Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/029F152C569911EAA8261324C4F9AE02.roa
File:                     029F152C569911EAA8261324C4F9AE02.roa (raw, json)
Hash identifier:          KrH/T+HM19nbfsNMXDEf+AhjK84ddJMRIRkFR+h2wPY=
Subject key identifier:   DF:CD:33:8D:0A:21:78:AF:9C:52:C4:24:91:6C:5B:24:E2:F7:3F:C9
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       0F4E
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/029F152C569911EAA8261324C4F9AE02.roa
Signing time:             Wed 16 Aug 2023 18:16:10 +0000
ROA not before:           Wed 16 Aug 2023 18:16:10 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     140219
IP address blocks:        2404:f4c0:fff0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3918 (0xf4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Aug 16 18:16:10 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64dd126a-5bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:50:7a:31:68:27:d9:86:52:b4:18:90:00:d7:
                    93:02:fa:54:3f:40:d5:cc:d2:e3:24:10:a8:69:e0:
                    3a:1a:a2:48:9f:a3:db:eb:bf:f0:f3:e3:f9:3d:c2:
                    bf:5c:08:ab:df:47:a9:16:28:d8:b1:d4:a7:ae:47:
                    5a:49:1b:48:80:53:ea:fb:57:36:07:e0:ab:21:63:
                    bd:3b:ed:da:4d:35:43:51:e3:0a:82:e4:4a:2e:1e:
                    89:cc:f0:de:24:eb:34:86:a8:44:34:8f:75:2c:76:
                    89:12:11:d3:a8:3d:e0:16:6c:24:23:c1:a0:34:b8:
                    97:0b:8b:25:50:b5:ac:db:fa:b8:e3:ba:18:61:40:
                    7c:c5:83:cc:41:97:74:9c:90:bd:54:b2:55:4e:5b:
                    d6:ab:7a:0d:f5:b8:5d:c8:96:76:30:61:92:c5:16:
                    94:54:86:6e:59:23:df:25:e3:56:f1:83:2d:dd:6f:
                    05:5b:50:e9:ef:4d:6c:bd:aa:18:80:ef:33:6d:5b:
                    90:7e:c2:2f:13:26:e5:ca:18:2c:11:d2:80:b6:e7:
                    f7:9d:74:da:d0:f8:a4:56:11:17:97:f5:18:12:96:
                    ab:71:a7:24:90:60:a6:e2:9c:2a:8c:ca:20:b2:9e:
                    1e:2b:3e:b0:3c:7c:74:79:66:a2:54:bd:62:bf:31:
                    29:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CD:33:8D:0A:21:78:AF:9C:52:C4:24:91:6C:5B:24:E2:F7:3F:C9
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/029F152C569911EAA8261324C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f4c0:fff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         08:6f:6c:d0:65:de:9b:ee:7f:20:85:69:e7:fe:18:57:88:ce:
         d1:c8:8a:c6:c9:29:34:7d:0d:d8:51:f6:d1:64:9b:6b:eb:26:
         b5:dc:1b:92:b2:78:6c:8d:6c:23:35:77:18:aa:38:82:ab:3e:
         7c:14:2d:c6:48:26:5a:8d:21:3c:74:8b:61:ae:59:3a:64:4e:
         00:cc:8e:ac:c3:ab:f8:4c:95:bf:fd:0f:64:29:4c:4f:46:e3:
         03:af:4b:7e:f9:4a:ce:49:02:72:0d:b8:56:51:d9:54:a4:4a:
         f6:7d:e6:7d:9c:47:4b:46:6e:3e:ba:4f:43:82:76:db:fd:b4:
         07:5c:57:9a:d5:c4:9a:af:bf:60:8a:b9:a8:cc:d5:8d:8c:27:
         06:2a:0f:61:eb:86:22:72:6d:26:a0:f5:51:6a:99:23:e1:5c:
         3f:8a:39:61:4c:ff:f7:27:d2:3d:23:05:29:d2:1a:94:30:23:
         e2:77:e1:e7:85:05:99:f6:e5:92:8e:19:a3:11:ce:cd:fe:d8:
         c1:06:f2:64:df:72:70:83:8b:83:57:4b:ad:e6:22:a6:9f:56:
         e7:6f:48:11:26:21:ec:1d:55:7e:0d:ab:64:2d:5d:39:18:41:
         2f:5e:66:00:53:69:f2:2f:b6:8d:f3:f4:f9:a2:8b:f1:22:1d:
         c6:fe:22:93
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICD04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5
RDNGRDdCNjAwHhcNMjMwODE2MTgxNjEwWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGRkMTI2YS01YmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1lB6MWgn2YZStBiQANeTAvpUP0DVzNLjJBCoaeA6GqJIn6Pb67/w8+P5PcK/
XAir30epFijYsdSnrkdaSRtIgFPq+1c2B+CrIWO9O+3aTTVDUeMKguRKLh6JzPDe
JOs0hqhENI91LHaJEhHTqD3gFmwkI8GgNLiXC4slULWs2/q447oYYUB8xYPMQZd0
nJC9VLJVTlvWq3oN9bhdyJZ2MGGSxRaUVIZuWSPfJeNW8YMt3W8FW1Dp701svaoY
gO8zbVuQfsIvEyblyhgsEdKAtuf3nXTa0PikVhEXl/UYEparcackkGCm4pwqjMog
sp4eKz6wPHx0eWaiVL1ivzEp8QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFN/NM40K
IXivnFLEJJFsWyTi9z/JMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE
RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvMDI5RjE1MkM1
Njk5MTFFQUE4MjYxMzI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQkBPTA//AwDQYJKoZIhvcNAQELBQADggEBAAhvbNBl3pvu
fyCFaef+GFeIztHIisbJKTR9DdhR9tFkm2vrJrXcG5KyeGyNbCM1dxiqOIKrPnwU
LcZIJlqNITx0i2GuWTpkTgDMjqzDq/hMlb/9D2QpTE9G4wOvS375Ss5JAnINuFZR
2VSkSvZ95n2cR0tGbj66T0OCdtv9tAdcV5rVxJqvv2CKuajM1Y2MJwYqD2HrhiJy
bSag9VFqmSPhXD+KOWFM//cn0j0jBSnSGpQwI+J34eeFBZn25ZKOGaMRzs3+2MEG
8mTfcnCDi4NXS63mIqafVudvSBEmIewdVX4Nq2QtXTkYQS9eZgBTafIvto3z9Pmi
i/EiHcb+IpM=
-----END CERTIFICATE-----