:9A:FC:A3:35:10:52:CD:1A:DE:96:B8:B7:7E:17:2D:DC:32
Certificate issuer:       /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Certificate serial:       D9
Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/0BE50A78AD0911ED8435065FC4F9AE02.roa
Signing time:             Wed 15 Feb 2023 08:36:23 +0000
ROA not before:           Wed 15 Feb 2023 08:36:22 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     150006
IP address blocks:        2400:9ce0:5000::/36 maxlen: 36
                          2400:9ce0:6000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
        Validity
            Not Before: Feb 15 08:36:22 2023 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=63ec9986-1521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:82:69:ba:10:0f:8e:84:08:ac:08:39:a6:fb:
                    1d:3a:a3:4e:c5:14:ce:23:9c:01:d9:22:a8:01:3b:
                    ce:7f:18:dd:16:b8:98:ba:44:51:2f:05:99:c8:d8:
                    4e:82:4f:77:c8:0e:cd:28:4c:ed:1d:60:75:b9:32:
                    82:33:2b:c9:ef:83:74:e5:be:a2:cd:d2:f1:e6:d8:
                    9f:10:dd:7c:2e:59:e6:c3:6a:c0:96:91:04:78:a4:
                    e7:55:13:b5:2b:64:72:54:ee:7b:ae:18:44:f1:e9:
                    2d:ea:68:dd:a0:b0:4b:fe:06:85:91:05:ef:fd:65:
                    5c:f8:22:86:d9:82:24:5e:09:a7:1c:6f:2e:23:28:
                    48:bb:9d:29:fc:33:50:31:60:ee:0b:ea:b9:cc:1a:
                    38:ca:fb:5a:05:c3:cb:99:12:f3:ab:f4:11:73:cc:
                    c8:ec:81:26:59:12:2a:06:e7:33:ae:71:f6:e0:7e:
                    3a:bb:22:1b:be:f9:cd:b2:7b:14:a8:3f:99:ff:77:
                    9b:b1:ab:42:79:de:8f:10:46:38:e3:9a:3d:0c:68:
                    82:5b:e0:72:e5:5a:3f:f0:c9:96:f6:0b:ca:19:5b:
                    05:00:6a:f2:9f:28:8f:e8:b7:eb:8e:ab:df:5e:96:
                    04:06:a0:9f:0d:87:32:66:74:11:c9:9d:35:2c:ea:
                    39:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:03:5E:9A:FC:A3:35:10:52:CD:1A:DE:96:B8:B7:7E:17:2D:DC:32
            X509v3 Authority Key Identifier:
                keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/0BE50A78AD0911ED8435065FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9ce0:5000::-2400:9ce0:6fff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         6e:2a:32:6f:fc:52:c2:d0:44:13:96:17:59:23:bd:96:39:ce:
         b5:45:d0:a4:af:2d:8d:2b:a1:ae:eb:d5:c4:50:2b:07:51:df:
         22:85:2a:f1:98:57:c3:c4:d6:cb:10:59:03:bb:18:f2:99:be:
         be:d0:f0:20:3c:82:2b:04:27:f4:fa:78:df:dc:c8:74:18:8f:
         9c:28:44:14:3e:71:a7:4c:dd:b7:df:60:eb:3f:18:49:13:16:
         41:41:6d:c9:49:78:57:ba:79:6b:ef:be:39:f4:64:a6:3b:cb:
         97:e6:ea:cc:c1:3c:b1:00:16:b6:e0:d7:d7:a1:9b:5b:1c:af:
         0b:39:eb:c3:75:34:51:c5:ae:b3:c7:21:fd:f9:72:5f:ce:33:
         1d:f2:df:64:b4:5c:43:a1:e8:d8:cb:d9:64:ae:a4:93:23:d1:
         1f:4a:14:65:71:f8:b2:4a:d7:2c:7b:7f:99:49:8a:23:33:79:
         4d:e3:b6:3d:69:5e:bc:58:4b:f5:3c:e1:2f:26:72:77:63:5f:
         0d:33:13:ad:e8:c7:65:7a:31:a5:e4:38:af:84:62:73:65:b7:
         4c:34:c3:75:20:e1:e8:69:83:d0:ed:93:5b:ff:90:5c:45:50:
         12:20:9d:4e:8a:f5:8c:96:b8:eb:5b:54:34:7a:fc:06:92:40:
         c9:8c:e1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----