Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/3788B3EE3CDA11EE9124E057C4F9AE02.roa
File:                     3788B3EE3CDA11EE9124E057C4F9AE02.roa (raw, json)
Hash identifier:          wvHHAfkSrCpNtKzjkna//gtsZsuUP9QLcCbEVIg7vJI=
Subject key identifier:   C8:20:6A:33:C9:5F:A2:CB:A6:87:86:E4:90:16:DB:61:70:FD:29:FF
Certificate issuer:       /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial:       0154
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/3788B3EE3CDA11EE9124E057C4F9AE02.roa
Signing time:             Thu 17 Aug 2023 08:44:03 +0000
ROA not before:           Thu 17 Aug 2023 08:44:03 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     21859
IP address blocks:        103.26.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
        Validity
            Not Before: Aug 17 08:44:03 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64ddddd3-7478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:51:bf:8f:84:99:81:7c:45:5b:e5:14:43:e8:
                    cc:18:0a:eb:c9:9f:97:09:b5:d6:39:f4:d6:aa:08:
                    bc:4d:ed:cc:0a:f2:62:b9:73:5d:68:39:d1:64:43:
                    5b:ed:0d:ca:fb:b9:c9:af:7d:1b:b2:94:04:89:1f:
                    03:7b:9d:e2:1b:0c:aa:3e:99:2b:3b:c7:75:0b:38:
                    f5:54:73:34:27:23:ce:16:bc:9f:b5:f2:e4:46:44:
                    00:84:c3:2c:0b:fd:d6:ab:94:1e:13:a5:da:6a:bf:
                    33:3f:6a:1e:78:13:55:4f:a5:b4:ed:8d:4e:13:a2:
                    bd:62:58:8c:1b:90:16:f0:61:71:f2:5b:cf:32:e4:
                    ba:35:c2:c7:f6:04:cd:4e:c4:65:7a:db:e7:ec:cd:
                    f6:7e:3c:1f:b0:b4:18:60:42:7c:b6:29:1d:65:a2:
                    17:ff:04:63:a0:72:5d:64:ff:b7:58:b5:3a:bb:42:
                    89:d2:a5:58:ef:f4:16:b6:1d:d7:1d:44:84:52:53:
                    ce:c5:14:1e:51:ac:9a:90:10:47:6c:f7:d7:e5:01:
                    47:55:d3:5d:e8:7e:00:a7:2e:e5:74:da:87:0b:cd:
                    1f:51:b3:5b:e0:92:53:da:96:a6:85:e6:8e:0a:34:
                    66:ef:1e:23:f0:7c:36:7d:fc:4a:7b:de:e2:a4:7e:
                    48:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:20:6A:33:C9:5F:A2:CB:A6:87:86:E4:90:16:DB:61:70:FD:29:FF
            X509v3 Authority Key Identifier:
                keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/3788B3EE3CDA11EE9124E057C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:78:48:6b:1c:c7:97:03:88:e9:35:34:3d:06:b5:54:92:5b:
         00:b9:1c:b6:84:e5:2d:40:bf:1c:66:c1:28:36:b5:07:98:fd:
         3f:d6:56:0a:21:d1:d2:68:91:91:23:66:c9:f2:62:71:a5:c1:
         fe:0f:2c:31:ca:83:2a:24:47:26:b2:a9:46:2f:72:af:ff:e6:
         f2:78:73:a3:57:73:2c:d7:a7:21:9a:04:1c:72:0f:06:a4:a8:
         2b:9b:63:cf:79:69:c7:f1:99:08:4b:fb:b4:63:79:fc:65:87:
         60:54:d8:69:06:f8:ed:25:4a:68:0d:df:19:b9:e6:e7:44:5b:
         23:24:d5:6d:7b:be:3f:b5:49:f4:9f:29:72:6a:2b:1c:10:8b:
         9b:1a:9e:3d:1f:d8:ac:12:f1:ff:1c:f9:5d:77:3b:22:f2:01:
         ec:4e:2b:85:d3:e4:c0:18:70:f7:92:b0:ae:54:0b:83:6d:cd:
         06:a4:2f:5e:34:56:33:39:61:02:7a:5e:72:47:fb:c7:99:45:
         04:fa:3f:7c:a1:b9:d0:37:98:d1:62:11:10:4d:a3:f5:f3:9c:
         fa:1b:3f:e2:a3:5a:31:42:b9:3f:3b:0e:25:0c:7e:e1:b0:4a:
         79:92:cc:40:79:31:8f:3d:6c:73:e5:43:e0:5e:35:cf:a4:65:
         8a:73:13:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----