Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/01D8B33660F611ED8F48E24AC4F9AE02.roa
File:                     01D8B33660F611ED8F48E24AC4F9AE02.roa (raw, json)
Hash identifier:          s7J5+lvtmU3oiLl3Bjaps3D8/P5aKpLBENvYkdKIiQY=
Subject key identifier:   1C:29:09:D6:7F:ED:5F:B3:9E:79:D0:33:E4:EF:2B:B1:43:35:C3:F6
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       09B8
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/01D8B33660F611ED8F48E24AC4F9AE02.roa
Signing time:             Thu 10 Nov 2022 12:48:43 +0000
ROA not before:           Thu 10 Nov 2022 12:48:43 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     15083
IP address blocks:        115.167.8.0/22 maxlen: 24
                          115.167.100.0/22 maxlen: 24
                          175.110.64.0/22 maxlen: 24
                          175.110.88.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2488 (0x9b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Nov 10 12:48:43 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=636cf32b-abb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c0:a4:df:f0:25:49:b5:5c:8f:ad:1c:c6:04:
                    ed:c3:fb:13:25:67:a3:a0:a8:e5:f6:8a:6f:f2:a6:
                    ac:3d:6f:87:58:36:61:74:66:9f:df:c8:35:10:52:
                    38:10:35:4d:57:b9:06:64:3e:9e:10:5d:e8:20:c0:
                    cc:36:49:a2:82:3a:94:5e:08:35:a5:2e:42:e4:d1:
                    52:d6:dd:92:9b:09:59:59:43:38:c5:e8:da:b3:e9:
                    33:70:b6:5a:1a:10:a9:8e:48:1b:b9:90:c8:e2:06:
                    97:f0:5f:25:1d:4c:62:d4:70:f2:f6:cd:10:69:23:
                    23:35:80:1c:0a:f6:62:6d:ad:8d:1e:dd:e5:0e:7f:
                    06:a0:88:ed:29:55:06:90:39:ab:8a:65:9f:db:12:
                    6c:98:2d:c7:b8:09:0b:20:df:c1:ef:45:5a:6e:f4:
                    30:bf:d4:c2:70:05:e9:22:a6:06:12:f9:d6:9d:07:
                    2c:14:04:5c:06:b2:ce:f4:bb:1d:60:a7:50:72:6a:
                    e3:8c:35:80:dd:44:1b:d2:32:ed:0c:c2:0b:4c:55:
                    8c:d4:53:7e:a4:33:08:5a:0b:9c:fe:02:3e:3b:fc:
                    40:0a:17:e3:98:6a:41:e2:fb:3c:0d:bc:4a:26:cf:
                    da:84:c7:46:46:f3:d7:cb:d9:c0:6f:f4:70:9c:11:
                    1b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:29:09:D6:7F:ED:5F:B3:9E:79:D0:33:E4:EF:2B:B1:43:35:C3:F6
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/01D8B33660F611ED8F48E24AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.8.0/22
                  115.167.100.0/22
                  175.110.64.0/22
                  175.110.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:37:1f:8e:1b:2b:73:da:b4:18:34:16:96:20:2c:b2:4d:ef:
         ed:66:68:14:32:4b:77:57:7e:df:5d:b9:f9:3b:38:e1:26:33:
         7a:9a:03:18:15:f1:79:7a:19:48:a6:83:80:34:5d:bc:ce:e9:
         d6:13:62:37:d3:b2:3e:f7:53:0e:20:94:be:9a:df:58:1d:02:
         7c:b7:18:93:eb:36:81:8b:95:24:f3:73:97:97:29:a0:a7:a2:
         db:92:eb:05:49:81:69:4e:e9:66:93:3c:01:9a:fc:73:dd:53:
         27:c3:ca:60:56:93:1c:a7:27:0f:c4:8e:e2:7f:b8:67:9b:94:
         57:a3:69:c1:ab:a5:05:d8:05:f8:b4:88:1a:88:f0:6a:74:6a:
         30:77:5d:9a:45:64:8e:be:fc:4c:8e:96:66:37:1d:8f:e2:46:
         a4:2c:15:fe:74:cf:b9:27:e3:a6:a1:fa:5d:ad:85:c6:55:94:
         ef:a9:c7:21:72:d6:43:27:51:d8:9c:38:4a:52:30:0b:00:72:
         41:fc:eb:72:de:b8:b0:d9:8f:d6:f1:bd:7f:54:c5:52:22:ff:
         93:cb:7d:a1:27:5b:07:98:89:47:4d:f3:83:a5:a6:ca:63:47:
         8f:34:29:f8:1a:83:ee:a6:63:ad:3e:1b:6e:9d:21:04:0c:76:
         fb:a6:82:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----