Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6E3D/F5B37EEE225B11E2B3438FBC08B02CD2/E4C4C8C4B0EA11E5A2DD683CC4F9AE02.roa
File:                     E4C4C8C4B0EA11E5A2DD683CC4F9AE02.roa (raw, json)
Hash identifier:          F57cCPfwGEXgd/ugPD/JWilhJ/d69b8FurZCOpZzobo=
Subject key identifier:   91:F0:22:BB:B3:F6:B3:42:D9:75:6E:67:26:94:87:40:71:F9:98:89
Certificate issuer:       /CN=A91E6E3D/serialNumber=088F03E652D84BC6B39B348E801029BB9AA160D1
Certificate serial:       32C7
Authority key identifier: 08:8F:03:E6:52:D8:4B:C6:B3:9B:34:8E:80:10:29:BB:9A:A1:60:D1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CI8D5lLYS8azmzSOgBApu5qhYNE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6E3D/F5B37EEE225B11E2B3438FBC08B02CD2/E4C4C8C4B0EA11E5A2DD683CC4F9AE02.roa
Signing time:             Thu 12 Jan 2023 15:50:57 +0000
ROA not before:           Thu 12 Jan 2023 15:50:57 +0000
ROA not after:            Sun 31 Mar 2024 00:00:00 +0000
asID:                     38590
IP address blocks:        192.138.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12999 (0x32c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6E3D/serialNumber=088F03E652D84BC6B39B348E801029BB9AA160D1
        Validity
            Not Before: Jan 12 15:50:57 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=63c02c61-bd1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3e:3a:08:1c:d6:54:a4:cb:47:9c:a6:cc:85:
                    41:a4:7b:1e:4d:25:d4:6f:47:89:11:3d:aa:8e:a6:
                    11:ec:49:77:96:17:8d:29:48:13:42:50:a8:4b:10:
                    57:2d:d3:b8:93:a8:b5:c3:82:3f:b7:30:6e:a4:73:
                    33:c4:a2:09:70:b5:88:dc:3d:7f:62:bd:03:c6:e9:
                    54:ce:e2:ef:fb:b3:b3:3d:f0:d6:fd:14:8c:15:c0:
                    ea:54:e4:14:68:ae:cc:14:ba:34:25:53:f5:50:a8:
                    93:9b:b4:da:14:61:5c:6c:7b:5a:c0:fe:f6:bb:e6:
                    c8:d2:12:63:2d:aa:35:97:c1:95:04:17:d9:6a:6b:
                    9c:f0:b9:d3:88:f1:e4:46:63:30:9c:f0:a2:66:1c:
                    fb:45:4b:46:7f:7a:b6:f8:52:8f:55:43:b9:19:b6:
                    4d:5d:e8:64:6e:aa:f3:ea:22:22:30:69:bd:d6:11:
                    74:ba:bc:7a:ef:d8:e0:69:ae:07:4c:bc:02:11:cd:
                    b7:1d:bf:ec:ea:ae:7a:bc:93:77:ae:85:0d:a2:e5:
                    7a:d1:fa:86:7f:cd:0a:96:aa:ec:b8:92:87:95:d8:
                    15:b9:0a:ab:f1:ba:93:a6:dd:71:25:94:9e:ad:88:
                    0b:67:d3:89:23:7a:45:0a:24:4d:03:45:2e:4d:31:
                    97:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F0:22:BB:B3:F6:B3:42:D9:75:6E:67:26:94:87:40:71:F9:98:89
            X509v3 Authority Key Identifier:
                keyid:08:8F:03:E6:52:D8:4B:C6:B3:9B:34:8E:80:10:29:BB:9A:A1:60:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6E3D/F5B37EEE225B11E2B3438FBC08B02CD2/CI8D5lLYS8azmzSOgBApu5qhYNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CI8D5lLYS8azmzSOgBApu5qhYNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6E3D/F5B37EEE225B11E2B3438FBC08B02CD2/E4C4C8C4B0EA11E5A2DD683CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.138.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:d0:31:a4:1d:82:83:18:7f:26:35:8d:bc:b4:f9:13:cb:8c:
         27:1b:ad:54:e7:47:06:87:c2:1c:f5:6a:69:29:a4:0e:98:94:
         73:54:07:8b:13:ed:ae:09:eb:05:dd:c9:db:9f:d7:ac:84:63:
         c3:a9:55:77:c9:1c:14:b0:da:e5:0d:22:1b:4c:81:ba:0d:b9:
         ea:db:78:fc:f1:4f:28:b8:f2:d5:6d:25:e8:98:59:60:f3:86:
         1d:46:9d:8b:3d:93:70:ba:aa:e4:70:e4:6a:88:7c:b7:36:72:
         cc:45:6a:9a:b4:d1:ed:d9:36:4e:63:96:a2:c5:47:4d:50:28:
         36:e8:83:98:d6:f4:0f:5f:c5:40:be:92:d0:75:43:26:ba:17:
         59:b8:28:df:ea:6b:bf:65:88:0d:c2:90:7f:fe:59:ce:69:7c:
         1e:bd:9d:fa:c5:f3:97:73:d9:37:ae:ec:9a:9d:87:21:65:98:
         de:27:ad:e2:ac:c6:1b:f8:af:3f:8b:b6:a0:e2:76:9d:41:86:
         12:99:97:a8:3e:28:5a:a9:a8:2b:14:1c:fd:2c:77:c0:97:4e:
         6f:7d:55:25:03:b7:38:88:17:51:7b:74:f4:ee:d6:ec:88:dc:
         6e:55:99:84:bb:9e:83:06:e0:92:68:ea:5a:95:6e:ef:ff:b8:
         67:81:a0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----