Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/55ACADBC3F4B11EE9252DC51C4F9AE02.roa
File:                     55ACADBC3F4B11EE9252DC51C4F9AE02.roa (raw, json)
Hash identifier:          qmeVR4PAuZqu1K1hoK/LHaXLLjlJ3ywo8VnV0DOKfK8=
Subject key identifier:   FC:5F:97:2B:01:BB:D1:E0:4F:95:30:B4:97:D5:B5:38:2B:8D:3E:5A
Certificate issuer:       /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial:       27A1
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/55ACADBC3F4B11EE9252DC51C4F9AE02.roa
Signing time:             Sun 20 Aug 2023 11:18:49 +0000
ROA not before:           Sun 20 Aug 2023 11:18:49 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     138195
IP address blocks:        122.254.64.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10145 (0x27a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
        Validity
            Not Before: Aug 20 11:18:49 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64e1f699-c3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8d:60:c4:cd:50:a1:ac:be:d6:34:a7:7a:e7:
                    a5:62:6c:5b:09:4f:28:30:6d:cf:33:54:38:45:f7:
                    4f:26:53:16:ea:c5:f7:07:dd:80:6f:50:d6:b3:0e:
                    67:c6:5a:4d:33:48:ba:78:c7:69:d9:0b:03:11:73:
                    12:36:4e:65:71:90:6e:d8:eb:5e:ac:69:56:bb:a5:
                    96:e9:01:20:51:cf:57:ad:9e:ec:68:5d:81:04:44:
                    fd:91:f0:b8:69:7f:08:56:73:ba:f8:28:44:a7:85:
                    4a:0b:df:6c:7e:87:88:f4:bb:f7:2c:c5:91:57:f9:
                    56:4c:01:3c:8b:f4:89:45:1c:53:b2:7a:00:25:f3:
                    8b:1c:d2:e0:82:2c:f9:90:6e:f8:e0:6a:51:e2:15:
                    c3:19:d6:ab:7e:77:35:38:60:04:5b:c1:7f:d2:d4:
                    cf:e1:44:db:4b:03:9e:ab:d8:b5:39:1d:fb:ec:b5:
                    c2:5f:f7:29:be:de:18:4d:06:00:0a:74:ab:fe:a1:
                    23:7c:85:ad:4d:7d:d6:fe:36:64:34:a4:dd:bc:1a:
                    fc:36:0a:a9:22:5f:49:7d:cb:68:cd:a3:d9:47:aa:
                    49:1f:5a:3a:82:29:1d:44:d0:f3:7d:1b:3a:9f:43:
                    fb:cd:ad:2b:e6:bf:eb:24:17:73:19:7e:7f:8b:c1:
                    76:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5F:97:2B:01:BB:D1:E0:4F:95:30:B4:97:D5:B5:38:2B:8D:3E:5A
            X509v3 Authority Key Identifier:
                keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/55ACADBC3F4B11EE9252DC51C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:3f:8b:76:04:26:69:8a:37:e8:06:98:bc:1b:a3:f5:67:b2:
         29:c4:3b:a4:5a:df:6d:45:2a:ad:0b:7c:28:b6:61:cd:e3:c0:
         5f:87:4b:a6:4a:99:09:d0:6b:43:bf:9e:ec:94:a8:6f:8c:1c:
         8e:4b:89:f8:8a:04:7f:ce:82:12:a1:5f:9a:2b:12:96:7f:d3:
         58:09:62:11:42:ed:35:03:38:02:ae:0b:ed:ff:91:56:67:78:
         bb:0a:1e:5b:f5:fe:89:02:5c:72:13:44:a6:d9:77:67:55:43:
         6c:ba:71:d7:ea:2c:26:05:55:c8:07:4f:b8:e4:70:99:44:b9:
         61:4b:5b:19:88:58:c7:76:b0:b4:d1:2c:c6:19:94:6b:b4:9d:
         99:58:7a:ff:94:3f:34:4f:6c:84:f8:70:91:1f:55:74:83:ae:
         44:c8:23:85:31:f1:d8:3a:bd:94:c6:f1:af:38:6e:4d:1d:fc:
         8e:a0:e1:ba:00:7d:8d:d5:60:2d:1a:ee:a1:08:b6:af:32:2e:
         6d:a5:f7:dc:ee:e3:6a:b9:6b:ce:02:77:46:43:a1:fa:f8:55:
         fd:c0:20:79:ee:35:c6:4e:26:ce:57:e0:f3:81:5f:70:bc:e7:
         ed:a9:84:27:3e:2e:fe:c7:ec:0e:90:59:29:12:93:cd:f2:04:
         fa:0b:56:dc
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJ6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3NDkxMTAvBgNVBAUTKEYwMEU3RTRDODA1M0NGRkEwNjhFQjczRTk1ODg5MkRE
OEJFNjFBOEMwHhcNMjMwODIwMTExODQ5WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGUxZjY5OS1jM2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2I1gxM1Qoay+1jSneuelYmxbCU8oMG3PM1Q4RfdPJlMW6sX3B92Ab1DWsw5n
xlpNM0i6eMdp2QsDEXMSNk5lcZBu2OterGlWu6WW6QEgUc9XrZ7saF2BBET9kfC4
aX8IVnO6+ChEp4VKC99sfoeI9Lv3LMWRV/lWTAE8i/SJRRxTsnoAJfOLHNLggiz5
kG744GpR4hXDGdarfnc1OGAEW8F/0tTP4UTbSwOeq9i1OR377LXCX/cpvt4YTQYA
CnSr/qEjfIWtTX3W/jZkNKTdvBr8NgqpIl9JfctozaPZR6pJH1o6gikdRNDzfRs6
n0P7za0r5r/rJBdzGX5/i8F22wIDAQABo4IClTCCApEwHQYDVR0OBBYEFPxflysB
u9HgT5UwtJfVtTgrjT5aMB8GA1UdIwQYMBaAFPAOfkyAU8/6Bo63PpWIkt2L5hqM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc0OS9CRDY0NDE5MDlG
QTQxMUU0QjhERkREMzdDNEY5QUUwMi84QTUtVElCVHpfb0dqcmMtbFlpUzNZdm1H
b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhBNS1USUJUel9vR2pyYy1sWWlTM1l2bUdvdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkU3NDkvQkQ2NDQxOTA5RkE0MTFFNEI4REZERDM3QzRGOUFFMDIvNTVBQ0FEQkMz
RjRCMTFFRTkyNTJEQzUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB6/kAwDQYJKoZIhvcNAQELBQADggEBAE8/i3YEJmmKN+gG
mLwbo/VnsinEO6Ra321FKq0LfCi2Yc3jwF+HS6ZKmQnQa0O/nuyUqG+MHI5LifiK
BH/OghKhX5orEpZ/01gJYhFC7TUDOAKuC+3/kVZneLsKHlv1/okCXHITRKbZd2dV
Q2y6cdfqLCYFVcgHT7jkcJlEuWFLWxmIWMd2sLTRLMYZlGu0nZlYev+UPzRPbIT4
cJEfVXSDrkTII4Ux8dg6vZTG8a84bk0d/I6g4boAfY3VYC0a7qEItq8yLm2l99zu
42q5a84Cd0ZDofr4Vf3AIHnuNcZOJs5X4POBX3C85+2phCc+Lv7H7A6QWSkSk83y
BPoLVtw=
-----END CERTIFICATE-----