Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/1BE66368207D11ED85510D4BC4F9AE02.roa
File:                     1BE66368207D11ED85510D4BC4F9AE02.roa (raw, json)
Hash identifier:          hu9BiCteZpEd7BTkvFsYdy+fzMDiKuBf0fjHiNHgTCA=
Subject key identifier:   20:CB:13:89:2D:83:24:AB:4E:49:57:7B:BA:F5:00:63:A0:0A:ED:83
Certificate issuer:       /CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Certificate serial:       02E4
Authority key identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/1BE66368207D11ED85510D4BC4F9AE02.roa
Signing time:             Sat 03 Dec 2022 03:32:37 +0000
ROA not before:           Sat 03 Dec 2022 03:32:37 +0000
ROA not after:            Wed 31 Jan 2024 00:00:00 +0000
asID:                     13936
IP address blocks:        103.175.99.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 740 (0x2e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
        Validity
            Not Before: Dec  3 03:32:37 2022 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=638ac355-27ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:34:55:16:13:7a:b2:02:01:2b:f5:ac:b3:1f:
                    22:42:65:1a:0d:93:4d:91:f5:1a:e5:e8:32:14:3f:
                    84:7f:63:b5:46:79:09:63:6b:8f:86:84:dc:b7:70:
                    c5:cf:8a:ab:26:01:69:88:7d:ee:0a:45:4f:48:e0:
                    a6:2d:47:1b:6f:ab:04:63:31:3c:c7:cd:1a:3f:a5:
                    ab:04:b9:72:38:83:5c:ad:01:b7:ca:70:2b:61:5d:
                    bc:86:fb:00:68:29:2d:a7:f8:86:36:56:d1:12:6c:
                    fc:91:fc:e3:8d:cf:ba:dc:82:b9:95:0d:5b:60:67:
                    be:e9:f7:91:33:94:da:f5:16:26:78:8e:9a:f5:93:
                    14:ff:5d:e2:05:1d:bb:45:54:3a:2b:55:e4:b3:e2:
                    dd:f0:a7:c5:da:92:5d:f1:09:aa:65:de:2a:0f:31:
                    f5:2a:0f:66:d6:79:5c:ef:48:7a:10:23:f5:79:7b:
                    1b:33:74:6d:71:22:3f:53:a5:3d:c2:ff:85:94:69:
                    84:a2:24:9c:ab:67:8a:24:97:3c:aa:ba:55:a5:51:
                    88:f6:15:37:2c:42:19:56:b5:1c:7d:77:47:21:72:
                    00:60:1a:8f:01:2f:31:f1:4d:dd:52:2c:d1:9e:b2:
                    d4:c7:08:58:59:a5:55:3f:e0:89:67:8a:3c:ac:9e:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CB:13:89:2D:83:24:AB:4E:49:57:7B:BA:F5:00:63:A0:0A:ED:83
            X509v3 Authority Key Identifier:
                keyid:67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/1BE66368207D11ED85510D4BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:dc:c7:39:d7:4a:d6:30:f5:52:1c:0a:7a:64:8a:33:14:45:
         95:7c:d5:ca:a5:57:17:c5:72:92:24:26:27:88:50:84:f4:85:
         fe:4a:e4:31:c5:bf:8c:8d:d1:5a:31:9b:02:49:c0:4a:66:41:
         09:5d:c5:e6:fa:8e:18:3c:84:2c:a6:ca:ab:a0:b1:8f:d3:5a:
         e7:3f:19:8e:a0:eb:63:e0:b7:94:5f:99:c8:cd:22:94:e8:41:
         f9:0c:df:37:30:2c:9d:c0:d3:89:e1:f8:56:49:84:cb:3f:78:
         0b:a2:03:89:53:43:bd:6e:5d:d7:08:5f:25:53:1f:ca:75:d1:
         8e:df:f4:50:d6:ff:91:26:e8:d2:8b:81:a5:c5:c2:3b:8a:68:
         7d:fc:cc:7e:33:fc:21:64:11:83:47:55:06:03:c9:76:17:da:
         68:70:9a:ee:f6:73:fb:3e:ba:9d:45:cd:2b:49:01:e4:f4:0c:
         a1:b4:a9:bc:12:77:78:ea:02:e6:f7:f0:37:c3:50:00:79:eb:
         a4:7d:e6:b1:a5:f2:46:30:ca:c0:a9:83:0c:55:66:c0:37:73:
         aa:dc:f5:fe:b5:81:d3:5c:bb:ba:73:4d:26:6b:9e:70:d1:e2:
         8b:58:35:7c:f5:2b:b4:51:1b:d2:f0:4d:6e:07:f8:f8:91:28:
         4c:86:85:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----