Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/04568E9C592311EDB489136BC4F9AE02.roa
File:                     04568E9C592311EDB489136BC4F9AE02.roa (raw, json)
Hash identifier:          4goshhqef2mP0rBF8Wlm36CLbDDIPewTqiFDthDz/F8=
Subject key identifier:   75:E8:82:85:99:CC:2D:AE:2D:F9:36:95:9C:CF:43:CD:C2:86:4B:C8
Certificate issuer:       /CN=A91C83F1/serialNumber=5A5A330994A66CFA1284F32606E39E195C7CA967
Certificate serial:       04CF
Authority key identifier: 5A:5A:33:09:94:A6:6C:FA:12:84:F3:26:06:E3:9E:19:5C:7C:A9:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WlozCZSmbPoShPMmBuOeGVx8qWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/04568E9C592311EDB489136BC4F9AE02.roa
Signing time:             Tue 01 Aug 2023 00:41:59 +0000
ROA not before:           Tue 01 Aug 2023 00:41:59 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     51649
IP address blocks:        103.166.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1231 (0x4cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C83F1/serialNumber=5A5A330994A66CFA1284F32606E39E195C7CA967
        Validity
            Not Before: Aug  1 00:41:59 2023 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=64c854d7-d74c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ca:8b:5c:dd:1e:33:38:f0:81:69:5f:88:5d:
                    e6:56:68:b1:35:3d:26:20:70:20:24:7e:3a:ad:1c:
                    a0:36:d3:c8:73:34:40:39:56:72:a5:05:2e:05:c6:
                    b8:50:f8:d4:55:06:32:b2:4d:27:6e:9a:d5:42:09:
                    2e:ac:bd:4a:87:6c:d4:17:06:34:ef:07:01:e1:2b:
                    69:62:13:ec:f5:8c:ca:09:0c:ef:d6:9c:f4:c5:00:
                    75:4a:bc:14:9e:54:c2:e2:40:54:41:4c:0c:d6:7a:
                    8e:75:e4:57:e7:00:0d:27:e6:a7:2a:b2:3c:f9:c5:
                    29:5b:74:74:bd:af:30:a7:4a:fb:7f:e9:f5:e2:ae:
                    6e:18:1a:20:b3:24:c9:d9:dd:76:82:ef:46:f9:be:
                    1a:d1:49:e4:34:e4:ac:e7:f8:97:03:60:da:ff:f8:
                    bd:a7:82:4b:f7:ec:76:b6:17:e6:5e:5a:16:c0:43:
                    ee:08:68:8b:f5:19:a7:f6:26:fc:61:ab:7c:c3:a0:
                    80:1b:86:5d:25:f2:4b:5a:a7:32:7c:d8:7b:79:6f:
                    7d:c4:62:6d:2a:ed:32:d6:c4:62:99:ad:74:3b:06:
                    98:19:77:ee:f1:e6:b6:0c:68:63:dd:d4:48:e0:49:
                    62:a8:c6:0f:c2:a1:80:3c:96:04:34:70:5b:d9:25:
                    6a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E8:82:85:99:CC:2D:AE:2D:F9:36:95:9C:CF:43:CD:C2:86:4B:C8
            X509v3 Authority Key Identifier:
                keyid:5A:5A:33:09:94:A6:6C:FA:12:84:F3:26:06:E3:9E:19:5C:7C:A9:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/WlozCZSmbPoShPMmBuOeGVx8qWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WlozCZSmbPoShPMmBuOeGVx8qWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/04568E9C592311EDB489136BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:f4:af:78:c2:4a:9a:12:a9:dd:3d:88:68:87:16:20:90:43:
         3e:61:dd:42:18:32:f4:aa:36:7b:5e:b7:00:4a:af:c8:8b:e8:
         5c:30:7f:c0:d4:4b:5d:2b:55:69:50:70:4b:d1:7d:03:60:bf:
         f9:3b:f5:f7:46:c8:49:d9:51:c7:a2:7d:07:e3:10:b0:96:49:
         25:59:d5:e0:b6:fc:f2:2f:dc:2f:be:0a:24:1c:be:8b:03:e2:
         03:ae:32:b5:3c:72:08:6f:87:13:7c:80:35:04:57:8a:cf:d9:
         42:41:0e:f1:e3:6c:8c:fc:c8:b3:54:b8:f2:98:c3:e8:6d:b9:
         1f:5c:51:88:ed:a2:c9:01:76:10:9c:d6:91:aa:9d:c5:1b:82:
         fa:0a:57:8e:33:a2:85:96:8e:3d:21:4c:cc:ec:07:75:56:73:
         0d:73:07:92:ed:80:30:f9:1c:42:9c:ae:7d:f9:89:c9:7c:0a:
         72:0e:f8:7f:a2:52:19:59:bd:90:4b:ed:3c:74:e5:92:53:e6:
         bc:d4:71:ad:fb:2e:a7:eb:16:f0:0c:89:03:d9:1b:dc:8d:2c:
         59:44:16:a4:72:b4:84:e5:ae:15:b3:76:f2:af:c8:98:f1:05:
         d1:66:00:bb:cb:43:ef:98:aa:10:e9:09:b5:ac:ed:0e:00:de:
         02:97:32:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----