Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/B073886292D811ED9EA79F13C4F9AE02.roa
File:                     B073886292D811ED9EA79F13C4F9AE02.roa (raw, json)
Hash identifier:          ZOObWlGfzL/wxBordpEMfAMUAdpgjHRC8ARZp8mh8Mk=
Subject key identifier:   ED:32:29:DA:83:EB:38:72:C8:1E:CE:E7:BB:D6:3D:FD:F0:33:46:99
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       78
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/B073886292D811ED9EA79F13C4F9AE02.roa
Signing time:             Sun 26 Feb 2023 23:55:10 +0000
ROA not before:           Sun 26 Feb 2023 23:55:10 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     49999
IP address blocks:        218.33.64.0/22 maxlen: 24
                          218.33.100.0/22 maxlen: 24
                          218.33.104.0/22 maxlen: 24
                          218.33.108.0/22 maxlen: 24
                          218.33.112.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Feb 26 23:55:10 2023 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=63fbf15e-5373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:79:48:77:29:02:60:c5:8b:42:89:f3:68:f1:
                    9e:6a:bc:87:fb:a4:92:91:b8:bf:6d:0f:c7:19:f7:
                    30:99:4e:ff:7f:c0:80:9c:e6:da:0b:f4:44:32:6a:
                    26:bb:13:88:ee:f2:bb:e4:dc:19:bd:32:21:85:df:
                    43:f2:0a:c0:48:59:fd:c5:14:ef:21:2e:38:27:cb:
                    53:e1:70:f9:44:5d:fe:11:67:ae:ad:f7:04:6c:10:
                    26:83:fa:80:69:1a:02:63:c8:bc:b5:2e:af:7d:53:
                    fa:88:40:91:d0:a2:35:b3:e7:71:ee:48:25:07:bd:
                    f6:17:5d:c6:01:e2:9c:dc:1d:df:59:d1:d7:91:e6:
                    26:46:90:db:ff:d5:3c:54:db:94:88:3d:90:6f:c8:
                    a3:7e:58:97:7b:9a:e4:6c:83:86:04:f2:5a:15:cf:
                    f5:6f:ed:ea:ce:f9:aa:40:b6:1e:db:3d:ee:99:4c:
                    7a:dc:8b:c3:d1:6d:89:90:ff:b9:67:5a:a8:d4:4b:
                    ef:c8:b1:6b:bc:f7:22:54:e2:f4:d5:69:c1:59:19:
                    e5:a2:07:cb:2d:43:f1:cb:3c:21:68:aa:71:eb:2a:
                    55:bf:1d:cc:2f:57:65:76:64:da:87:99:ea:63:31:
                    02:24:6e:e0:ec:7c:dd:e2:12:8e:c5:f1:73:6a:d7:
                    ec:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:32:29:DA:83:EB:38:72:C8:1E:CE:E7:BB:D6:3D:FD:F0:33:46:99
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/B073886292D811ED9EA79F13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.33.64.0/22
                  218.33.100.0-218.33.115.255

    Signature Algorithm: sha256WithRSAEncryption
         19:1b:ff:a8:99:5d:55:5a:72:e6:1b:cc:5d:5e:38:25:82:d6:
         00:f6:98:bb:36:89:07:81:69:cf:6a:21:d0:7e:11:50:3f:94:
         99:e1:88:ea:4c:0a:b4:66:52:5d:ab:33:a4:48:4c:d5:25:f9:
         5a:42:c8:d3:4e:95:b8:1e:fe:88:6f:b7:c9:fb:68:53:a9:a3:
         e5:d9:20:c0:7f:88:a0:60:64:ad:37:db:dd:f3:9e:e8:e7:87:
         4d:46:18:24:14:03:bf:db:b9:c4:db:98:dd:14:50:95:29:90:
         99:bc:21:93:64:c6:48:fa:f4:04:0a:26:30:9e:4f:58:28:e8:
         4d:1f:5e:d5:d3:71:68:b1:65:f3:ed:62:dd:8c:86:c0:c7:d2:
         b0:eb:a2:fd:98:58:67:75:cd:c9:9d:b9:b0:d2:cc:dc:7e:11:
         8c:64:73:69:4b:05:5c:b2:42:f6:af:29:bb:91:b4:cb:2b:e9:
         23:a2:e5:e3:fe:0b:8b:07:6e:eb:b3:ed:24:c9:10:c4:23:a9:
         03:b7:71:7b:19:99:17:08:32:c0:e7:98:9c:6b:89:a9:f4:82:
         03:24:68:36:1b:50:66:b8:01:57:72:d3:b3:e0:06:e3:d7:6f:
         5a:6d:eb:5b:19:bc:17:e6:d9:ee:63:71:c3:16:06:2c:0d:2a:
         26:0d:98:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----