Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BCE6C1B8DE9B11EDAA652A2AC4F9AE02.roa
File:                     BCE6C1B8DE9B11EDAA652A2AC4F9AE02.roa (raw, json)
Hash identifier:          3LAr698KKAy3vtLvLSMZ4DcXX5+YErY3Y+GxzMCCJoU=
Subject key identifier:   3B:19:09:1F:5B:7E:E5:5C:00:6B:A5:F6:C5:18:9F:F5:A3:A8:1A:9F
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0AEF
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BCE6C1B8DE9B11EDAA652A2AC4F9AE02.roa
Signing time:             Wed 19 Apr 2023 10:19:59 +0000
ROA not before:           Wed 19 Apr 2023 10:19:59 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     149009
IP address blocks:        180.178.150.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2799 (0xaef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Apr 19 10:19:59 2023 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=643fc04f-2a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b3:91:67:73:e9:41:6d:de:89:92:1c:a9:30:
                    20:45:ce:94:ac:97:37:b8:21:95:ef:38:13:c6:1f:
                    7c:81:98:c6:2e:53:41:ea:71:39:b8:67:81:5c:0f:
                    ad:b4:e1:45:88:f4:fc:0e:e5:8b:1f:dd:9a:8a:4c:
                    64:75:45:ee:e0:2c:d0:48:50:4e:22:b9:28:26:86:
                    9e:c4:56:6a:18:9a:d0:95:a3:d8:de:b4:d9:e4:c5:
                    d9:df:61:73:05:e8:2b:9a:fb:bc:1e:82:15:18:53:
                    b2:ba:0a:d1:de:a3:5c:4a:21:d9:de:ac:4c:1d:76:
                    45:d3:75:7f:5b:75:ba:c3:8f:16:c6:4f:b0:1f:d8:
                    ec:ba:ac:65:cd:28:39:e4:34:49:3b:ce:39:4b:c0:
                    73:ad:64:f9:12:05:e7:d3:70:34:38:8e:16:d9:68:
                    0b:3b:5b:05:88:5d:50:f7:76:d3:a1:6a:66:2f:29:
                    25:cb:72:3b:bf:3a:94:43:f1:b1:eb:7e:86:c2:10:
                    03:89:05:87:f3:0e:be:f2:0f:4f:26:b8:f0:e4:9c:
                    5b:a7:a8:b5:9f:50:06:82:67:18:da:78:fe:e9:72:
                    51:a8:21:9e:2a:47:fd:85:20:69:f7:53:50:8d:8f:
                    a0:d5:68:a0:39:d1:ba:80:75:31:7e:f4:fa:27:d4:
                    fe:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:19:09:1F:5B:7E:E5:5C:00:6B:A5:F6:C5:18:9F:F5:A3:A8:1A:9F
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BCE6C1B8DE9B11EDAA652A2AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:cf:19:26:4d:d5:87:b9:b2:69:92:c4:52:92:fa:8a:f9:ba:
         4d:f8:e7:76:38:02:03:d5:eb:97:cb:78:c1:5b:b1:78:25:0f:
         a6:1a:54:b0:8e:fb:da:2e:55:b0:8c:fe:ff:4b:30:94:e3:1e:
         c9:56:b6:ae:e6:a8:c2:7a:68:70:27:9f:82:68:07:6b:48:fe:
         e7:44:30:fb:25:41:23:68:4a:a0:01:4c:57:3e:fa:df:19:28:
         0c:7c:ac:c7:82:9e:ae:5d:04:f8:a8:cb:fe:9e:cd:e0:0c:e5:
         5d:82:fa:e6:7a:48:a8:44:dc:22:48:d6:db:c9:96:4a:64:ef:
         b6:cb:81:0f:de:c9:33:36:84:7c:22:71:2d:89:2b:ea:38:71:
         f5:74:b2:f4:f9:86:47:32:1e:3a:5f:69:19:4d:ca:89:9c:30:
         53:02:b3:7e:93:b7:39:29:ca:c0:91:f1:53:34:59:33:3f:9c:
         01:a9:d2:06:0d:41:59:29:a3:df:42:f8:a4:78:30:01:76:e3:
         0e:80:9b:ad:d5:3a:df:cb:f7:ff:dd:ea:5f:77:80:fd:37:a0:
         a3:52:6e:8c:c1:cd:0f:ef:4b:c4:93:c6:dd:08:1d:da:3b:63:
         db:60:89:00:5c:d1:5b:62:92:90:09:c8:cd:37:b7:51:cd:95:
         d8:ff:91:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----