Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FD3627A6DF6111EDB8157C54C4F9AE02.roa
File:                     FD3627A6DF6111EDB8157C54C4F9AE02.roa (raw, json)
Hash identifier:          565hXETgq/VUoCM1pGc46ZNGXz9rUg9mdJJbj/2/m1o=
Subject key identifier:   A8:43:5D:57:23:98:4C:D9:C4:DC:D0:D8:43:8C:30:43:7C:E1:97:03
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0B2F
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FD3627A6DF6111EDB8157C54C4F9AE02.roa
Signing time:             Tue 25 Apr 2023 10:39:40 +0000
ROA not before:           Tue 25 Apr 2023 10:39:40 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     142127
IP address blocks:        180.178.184.0/24 maxlen: 24
                          180.178.185.0/24 maxlen: 24
                          180.178.186.0/24 maxlen: 24
                          180.178.187.0/24 maxlen: 24
                          223.29.224.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2863 (0xb2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Apr 25 10:39:40 2023 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=6447adec-9759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:99:c9:36:6d:ed:07:98:43:be:15:0e:c5:
                    11:1b:6e:bd:f5:fc:2d:6b:55:12:7a:73:8e:a2:fc:
                    7d:b2:99:7a:df:e9:02:06:ad:95:fe:17:c3:82:54:
                    6d:12:36:74:f8:4e:2b:64:ad:e1:28:0a:7d:d9:e6:
                    0b:87:ff:8d:8b:2e:c6:57:cf:c0:e9:11:51:ec:e5:
                    2e:ce:6c:78:f6:0c:e0:9b:51:61:8b:ab:15:5d:39:
                    78:62:db:5c:69:e4:e4:5a:eb:d1:5b:df:0b:45:a1:
                    f5:24:68:ac:d4:29:f8:5d:3e:22:df:6f:09:48:ee:
                    24:06:02:09:27:55:87:bf:fb:90:b3:34:a3:33:74:
                    d4:04:96:cc:d7:05:15:1a:cd:58:8a:8d:9d:30:e5:
                    29:8d:8e:99:3c:a9:08:cc:57:46:52:99:e2:93:43:
                    2b:26:e7:74:9c:0a:b6:b1:67:7c:ae:3a:c5:58:dc:
                    80:f7:4c:75:82:d5:85:3d:30:ca:d0:e4:fc:19:10:
                    b8:2b:ac:68:04:e4:1f:42:d6:18:c2:cb:9c:3c:76:
                    98:13:7c:2e:66:a6:26:f3:4e:13:ae:26:9d:45:80:
                    b7:aa:c0:e5:18:f5:d1:33:bc:1e:b6:1b:38:76:25:
                    da:e0:01:f9:49:96:79:37:48:22:f0:8c:b7:08:03:
                    ad:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:43:5D:57:23:98:4C:D9:C4:DC:D0:D8:43:8C:30:43:7C:E1:97:03
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FD3627A6DF6111EDB8157C54C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.184.0/22
                  223.29.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:4d:5c:61:99:fe:75:f6:ad:06:a5:d7:0d:83:68:4f:11:7c:
         74:95:02:ca:8d:15:07:85:87:0b:02:32:62:86:62:52:3c:82:
         ba:9d:71:54:b9:8a:e1:2f:e2:0d:ee:fc:fb:99:fb:ed:1e:e4:
         01:38:e1:ad:61:b9:6e:2d:c2:8d:c1:fe:85:58:43:6d:ec:a6:
         fd:28:a0:4e:8b:6c:84:c1:56:6f:cc:e4:bf:5b:60:3b:de:ab:
         ce:2e:4b:a1:d7:e9:f7:c3:0a:a7:87:7e:a4:14:64:d0:60:82:
         84:da:a2:d3:11:c5:05:31:c6:6f:e5:92:cf:cd:6a:0f:2d:0a:
         c2:70:78:1d:22:5a:53:ce:7b:e7:25:7a:04:df:f1:a9:87:c2:
         f7:2e:2b:66:53:4d:ac:16:d1:58:48:73:49:c6:88:e3:a0:17:
         c1:c9:6c:70:25:f6:a9:93:01:f3:5a:0c:ea:ea:ed:14:12:6b:
         30:08:0e:0c:e8:29:91:9c:db:ac:da:99:31:7b:17:be:a0:92:
         49:57:8f:c7:5e:7e:e5:9b:e8:93:04:4d:cf:9e:d0:9f:af:7c:
         e5:93:bc:fc:af:14:38:6d:26:32:10:59:56:93:4f:a5:e4:b2:
         ac:f1:49:38:db:d8:d4:cc:b6:f7:05:a6:51:1a:d3:56:f7:c0:
         67:98:e8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----