Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A34159123D9211EDBF4D9F7DC4F9AE02.roa
File:                     A34159123D9211EDBF4D9F7DC4F9AE02.roa (raw, json)
Hash identifier:          iQhA6Iin/NhV+9TpVAQ3teVoLqT3f1xqSfEytVWzuec=
Subject key identifier:   F4:92:BB:9A:3E:CE:90:32:EF:7C:BC:3B:E9:8B:D8:EA:AB:CB:55:C4
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0956
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A34159123D9211EDBF4D9F7DC4F9AE02.roa
Signing time:             Mon 26 Sep 2022 11:59:13 +0000
ROA not before:           Mon 26 Sep 2022 11:59:13 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     397373
IP address blocks:        115.167.56.0/22 maxlen: 24
                          175.110.80.0/22 maxlen: 24
                          175.110.84.0/22 maxlen: 24
                          202.92.18.0/24 maxlen: 24
                          202.92.19.0/24 maxlen: 24
                          202.92.20.0/24 maxlen: 24
                          202.92.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2390 (0x956)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Sep 26 11:59:13 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=63319411-dde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6c:39:8e:ee:8c:e9:23:f9:e9:75:80:8e:8d:
                    a4:27:09:6e:43:ca:02:35:14:c1:d8:f2:2f:35:34:
                    7a:39:29:4a:36:df:1f:25:72:4e:40:6d:8d:3a:6e:
                    f3:68:b2:91:d8:81:40:49:38:c8:f0:fb:10:ae:d4:
                    78:9d:51:a6:07:d2:da:22:14:82:01:4f:8e:7e:10:
                    89:09:3b:48:0d:dc:cd:65:34:2f:89:e9:98:af:46:
                    cb:14:68:b0:3d:58:d2:3c:5c:8d:3d:fe:b2:83:e8:
                    31:d2:86:ba:34:50:79:3a:89:ac:83:18:87:37:47:
                    c4:a5:a0:2a:6d:59:13:96:a3:a1:44:75:46:70:d6:
                    d1:df:fa:be:9f:a1:91:2c:b7:0a:0e:82:24:1b:23:
                    83:51:32:ce:44:69:73:5a:89:4f:1e:86:c9:d8:bd:
                    94:af:99:ff:c6:bf:83:ad:86:df:2d:c8:32:f8:de:
                    77:b3:f7:a6:fc:ba:24:5f:d5:33:2d:ea:49:de:6f:
                    a7:f8:ab:b4:5a:22:21:c0:a5:47:ff:de:1e:63:28:
                    5b:79:19:4d:6e:e0:dc:52:61:b6:6c:db:c4:ea:30:
                    76:a3:89:b8:09:0a:f9:f4:72:53:58:ca:1d:04:49:
                    6a:9a:98:a5:f4:38:e8:4e:66:a4:1e:33:e6:25:c8:
                    0a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:92:BB:9A:3E:CE:90:32:EF:7C:BC:3B:E9:8B:D8:EA:AB:CB:55:C4
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A34159123D9211EDBF4D9F7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.56.0/22
                  175.110.80.0/21
                  202.92.18.0-202.92.21.255

    Signature Algorithm: sha256WithRSAEncryption
         b8:9a:eb:7b:1e:ec:49:c2:5d:01:cd:85:2a:98:fd:27:ee:0e:
         f8:36:e1:8f:75:3f:99:2d:d3:5b:5c:02:36:e7:bd:38:a1:85:
         33:59:96:01:03:8a:bd:21:9b:9e:d6:e5:ac:50:0a:b4:ec:be:
         46:e8:30:19:51:27:bd:de:ad:1b:90:cc:87:41:d5:4b:59:8e:
         9c:38:46:d5:10:ad:ce:44:af:2f:be:f6:d2:c3:a8:b8:cb:37:
         f5:83:23:8b:32:29:70:25:36:30:b9:c9:cd:58:bb:b7:0b:d7:
         52:c7:78:47:8a:60:a2:f1:76:dd:e7:d9:6f:3e:20:5c:0d:bf:
         51:f2:7c:4f:d1:e3:3f:fa:0a:ca:1b:c3:46:47:3c:63:e7:1e:
         60:4a:57:fb:d3:33:c2:a5:5c:04:df:8e:05:12:79:63:9b:01:
         ae:39:11:c8:90:2c:e5:84:1e:ee:83:28:23:4e:fb:34:13:21:
         75:60:aa:96:a6:7e:de:23:4d:84:fd:1c:d2:06:85:74:cc:75:
         37:52:b2:53:f7:b6:ea:5d:07:d2:3b:38:60:eb:93:a3:25:08:
         98:b0:78:47:06:20:46:fa:69:71:8b:c9:97:ee:7b:c2:e1:6a:
         fb:6c:ed:08:85:80:10:9c:ee:d7:2f:7e:43:f6:82:a1:76:aa:
         1b:dc:1a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----