Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5F248038C07E11ECB0707F18C4F9AE02.roa
File:                     5F248038C07E11ECB0707F18C4F9AE02.roa (raw, json)
Hash identifier:          3hA+vkCHriX3cgqoqQbIIqc+yNADSrQdZoypOjCWaQs=
Subject key identifier:   E5:94:C6:CF:85:F7:95:F4:B0:7A:95:6D:0A:38:77:93:3C:11:6B:1A
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0796
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5F248038C07E11ECB0707F18C4F9AE02.roa
Signing time:             Wed 01 Jun 2022 11:27:18 +0000
ROA not before:           Wed 01 Jun 2022 11:27:18 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     201106
IP address blocks:        115.167.124.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1942 (0x796)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  1 11:27:18 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=62974d16-ee54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7b:0f:3f:cc:d8:fe:e1:33:9c:9a:0c:8d:1c:
                    f6:aa:ec:dd:10:e4:3b:11:b3:40:42:d7:dc:bb:b1:
                    7a:63:67:d9:90:37:50:6d:36:d2:e6:21:a6:a2:7a:
                    8a:88:79:4f:aa:8d:e2:26:e7:17:0d:5f:33:cd:cb:
                    50:ba:a6:b7:b0:70:3f:2d:73:fe:cd:95:9c:f6:80:
                    32:fe:2c:82:bf:3e:6f:a5:a5:a4:4c:31:3c:3c:dd:
                    27:10:60:09:f4:20:94:b2:e0:87:30:56:a9:a3:5a:
                    16:1b:f1:4d:77:15:77:8d:de:c3:19:e2:8d:0d:f5:
                    7b:62:b1:94:61:42:fa:9e:d1:74:39:81:b9:30:58:
                    7e:f1:d5:16:27:b4:97:d4:69:b5:62:c3:ce:09:ec:
                    c9:3e:7e:e3:79:c7:01:d6:77:ff:b1:93:77:49:d6:
                    da:91:6b:db:56:0d:a0:db:69:4a:2a:e9:f9:8e:6e:
                    39:04:7d:76:09:41:df:e6:42:f7:4a:9a:ae:77:0f:
                    ae:0b:67:2c:5f:c0:f0:67:55:b4:57:0f:01:6b:dd:
                    06:78:8f:1f:1c:a4:a3:20:11:94:81:af:7e:8c:c2:
                    3b:28:e6:9a:e5:93:35:dd:16:35:7f:d2:ca:97:fc:
                    72:e8:b4:bb:aa:fe:ca:8d:7d:19:cc:77:99:31:2e:
                    58:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:94:C6:CF:85:F7:95:F4:B0:7A:95:6D:0A:38:77:93:3C:11:6B:1A
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5F248038C07E11ECB0707F18C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:62:2b:27:fc:93:35:0d:65:40:d5:dc:ee:fc:81:15:31:11:
         c0:dc:97:63:56:4d:47:e0:3a:c2:44:cf:02:a6:02:c3:2c:c0:
         33:d8:04:5e:7b:71:05:f8:99:dd:3c:04:5c:e7:c8:7c:a6:a9:
         94:c1:d3:8d:7e:6b:7c:bf:1d:b5:7b:4d:30:0a:93:86:a5:8e:
         c0:f7:4b:74:b5:0d:88:4a:eb:d3:34:b3:8f:3e:a2:e2:fd:68:
         e4:bc:cb:83:5b:4a:41:14:b2:7e:e2:6c:cd:42:57:b1:63:70:
         62:b1:89:be:0f:c8:87:39:08:5c:03:08:59:39:37:55:a6:50:
         13:bd:c6:6a:eb:15:da:8d:4e:68:d9:cf:c3:dc:89:7e:08:25:
         bc:e7:de:59:98:68:33:3f:2b:ea:eb:77:06:6a:a1:1d:17:a1:
         ff:62:4a:ae:0b:c5:9f:32:1c:e4:e7:df:0c:43:e8:3d:33:76:
         58:7c:cb:67:31:fd:91:d4:ef:68:bb:f9:e7:0d:6f:02:2e:93:
         90:26:90:27:a2:61:c4:bf:c6:10:74:15:ba:9c:09:34:c8:8c:
         5c:dc:15:66:ed:0f:fb:dc:ff:bf:94:73:ad:52:f9:ba:89:ab:
         6d:e6:d1:21:91:e2:b3:f7:14:8f:13:87:2d:53:28:62:5b:79:
         fa:d1:f2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----