Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCA4/EED99E32CB7E11E8993D1776C4F9AE02/21990EE26A4F11EEBF117E0AC4F9AE02.roa
File:                     21990EE26A4F11EEBF117E0AC4F9AE02.roa (raw, json)
Hash identifier:          ppbDaBdY1D0IaRGJ2gpcxP2MvB41Z9KfOBOis9avuRU=
Subject key identifier:   0F:91:A9:10:98:BD:55:4D:CA:76:F9:5E:AF:A9:6D:38:5A:64:16:33
Certificate issuer:       /CN=A91FDCA4/serialNumber=762763B7D600972930E9DE7A1442C5D30F68C484
Certificate serial:       1167
Authority key identifier: 76:27:63:B7:D6:00:97:29:30:E9:DE:7A:14:42:C5:D3:0F:68:C4:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/didjt9YAlykw6d56FELF0w9oxIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDCA4/EED99E32CB7E11E8993D1776C4F9AE02/21990EE26A4F11EEBF117E0AC4F9AE02.roa
Signing time:             Sat 14 Oct 2023 05:04:19 +0000
ROA not before:           Sat 14 Oct 2023 05:04:19 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     57497
IP address blocks:        103.130.144.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4455 (0x1167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDCA4/serialNumber=762763B7D600972930E9DE7A1442C5D30F68C484
        Validity
            Not Before: Oct 14 05:04:19 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=652a2153-1ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fc:6d:a7:4e:b1:39:d9:3f:e3:fc:56:ff:25:
                    d8:e2:e8:1c:45:72:c8:24:47:76:c8:02:9e:4e:af:
                    60:0b:49:be:0b:b5:95:43:6d:f2:fd:71:3d:aa:b8:
                    36:90:94:99:04:25:25:91:6f:7a:39:3c:e2:f8:89:
                    c0:fd:8c:c9:94:09:dc:9c:31:41:04:3f:5e:02:61:
                    6e:02:4c:c3:98:d7:ab:0a:6d:23:6e:c5:9c:b3:b6:
                    2b:00:02:68:a9:6f:2f:c4:2d:a2:69:db:00:09:92:
                    df:be:7f:f3:17:e1:e0:39:bd:6e:68:40:3d:2e:89:
                    2a:8d:39:d0:67:d3:e6:98:f6:b1:03:e1:9b:fd:6f:
                    4e:ef:76:eb:e1:bc:13:56:1b:53:18:37:00:f0:62:
                    bf:64:67:2f:d4:c5:78:f8:e8:82:93:4c:3d:bd:57:
                    53:a5:fd:5c:17:12:96:30:e8:e9:70:e9:f9:1a:f5:
                    12:74:8f:b2:76:bf:79:39:df:7c:a6:5d:c6:d4:77:
                    fc:6b:42:e8:27:80:ef:76:d9:16:7b:52:7f:6b:5a:
                    26:c4:81:d4:94:6c:79:a5:c5:25:47:1f:02:09:6b:
                    36:a3:63:aa:11:94:9e:93:7a:42:93:94:70:d4:02:
                    7a:68:10:5e:c9:59:28:c6:b1:4e:6b:73:29:34:2e:
                    07:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:91:A9:10:98:BD:55:4D:CA:76:F9:5E:AF:A9:6D:38:5A:64:16:33
            X509v3 Authority Key Identifier:
                keyid:76:27:63:B7:D6:00:97:29:30:E9:DE:7A:14:42:C5:D3:0F:68:C4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDCA4/EED99E32CB7E11E8993D1776C4F9AE02/didjt9YAlykw6d56FELF0w9oxIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/didjt9YAlykw6d56FELF0w9oxIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCA4/EED99E32CB7E11E8993D1776C4F9AE02/21990EE26A4F11EEBF117E0AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:dc:7f:04:5a:d8:bf:ba:98:2c:08:d8:f2:f1:59:de:76:e4:
         87:67:b0:74:cc:15:3d:54:d3:88:99:5c:e3:a9:24:67:97:b3:
         9c:f4:10:10:e7:6d:fa:bd:d2:db:c8:5a:33:48:52:2a:2f:1e:
         f5:df:a0:72:d1:5e:82:24:04:87:a4:5d:32:47:fc:80:36:94:
         f2:3a:b1:64:a7:6f:75:dd:32:ea:37:44:97:f2:ca:05:c6:ba:
         c8:2d:6c:e7:3a:b6:6b:64:b0:1c:a8:f9:26:64:24:fa:52:9d:
         ee:c8:5f:04:8d:1f:48:d4:6c:14:5d:69:80:50:92:d9:ef:7b:
         1d:26:57:4d:0a:a1:ad:86:39:48:fe:ae:32:ae:84:ac:0e:eb:
         3a:00:44:ac:fa:cb:ee:04:ec:d3:fd:c6:d6:e4:31:92:b9:c8:
         e3:a3:3c:5d:eb:04:73:41:ca:45:8e:aa:47:80:81:0b:d8:8f:
         c3:2d:9d:36:00:a3:57:22:29:f2:63:56:db:1b:be:b8:63:16:
         ed:e7:15:56:1b:43:10:23:d3:db:cf:7e:02:dc:91:38:ae:9a:
         c6:df:8c:6f:12:8b:87:31:86:cb:da:85:59:48:a2:7a:fc:ed:
         94:fe:9f:39:f7:1d:59:9e:f6:08:cb:00:29:26:a6:fa:6d:b2:
         eb:6f:32:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----