Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7B959772EA3811EDB91E190BC4F9AE02.roa
File:                     7B959772EA3811EDB91E190BC4F9AE02.roa (raw, json)
Hash identifier:          dEDHthWmF65aHsQTHHk8y8LmbdK2y18Tn8X7wpmsSjk=
Subject key identifier:   2E:C9:27:56:A9:E1:31:C0:65:85:46:82:33:CE:52:D7:08:83:D1:E5
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0B61
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7B959772EA3811EDB91E190BC4F9AE02.roa
Signing time:             Thu 04 May 2023 05:19:32 +0000
ROA not before:           Thu 04 May 2023 05:19:32 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     142127
IP address blocks:        180.178.184.0/24 maxlen: 24
                          180.178.185.0/24 maxlen: 24
                          180.178.186.0/24 maxlen: 24
                          180.178.187.0/24 maxlen: 24
                          223.29.224.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2913 (0xb61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May  4 05:19:32 2023 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=64534063-5aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:26:e7:58:40:13:a6:92:ea:5d:3c:f4:04:52:
                    e4:9a:f8:18:bf:b4:c0:a0:29:f9:59:d4:b7:16:98:
                    4b:c3:e3:81:19:8b:af:38:2d:dc:c4:ec:86:60:d8:
                    6f:b3:4f:01:cb:84:87:75:db:46:67:1d:5c:6c:05:
                    e3:3f:f4:af:9a:93:3e:02:8b:99:9b:d7:b5:7a:97:
                    3a:a8:5d:62:3b:56:ab:aa:a6:3c:d8:ae:b6:89:79:
                    1e:74:9e:9f:dd:be:46:e7:2f:8b:1c:c8:40:22:c6:
                    0a:40:d2:ca:31:f8:72:32:d8:51:91:97:31:9a:c8:
                    a5:2c:10:b5:21:30:da:0d:3a:30:c2:79:b7:e3:33:
                    be:7f:a0:c8:d3:ed:cc:58:28:33:71:b0:fc:40:d8:
                    6b:dc:f0:53:59:6a:4f:c7:b5:5e:8f:44:d2:3c:b2:
                    84:e8:a7:1b:2b:a2:fb:8c:3a:19:52:66:8a:e5:2f:
                    cb:ed:91:ae:00:72:23:90:8e:c1:60:01:f4:87:58:
                    ae:60:f7:66:b1:bb:eb:64:d5:55:13:c0:40:28:e0:
                    5c:59:c2:b0:a0:06:17:33:55:14:39:c4:e3:9d:44:
                    cc:17:40:9c:d4:ba:a7:6d:74:36:03:9a:94:08:94:
                    cb:8f:48:61:ad:1e:b1:d5:c8:be:10:88:8b:9f:5c:
                    06:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C9:27:56:A9:E1:31:C0:65:85:46:82:33:CE:52:D7:08:83:D1:E5
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7B959772EA3811EDB91E190BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.184.0/22
                  223.29.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:d1:8b:73:cc:17:bd:05:0c:07:e0:c1:d8:c7:06:8a:0c:51:
         4b:58:fa:ec:1c:52:83:c8:4b:ba:f3:ed:72:e9:1e:dd:19:7f:
         da:b7:85:16:77:1c:39:f5:bb:a5:bd:d6:ab:11:d0:d3:48:87:
         ba:d8:28:69:3d:cb:ad:91:2e:16:e5:7a:98:70:9a:10:1f:fd:
         72:59:ea:b8:9a:e7:f7:7c:45:63:93:a5:2d:39:dd:4d:cf:26:
         e5:41:b5:bb:47:52:58:81:39:7a:07:8c:04:31:dc:69:84:41:
         08:ed:41:c2:d2:c0:17:5c:a8:3b:d5:a0:f5:35:17:2b:13:6b:
         dd:b2:bd:95:e9:d5:5b:4c:5e:d5:97:74:f7:a9:c6:42:b4:5d:
         fb:24:a1:69:a0:3b:a7:02:9e:57:70:a0:a7:3c:be:e0:4b:b6:
         c1:e0:48:ae:4e:2f:72:95:01:72:94:74:cb:06:d1:2a:38:d1:
         5e:73:27:d8:fa:02:51:ac:df:0b:41:8c:a1:43:b9:ab:17:ba:
         28:50:7f:c7:c0:b2:7a:2d:11:8e:d4:78:fb:0f:fe:17:76:ca:
         cb:ae:f1:9f:fe:da:f9:99:4d:5a:c2:63:3b:a8:62:da:20:11:
         f7:b4:99:2d:ad:27:58:95:5f:72:f8:bd:e2:7f:20:e7:96:d2:
         5e:a4:d4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----