Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/E5F2CA009F4011EE8C16C76AC4F9AE02.roa
File:                     E5F2CA009F4011EE8C16C76AC4F9AE02.roa (raw, json)
Hash identifier:          PO2EgLzb6fYHn43pBS1ioKZqOeEShliQHNF+VtEGFw8=
Subject key identifier:   86:D2:F8:9C:A9:64:86:03:B4:66:01:EC:2F:E9:8E:5A:7A:0B:0F:20
Certificate issuer:       /CN=A91CF9B0/serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65
Certificate serial:       0E
Authority key identifier: A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/E5F2CA009F4011EE8C16C76AC4F9AE02.roa
Signing time:             Wed 20 Dec 2023 14:07:08 +0000
ROA not before:           Wed 20 Dec 2023 14:07:08 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     152185
IP address blocks:        36.50.182.0/24 maxlen: 24
                          36.50.183.0/24 maxlen: 24
                          2001:df3:4d40::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF9B0/serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65
        Validity
            Not Before: Dec 20 14:07:08 2023 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=6582f50c-13e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3c:9b:0c:4a:b5:81:d9:45:ca:56:a1:b8:d7:
                    76:40:d0:46:66:ff:0a:1f:2f:c3:ea:86:86:89:50:
                    f6:ed:47:4e:9f:3d:de:47:9b:a6:55:14:c7:f4:28:
                    a0:e9:16:05:ec:83:da:4c:4e:7b:ca:58:15:c6:15:
                    92:68:92:af:c2:69:54:c1:21:7b:cc:0b:24:81:94:
                    39:d7:5d:e6:a7:90:a4:af:2d:0c:ec:54:0d:66:9e:
                    b4:0f:e8:4e:3a:13:c0:45:09:b4:eb:b0:d5:d9:c6:
                    2d:61:7a:18:42:c3:61:41:c5:33:4c:49:05:67:58:
                    63:e5:e9:71:d9:68:f7:96:b0:7b:cd:cd:39:51:a7:
                    6a:e4:4d:50:f0:7f:e6:17:5b:cb:9f:ed:c9:5d:b6:
                    4e:01:4c:c6:92:90:c8:e6:8b:87:1c:69:5d:5c:ff:
                    f7:5d:a9:88:1f:96:3d:b1:58:79:95:f8:80:d6:e6:
                    17:56:ff:1c:bb:a4:01:af:07:09:69:4e:42:fa:1c:
                    d1:3a:76:53:7a:96:1e:67:6c:02:bf:fc:00:e5:37:
                    db:bb:3c:8e:ad:6b:d6:81:35:32:05:08:ae:87:90:
                    ec:35:3b:d3:ac:93:9f:e3:b6:da:a5:43:5d:cc:b5:
                    89:c8:a6:f5:2d:d8:11:7d:f6:68:ff:c4:20:af:01:
                    ff:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D2:F8:9C:A9:64:86:03:B4:66:01:EC:2F:E9:8E:5A:7A:0B:0F:20
            X509v3 Authority Key Identifier:
                keyid:A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/E5F2CA009F4011EE8C16C76AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.182.0/23
