Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/039C51227E3D11EEA1E36A83C4F9AE02.roa
File:                     039C51227E3D11EEA1E36A83C4F9AE02.roa (raw, json)
Hash identifier:          Ufg/jtfOLS8/CHcXrnF1FRSZ/Hce9fKXhGxxF+zM9vM=
Subject key identifier:   32:0F:82:2A:2B:1B:83:47:72:B0:D9:FE:B3:33:2E:D3:A6:14:0D:D1
Certificate issuer:       /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial:       2E
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/039C51227E3D11EEA1E36A83C4F9AE02.roa
Signing time:             Wed 08 Nov 2023 13:45:02 +0000
ROA not before:           Wed 08 Nov 2023 13:45:02 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     398343
IP address blocks:        103.115.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
        Validity
            Not Before: Nov  8 13:45:02 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=654b90dd-e548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e0:78:ac:b6:05:90:c2:7d:53:9a:fd:7c:e1:
                    48:ef:7f:ed:31:0c:92:5a:7b:f3:ea:3b:b8:18:1c:
                    84:2d:fe:41:5a:d3:d4:da:04:df:2e:70:21:2f:04:
                    a0:b9:85:b8:f9:83:2d:8e:0c:dc:08:b9:88:f4:0d:
                    fa:1e:48:6e:52:96:43:7c:a8:11:cc:e2:be:01:51:
                    69:75:2a:44:cd:cd:01:29:bf:be:45:e2:76:c6:2e:
                    ae:8b:30:3b:2a:4b:cf:f1:1b:08:ce:47:f3:00:02:
                    7c:07:e2:8c:36:e3:85:9a:93:af:22:b1:ff:09:d3:
                    a9:ab:d6:ff:44:54:07:a5:7e:7a:4a:37:9d:bd:24:
                    74:0e:64:12:49:18:47:71:3e:d9:d5:63:25:66:45:
                    3b:bf:7a:07:c7:b7:ce:4b:ec:10:23:c7:5b:91:55:
                    b5:81:02:7a:e8:c6:ed:85:39:60:60:bf:57:4b:43:
                    ea:44:fa:90:33:3f:8e:e1:30:ae:20:1d:b6:0d:46:
                    29:bd:33:9a:a2:a4:32:4f:5f:1f:cf:2b:dc:e8:93:
                    d7:39:30:30:c8:ad:0c:32:91:a4:80:88:dd:29:09:
                    01:59:8f:0b:e0:a3:64:e2:b7:41:89:3a:4c:37:76:
                    eb:ce:06:5c:d9:be:af:57:94:ef:82:6c:15:9e:25:
                    a1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0F:82:2A:2B:1B:83:47:72:B0:D9:FE:B3:33:2E:D3:A6:14:0D:D1
            X509v3 Authority Key Identifier:
                keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/039C51227E3D11EEA1E36A83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:6d:30:0d:32:57:4b:0c:47:2e:4c:f7:b5:95:79:d2:78:7e:
         30:39:4a:07:e0:c3:72:81:a7:5d:f0:ee:62:9a:98:cd:3e:9a:
         be:45:54:3e:bb:72:17:77:a9:f9:75:3f:89:bd:4b:e8:82:86:
         a1:a7:45:b6:a6:4c:ac:3b:0b:8e:de:90:6c:f7:b2:65:ed:db:
         19:40:3d:d1:41:d3:fb:e5:8d:07:24:76:85:6c:91:6c:8d:3e:
         65:44:8f:cd:40:6b:10:c3:3f:4e:c4:9b:c5:c0:8f:18:92:44:
         68:16:79:73:93:74:b1:48:31:97:b3:3c:3f:61:ed:fa:26:e0:
         e7:ca:34:ff:12:58:48:69:9d:e4:82:49:c7:e2:d4:36:aa:3e:
         50:95:47:2d:b6:99:50:f1:53:3e:11:51:44:9a:b8:58:4c:23:
         f1:1d:42:e1:bd:8a:2c:61:8b:50:13:87:f0:46:f4:d7:eb:69:
         ec:ae:2f:13:df:85:c7:82:3b:c0:7a:98:6b:1f:eb:da:f0:fb:
         5f:2b:84:1b:06:a3:f2:a2:76:2a:d8:5f:0a:b4:99:9b:a3:26:
         3b:bf:d3:c0:2a:c4:91:fd:dc:1e:d6:cb:e2:63:2b:d0:63:2d:
         14:8e:e2:35:9b:9a:9f:eb:fb:e7:91:6a:13:6d:4a:3c:53:96:
         65:ba:13:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----