Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/80118BC44F6311ECB984F46CC4F9AE02.roa
File:                     80118BC44F6311ECB984F46CC4F9AE02.roa (raw, json)
Hash identifier:          3Q0GssRHzxnm+cSdm4YeA78MKFQcb7rTadTgIYBlKQ8=
Subject key identifier:   62:1B:D3:9E:70:2A:02:92:B3:0F:ED:6C:8C:E5:0C:3C:77:28:55:83
Certificate issuer:       /CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24
Certificate serial:       0284
Authority key identifier: 4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/80118BC44F6311ECB984F46CC4F9AE02.roa
Signing time:             Sat 19 Nov 2022 03:32:37 +0000
ROA not before:           Sat 19 Nov 2022 03:32:37 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     149035
IP address blocks:        103.177.54.0/23 maxlen: 24
                          2001:df0:1d40::/48 maxlen: 56

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24
        Validity
            Not Before: Nov 19 03:32:37 2022 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=63784e54-c12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:89:8c:6c:d8:68:16:da:3d:10:47:d6:d8:f0:
                    c9:3f:0d:09:af:44:73:61:b9:30:c6:88:b4:f9:4e:
                    05:77:b0:59:8f:83:01:fa:a8:67:15:5c:98:9b:82:
                    6c:b4:7f:11:d7:88:6e:80:2b:4c:39:9b:26:75:5f:
                    fb:ea:25:c7:6f:eb:26:52:30:89:c1:86:11:2e:75:
                    dc:90:24:68:72:bc:a8:cd:49:d0:6b:f6:52:5a:9d:
                    28:b8:2a:c0:a9:d4:53:b3:72:e5:f5:e7:26:4d:47:
                    5e:9a:a8:14:be:6a:8b:29:80:3c:db:5e:cf:6e:c5:
                    f0:e6:3d:70:8b:ec:7b:01:2b:71:4c:0e:f6:1f:55:
                    53:02:8f:01:67:9f:c0:29:34:15:9a:12:e4:86:ae:
                    3b:96:ab:d1:8d:d6:ba:3b:1c:e4:2a:45:21:41:0c:
                    98:02:c4:37:01:77:7b:bd:a3:3b:5d:ea:f1:2d:f5:
                    ce:a2:73:b9:73:23:11:71:7b:87:9b:a5:54:8f:e5:
                    6c:0a:fb:a3:b4:48:3f:a2:70:ac:44:c2:59:bb:ec:
                    59:37:a8:63:0d:8a:f5:5c:73:c2:89:92:1e:c0:b2:
                    06:6b:bc:bc:9a:d4:d3:85:16:9a:fc:7c:92:80:70:
                    ee:40:c9:13:a6:c7:32:ed:58:39:f8:85:46:9e:c6:
                    7d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1B:D3:9E:70:2A:02:92:B3:0F:ED:6C:8C:E5:0C:3C:77:28:55:83
            X509v3 Authority Key Identifier:
                keyid:4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/80118BC44F6311ECB984F46CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.54.0/23
                IPv6:
                  2001:df0:1d40::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:77:89:cd:02:28:1b:d9:cf:54:a8:93:a9:14:2d:82:c0:70:
         4f:96:c6:e0:d7:26:a7:0c:e1:b1:ff:6a:dc:55:ab:59:e3:74:
         be:f8:3b:4b:b2:95:6f:5c:1d:57:59:6b:15:ff:9c:c3:29:73:
         f5:24:73:ef:33:98:6f:7c:47:a0:88:42:83:03:b3:be:db:27:
         04:62:38:f1:94:38:9b:71:1f:b8:42:be:84:02:ce:8b:49:02:
         7b:40:f0:12:e7:fd:03:fa:59:c8:aa:c2:82:f6:a1:61:1f:97:
         21:c2:35:7f:7e:d2:f8:e0:12:9b:a6:a9:48:c2:07:78:36:e6:
         d9:73:a3:05:1b:87:2f:6c:0e:1a:88:ae:0a:62:e4:e0:c2:fb:
         67:f5:b2:cc:db:dc:86:bf:4c:34:d7:c0:d5:ca:74:90:2e:40:
         32:be:79:4c:f9:bc:4d:40:1b:67:ac:df:16:3b:54:9a:d5:97:
         10:10:ce:da:99:8f:04:ac:5e:5a:2c:78:67:5f:70:3c:aa:cd:
         59:e2:11:47:51:3d:5e:94:2b:2d:20:b3:e5:c1:c9:f8:de:40:
         11:6a:dc:f5:bb:92:04:1f:52:56:0c:f1:22:45:d4:35:e2:c3:
         64:c6:a1:2f:ef:d1:f6:1c:4b:a1:78:25:6f:1e:c3:1f:e5:e5:
         64:ae:db:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----