Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE4249F8988711ED93434B2EC4F9AE02.roa
File:                     EE4249F8988711ED93434B2EC4F9AE02.roa (raw, json)
Hash identifier:          VHmnUNjPCbamOPiBhXJMqE5L2VFpcEESiRuP4WNuxG4=
Subject key identifier:   5B:EF:25:29:DE:A2:A5:67:A5:99:18:F0:C3:AE:39:ED:57:FB:D3:AF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6EB1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE4249F8988711ED93434B2EC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:35:14 +0000
ROA not before:           Wed 10 May 2023 16:35:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     141490
IP address blocks:        43.239.80.0/22 maxlen: 24
                          45.123.216.0/22 maxlen: 24
                          103.162.120.0/23 maxlen: 24
                          103.192.60.0/23 maxlen: 24
                          103.192.62.0/23 maxlen: 24
                          103.194.156.0/22 maxlen: 24
                          2001:df0:b1c0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28337 (0x6eb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:35:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc7c2-36cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a7:52:1e:0b:f0:cb:f3:d9:ae:7f:f7:0f:c1:
                    de:d9:01:5a:de:40:d7:fd:4b:88:e1:f4:5b:81:11:
                    67:ba:ea:ca:7b:2e:bd:08:ce:7b:8c:32:ef:97:42:
                    15:34:78:de:4b:06:5f:38:60:39:84:27:7d:64:05:
                    98:91:ea:29:5a:b4:8b:08:aa:22:3e:66:de:f3:49:
                    69:0e:fa:97:45:4c:fe:6a:78:78:d6:75:06:b0:71:
                    ba:f0:4b:dd:d9:ab:bb:9f:cf:42:22:fc:12:ac:97:
                    35:68:12:f2:da:52:a3:40:8e:a5:5f:f8:5e:01:88:
                    eb:96:93:d0:83:f6:78:85:9a:2a:7d:58:8d:69:8b:
                    70:25:de:6f:c3:ee:57:7e:44:f2:07:ee:83:f3:dd:
                    a8:42:3f:cc:84:30:76:cb:c8:38:01:9c:71:95:16:
                    85:9d:f1:7e:83:f5:ba:e0:aa:4e:81:2b:33:15:fe:
                    4c:a3:fb:87:fd:bf:dc:44:bc:04:61:e6:bd:18:16:
                    d8:3d:61:3a:52:97:35:b1:6b:63:fd:d7:c1:b4:ad:
                    b2:15:6d:d9:a0:7e:38:28:2a:30:ba:ff:90:78:98:
                    9a:39:69:ec:86:4e:9f:c3:5a:9e:57:ac:bf:09:8e:
                    ae:6b:50:4a:a1:1c:7a:c9:cf:7b:20:00:a6:23:e6:
                    a9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EF:25:29:DE:A2:A5:67:A5:99:18:F0:C3:AE:39:ED:57:FB:D3:AF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE4249F8988711ED93434B2EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.80.0/22
                  45.123.216.0/22
                  103.162.120.0/23
                  103.192.60.0/22
                  103.194.156.0/22
                IPv6:
                  2001:df0:b1c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:a8:70:6f:b2:46:e4:fe:d4:59:d6:30:e1:75:9f:b8:17:0c:
         fd:84:ae:0b:07:73:f5:ea:cf:f9:9e:e1:6c:8c:b2:de:33:1b:
         6d:c3:55:45:f2:0f:09:57:83:5e:19:a4:e0:9f:de:01:b5:f7:
         c3:36:b4:17:35:fe:05:57:6a:f8:3f:9c:41:49:38:b0:83:fb:
         71:22:59:4d:55:03:d2:28:64:26:f3:16:f7:64:d7:09:26:ed:
         a3:d6:be:99:0e:79:d3:df:b2:02:04:fe:4b:35:38:cc:5f:31:
         17:8d:33:e0:5c:5b:17:3f:13:c5:bc:a3:5b:c3:62:e7:62:fa:
         04:2a:f1:e6:69:1b:0a:34:59:3b:68:80:b5:69:32:c7:8a:43:
         d7:d4:e8:56:1a:29:ff:58:c2:8a:e5:83:a6:fc:90:3d:b8:c6:
         10:e0:00:59:a0:c6:e7:74:50:fa:7b:70:66:90:7d:98:c5:f5:
         fb:83:91:fc:37:b4:0b:72:63:c4:d6:58:92:5c:25:cb:3d:dd:
         eb:a1:b6:4d:ee:72:52:e7:09:e9:83:d6:4d:b6:11:e2:a6:5b:
         0e:f5:93:44:4a:e2:f6:48:e7:c6:b8:66:41:9c:9a:41:30:ef:
         12:27:b2:90:71:4b:0a:72:f8:84:86:7a:07:b2:8a:e3:71:4f:
         95:14:17:46
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----