                IPv6:
                  2001:df3:4d40::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:d4:84:a7:f1:94:d8:6c:f3:96:f1:a3:94:c5:f5:bd:a0:c8:
         10:40:0b:ef:b7:74:ea:5e:1e:af:e2:ce:37:85:20:07:a5:27:
         36:2e:6a:f5:3b:c6:38:e9:a5:ac:f3:63:70:7f:2c:bc:5f:53:
         f0:e5:9d:58:15:77:46:24:c1:e2:f7:81:71:a1:f5:b9:ee:93:
         b0:4f:c5:d3:8f:a0:24:c9:6c:50:c1:0c:0e:68:15:e7:76:59:
         0d:1b:69:00:d7:d5:21:94:9f:f4:f1:e5:61:27:02:6a:14:81:
         e8:d2:04:3e:16:c7:53:97:71:85:d7:2f:45:14:8a:78:b5:74:
         e4:2b:6a:6f:c0:39:be:4d:97:9a:88:a9:a6:0f:b9:a8:46:d0:
         b7:15:90:1f:5c:75:23:db:b1:d7:fc:2e:e0:bb:fb:46:16:eb:
         95:23:79:a2:71:a3:ea:e7:a4:8b:4c:16:09:da:db:01:ea:1a:
         3a:f4:2d:b9:14:38:3f:bd:dc:37:e0:bd:10:c4:ef:84:c1:d2:
         56:f8:a0:7f:38:8f:7b:bf:07:1f:95:07:86:31:d4:eb:99:d2:
         f3:74:06:be:59:ae:f1:dc:8a:ee:a6:0c:4d:dd:42:27:5f:1c:
         fb:bc:56:df:56:d1:92:29:60:71:f3:54:81:31:67:c8:29:c2:
         cc:a8:cf:20
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
RjlCMDExMC8GA1UEBRMoQTJBMjE3RDRBNDEyRkI1MzhGNUM5MUEzNEIzNkNFNzE4
NzlEREI2NTAeFw0yMzEyMjAxNDA3MDhaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1ODJmNTBjLTEzZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9PJsMSrWB2UXKVqG413ZA0EZm/wofL8PqhoaJUPbtR06fPd5Hm6ZVFMf0KKDp
FgXsg9pMTnvKWBXGFZJokq/CaVTBIXvMCySBlDnXXeankKSvLQzsVA1mnrQP6E46
E8BFCbTrsNXZxi1hehhCw2FBxTNMSQVnWGPl6XHZaPeWsHvNzTlRp2rkTVDwf+YX
W8uf7cldtk4BTMaSkMjmi4ccaV1c//ddqYgflj2xWHmV+IDW5hdW/xy7pAGvBwlp
TkL6HNE6dlN6lh5nbAK//ADlN9u7PI6ta9aBNTIFCK6HkOw1O9Osk5/jttqlQ13M
tYnIpvUt2BF99mj/xCCvAf9TAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUhtL4nKlk
hgO0ZgHsL+mOWnoLDyAwHwYDVR0jBBgwFoAUoqIX1KQS+1OPXJGjSzbOcYed22Uw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGOUIwLzE0Qzk0OTZFOUYz
RjExRUU4MDFCMUQ2MkM0RjlBRTAyL29xSVgxS1FTLTFPUFhKR2pTemJPY1llZDIy
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvb3FJWDFLUVMtMU9QWEpHalN6Yk9jWWVkMjJVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RjlCMC8xNEM5NDk2RTlGM0YxMUVFODAxQjFENjJDNEY5QUUwMi9FNUYyQ0EwMDlG
NDAxMUVFOEMxNkM3NkFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEASQytjAPBAIAAjAJAwcAIAEN801AMA0GCSqGSIb3DQEBCwUA
A4IBAQAZ1ISn8ZTYbPOW8aOUxfW9oMgQQAvvt3TqXh6v4s43hSAHpSc2Lmr1O8Y4
6aWs82Nwfyy8X1Pw5Z1YFXdGJMHi94FxofW57pOwT8XTj6AkyWxQwQwOaBXndlkN
G2kA19UhlJ/08eVhJwJqFIHo0gQ+FsdTl3GF1y9FFIp4tXTkK2pvwDm+TZeaiKmm
D7moRtC3FZAfXHUj27HX/C7gu/tGFuuVI3micaPq56SLTBYJ2tsB6ho69C25FDg/
vdw34L0QxO+EwdJW+KB/OI97vwcflQeGMdTrmdLzdAa+Wa7x3IrupgxN3UInXxz7
vFbfVtGSKWBx81SBMWfIKcLMqM8g
-----END CERTIFICATE-----