Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/9039BE4E1C1711EA8B048E84C4F9AE02.roa
File:                     9039BE4E1C1711EA8B048E84C4F9AE02.roa (raw, json)
Hash identifier:          rucKDr9nTQr0vG9TBVHurffVYvImx2meRQqt/Dw2jPc=
Subject key identifier:   77:EE:45:BD:24:BD:BC:B8:97:E6:D4:85:95:FE:05:0B:18:C2:DF:1B
Certificate issuer:       /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial:       327C
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/9039BE4E1C1711EA8B048E84C4F9AE02.roa
Signing time:             Thu 11 Aug 2022 02:40:25 +0000
ROA not before:           Thu 11 Aug 2022 02:40:25 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     24503
IP address blocks:        202.51.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12924 (0x327c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
        Validity
            Not Before: Aug 11 02:40:25 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=62f46c18-b1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d2:1c:72:b5:2e:03:a3:74:78:92:11:f2:df:
                    25:75:e5:58:11:c8:e8:36:5b:76:68:f8:74:dc:86:
                    11:97:e4:eb:96:5a:36:63:7e:45:ba:71:a6:0d:af:
                    b2:6b:87:e8:d3:c3:85:24:a1:d9:b5:b2:ff:f2:e8:
                    d3:b1:ce:c5:41:14:68:c5:ef:cb:55:a2:11:25:e3:
                    b2:7f:8e:71:66:22:14:ca:d9:80:c3:2b:ef:9d:e0:
                    4a:e5:87:c7:18:0e:7a:e1:1a:0d:71:ea:58:a7:cf:
                    2c:d2:dc:af:9e:33:25:31:8a:8f:6e:b9:b1:e9:c7:
                    4d:d8:f5:45:f8:d0:f0:89:9f:1c:88:d8:57:80:a3:
                    b4:ba:eb:47:ff:a5:53:11:1f:69:b2:1a:40:89:ab:
                    90:3e:36:f5:8b:f9:1e:ae:4b:8d:9c:8b:b6:26:a6:
                    b8:eb:2c:dd:e2:7d:86:e0:c8:00:4d:78:74:77:eb:
                    9a:6f:fb:ed:3e:b9:f4:2f:ba:62:88:e5:4e:8e:62:
                    46:31:f7:db:72:17:4b:dd:a4:fe:7b:07:4e:2d:23:
                    e2:fb:c1:d5:46:d6:9d:ca:ce:fb:b3:3d:91:dc:2d:
                    54:6b:81:4a:25:5b:b6:4a:b8:29:04:78:38:a5:70:
                    0b:14:31:1b:96:e0:00:f9:59:8a:2f:8c:96:ff:35:
                    d6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EE:45:BD:24:BD:BC:B8:97:E6:D4:85:95:FE:05:0B:18:C2:DF:1B
            X509v3 Authority Key Identifier:
                keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/9039BE4E1C1711EA8B048E84C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.51.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:22:3f:91:07:c2:70:57:67:ad:68:ee:6a:06:61:01:a9:35:
         7f:64:f0:88:07:f8:af:d1:3c:a5:3a:09:78:60:0a:2f:45:9f:
         b6:46:b5:0f:0f:e8:cb:bf:74:96:ff:1e:d9:1a:91:11:73:0e:
         59:a2:41:26:08:0a:47:a0:de:7b:0a:51:a6:ab:41:dd:fe:8c:
         3a:f2:cc:2a:25:af:64:24:39:3e:0c:43:2f:60:00:08:fb:b2:
         8d:87:84:5c:cc:17:95:00:b4:f4:a3:b8:44:cb:f4:c9:d5:cd:
         40:8a:88:3a:08:e4:08:03:ac:2a:17:31:ae:4e:fa:6b:e0:0f:
         ff:6c:b6:76:ad:40:06:cc:04:d1:2f:3f:08:00:6e:63:f2:60:
         8a:b5:80:37:9b:33:f2:3a:bd:36:8b:08:94:10:ee:3d:b7:a9:
         49:ba:1c:99:57:0b:da:c5:38:ee:df:58:1d:00:99:db:b4:c8:
         55:9c:05:8f:2a:56:b5:e0:95:31:d7:39:52:42:67:dd:ac:52:
         7c:46:21:cc:92:c8:04:f4:01:da:2a:44:63:78:1f:54:46:92:
         ec:ea:28:fc:5f:f2:9c:28:7a:78:06:aa:a3:f0:e6:c9:7f:f3:
         cc:22:ff:fa:75:fc:ac:48:14:20:a9:1d:1a:01:92:87:18:b5:
         fb:45:ac:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----