Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A28AC0CC64D811EDA41EF047C4F9AE02.roa
File:                     A28AC0CC64D811EDA41EF047C4F9AE02.roa (raw, json)
Hash identifier:          GkPj13Nz5X/agRKOp7JTzf2AgRt93GlR4kLzD4Qs8Cg=
Subject key identifier:   CF:40:74:76:18:AD:BB:04:00:60:95:DF:75:65:3D:14:1F:20:62:3D
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       09CE
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A28AC0CC64D811EDA41EF047C4F9AE02.roa
Signing time:             Tue 15 Nov 2022 11:28:32 +0000
ROA not before:           Tue 15 Nov 2022 11:28:32 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     138985
IP address blocks:        115.167.124.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2510 (0x9ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Nov 15 11:28:32 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=637377e0-2e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3c:21:f6:16:0a:98:2d:48:8e:ee:a7:8d:24:
                    d8:5e:aa:3b:69:c8:6f:c7:b8:5e:95:2e:67:d3:e7:
                    fd:ea:a9:d2:cb:7c:dc:59:a5:e5:77:57:f1:c9:3d:
                    3b:e5:6f:8e:69:2e:5c:36:83:6e:40:23:aa:a0:e4:
                    ca:f0:86:20:03:c0:61:14:4d:58:b7:b1:56:85:f4:
                    e5:17:84:18:76:e1:02:81:42:7a:44:16:5a:f7:61:
                    38:56:f7:d8:3c:9c:6b:51:20:a6:0c:28:db:82:b7:
                    89:f5:64:9e:f7:34:6f:c5:24:22:59:aa:d5:5d:ea:
                    d5:6e:4e:0c:8a:27:be:d7:0f:d4:06:d2:e6:e4:15:
                    95:97:1e:37:83:5b:cc:46:9f:17:bb:9d:63:7f:22:
                    12:71:e3:18:fa:a0:43:3b:8e:84:d1:59:62:a8:c1:
                    51:87:68:d9:1f:fc:c9:62:50:50:20:54:16:a7:6c:
                    f8:3c:03:e8:f2:17:f3:ba:df:4e:f2:99:69:dd:1f:
                    54:31:a9:2e:02:b8:da:7f:a5:97:3e:98:15:a2:21:
                    5a:51:2e:0f:70:eb:68:86:45:82:c1:ce:2b:12:73:
                    da:1d:8b:84:d0:10:ec:b8:12:23:fc:9c:9b:a7:88:
                    64:f3:79:99:bf:de:d1:55:ec:28:0e:f1:49:1c:eb:
                    f4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:40:74:76:18:AD:BB:04:00:60:95:DF:75:65:3D:14:1F:20:62:3D
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A28AC0CC64D811EDA41EF047C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:df:9d:6b:71:1f:e8:c3:01:bc:40:17:47:96:8b:1d:47:d3:
         7b:cb:4f:81:c3:45:b4:0a:05:e5:d7:99:7b:35:23:25:b2:f4:
         a1:f2:4e:bc:48:d3:7c:13:2a:7f:08:1b:ab:9f:8f:e1:87:cb:
         c3:98:dd:0c:35:4f:87:e2:88:a5:a6:0d:8c:8f:14:a0:10:4f:
         6f:fc:67:82:99:86:5f:9c:31:b4:f1:2b:ee:67:40:1f:15:97:
         d4:51:d2:d0:05:b0:04:72:19:b4:9e:3b:f1:8a:f2:75:b2:c9:
         af:07:b8:2b:ae:d0:9b:18:a3:b6:c3:9f:91:f8:4b:15:e8:9c:
         9f:99:df:1b:d7:17:dd:e4:74:b3:6c:92:4a:fe:e5:67:8a:e7:
         2a:56:95:25:22:d9:3e:a6:9c:a4:50:71:b7:77:81:2d:1b:3d:
         d0:b7:0b:fa:86:bc:1f:81:f1:ac:0d:06:de:a6:74:18:03:8d:
         44:93:d4:d8:1e:52:d4:88:86:ea:72:27:a4:22:c2:73:a0:d6:
         d8:c9:0b:b8:e1:99:ce:f9:f7:b0:e5:10:b7:5a:a9:b2:6c:69:
         e6:9f:02:97:bb:13:5d:1d:e1:0f:c1:69:0f:6a:a5:c4:e8:67:
         47:1d:8f:76:98:46:5a:5d:81:ec:d8:a0:fe:47:b4:1c:d3:ed:
         b5:d6:b4:9f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjIxMTE1MTEyODMyWhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzczNzdlMC0yZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwjwh9hYKmC1Iju6njSTYXqo7achvx7helS5n0+f96qnSy3zcWaXld1fxyT07
5W+OaS5cNoNuQCOqoOTK8IYgA8BhFE1Yt7FWhfTlF4QYduECgUJ6RBZa92E4VvfY
PJxrUSCmDCjbgreJ9WSe9zRvxSQiWarVXerVbk4Miie+1w/UBtLm5BWVlx43g1vM
Rp8Xu51jfyISceMY+qBDO46E0VliqMFRh2jZH/zJYlBQIFQWp2z4PAPo8hfzut9O
8plp3R9UMakuArjaf6WXPpgVoiFaUS4PcOtohkWCwc4rEnPaHYuE0BDsuBIj/Jyb
p4hk83mZv97RVewoDvFJHOv0zQIDAQABo4IClTCCApEwHQYDVR0OBBYEFM9AdHYY
rbsEAGCV33VlPRQfIGI9MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQTI4QUMwQ0M2
NEQ4MTFFREE0MUVGMDQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABzp3wwDQYJKoZIhvcNAQELBQADggEBAHffnWtxH+jDAbxA
F0eWix1H03vLT4HDRbQKBeXXmXs1IyWy9KHyTrxI03wTKn8IG6ufj+GHy8OY3Qw1
T4fiiKWmDYyPFKAQT2/8Z4KZhl+cMbTxK+5nQB8Vl9RR0tAFsARyGbSeO/GK8nWy
ya8HuCuu0JsYo7bDn5H4SxXonJ+Z3xvXF93kdLNskkr+5WeK5ypWlSUi2T6mnKRQ
cbd3gS0bPdC3C/qGvB+B8awNBt6mdBgDjUST1NgeUtSIhupyJ6QiwnOg1tjJC7jh
mc7597DlELdaqbJsaeafApe7E10d4Q/BaQ9qpcToZ0cdj3aYRlpdgezYoP5HtBzT
7bXWtJ8=
-----END CERTIFICATE-----