Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/F2AF92160D9511ED8F09C27DC4F9AE02.roa
File:                     F2AF92160D9511ED8F09C27DC4F9AE02.roa (raw, json)
Hash identifier:          FjJexzuMDNYni3jKqzl9ZCNzbo8VUVup+gXKu9qAv5M=
Subject key identifier:   E2:0F:51:15:4E:E4:C5:2C:0A:0A:62:49:E0:7B:3A:39:08:00:F8:71
Certificate issuer:       /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial:       2624
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/F2AF92160D9511ED8F09C27DC4F9AE02.roa
Signing time:             Wed 27 Jul 2022 10:21:59 +0000
ROA not before:           Wed 27 Jul 2022 10:21:59 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     212238
IP address blocks:        122.254.116.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9764 (0x2624)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
        Validity
            Not Before: Jul 27 10:21:59 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62e111c7-95d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6c:f6:eb:45:ca:ad:11:1b:0d:3c:64:82:e3:
                    de:e9:9e:29:51:b6:e7:30:bc:78:1a:34:40:bd:ea:
                    91:f2:e0:2d:67:e9:4c:04:e4:c3:56:46:46:f0:65:
                    4d:f6:42:de:6d:da:89:28:ac:b8:b0:87:40:a1:a9:
                    71:5a:bd:b1:b8:76:16:9c:55:18:ca:6c:4c:0c:81:
                    d2:88:ab:2a:dc:50:a8:d8:a0:b8:f7:b6:f5:ec:18:
                    c0:42:7b:dc:f8:99:f8:32:b2:b6:ff:6b:4e:13:b7:
                    c2:75:05:00:07:55:5e:9e:35:db:aa:b3:d8:b4:7e:
                    d7:42:28:86:c4:0f:59:8b:b2:92:8c:41:03:11:03:
                    88:fc:b0:30:7f:45:2f:d5:8b:6a:ff:51:4d:b9:32:
                    ff:f4:2c:eb:2a:1a:6b:0a:b8:bd:fa:03:7d:ef:ce:
                    2d:8f:18:b1:2a:11:b1:a4:ef:ce:f7:25:7c:fd:6a:
                    9f:1e:79:a4:ae:97:01:35:bb:e1:4a:36:1f:cf:6e:
                    d4:18:2a:8f:5e:ae:8f:dc:05:82:21:80:36:f6:ba:
                    8e:5a:20:4c:61:47:cc:5c:d7:82:c6:2e:28:91:49:
                    82:13:82:3e:63:75:96:0b:3a:90:47:9b:61:7b:49:
                    71:a9:07:35:9f:fa:ef:58:e9:9c:25:95:55:7b:a3:
                    ad:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0F:51:15:4E:E4:C5:2C:0A:0A:62:49:E0:7B:3A:39:08:00:F8:71
            X509v3 Authority Key Identifier:
                keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/F2AF92160D9511ED8F09C27DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d7:3c:03:e2:5f:30:af:ee:57:f4:86:6a:b0:50:e1:77:2d:e6:
         ee:8a:2b:ab:af:5a:42:49:ff:5a:cc:a2:18:77:3f:6c:92:8c:
         2a:10:11:25:69:f5:2e:8a:a5:0d:dd:c6:25:eb:53:67:e4:04:
         a9:c7:ca:93:30:c1:fe:29:6f:87:9a:dc:0c:14:b2:e9:25:f0:
         02:d0:ae:fb:b9:3f:62:d7:b3:22:84:18:8a:f0:4b:54:15:9a:
         1b:24:df:2f:e1:87:77:b6:4a:b7:d4:a3:de:2b:37:0c:4d:1d:
         f6:f9:f2:fb:7f:86:ac:15:85:81:fe:9b:d9:c3:ca:52:c3:d5:
         70:86:ce:a6:35:3e:8d:92:ba:61:a7:e3:a1:b2:17:40:ee:a1:
         38:6a:94:21:5e:b0:11:f1:d5:8d:ee:2f:61:12:e1:5f:eb:79:
         ed:79:bf:67:05:59:4d:f1:9d:6e:2c:95:92:f6:8c:8f:09:86:
         e2:05:59:0b:c5:b9:f6:48:c0:95:49:7a:7f:2b:54:0b:96:65:
         80:6b:5b:21:2d:0a:31:52:80:c6:a8:e1:e3:d0:d3:9c:c6:b4:
         f6:c8:5e:3a:cf:1b:59:ba:45:8a:3e:53:e2:11:50:7f:2d:6e:
         24:3b:20:87:7e:81:05:55:05:f3:ac:0f:4b:0b:27:f4:c4:92:
         2c:04:85:03
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3NDkxMTAvBgNVBAUTKEYwMEU3RTRDODA1M0NGRkEwNjhFQjczRTk1ODg5MkRE
OEJFNjFBOEMwHhcNMjIwNzI3MTAyMTU5WhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmUxMTFjNy05NWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtWz260XKrREbDTxkguPe6Z4pUbbnMLx4GjRAveqR8uAtZ+lMBOTDVkZG8GVN
9kLebdqJKKy4sIdAoalxWr2xuHYWnFUYymxMDIHSiKsq3FCo2KC497b17BjAQnvc
+Jn4MrK2/2tOE7fCdQUAB1VenjXbqrPYtH7XQiiGxA9Zi7KSjEEDEQOI/LAwf0Uv
1Ytq/1FNuTL/9CzrKhprCri9+gN9784tjxixKhGxpO/O9yV8/WqfHnmkrpcBNbvh
SjYfz27UGCqPXq6P3AWCIYA29rqOWiBMYUfMXNeCxi4okUmCE4I+Y3WWCzqQR5th
e0lxqQc1n/rvWOmcJZVVe6OtQwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOIPURVO
5MUsCgpiSeB7OjkIAPhxMB8GA1UdIwQYMBaAFPAOfkyAU8/6Bo63PpWIkt2L5hqM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc0OS9CRDY0NDE5MDlG
QTQxMUU0QjhERkREMzdDNEY5QUUwMi84QTUtVElCVHpfb0dqcmMtbFlpUzNZdm1H
b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhBNS1USUJUel9vR2pyYy1sWWlTM1l2bUdvdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkU3NDkvQkQ2NDQxOTA5RkE0MTFFNEI4REZERDM3QzRGOUFFMDIvRjJBRjkyMTYw
RDk1MTFFRDhGMDlDMjdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJ6/nQwDQYJKoZIhvcNAQELBQADggEBANc8A+JfMK/uV/SG
arBQ4Xct5u6KK6uvWkJJ/1rMohh3P2ySjCoQESVp9S6KpQ3dxiXrU2fkBKnHypMw
wf4pb4ea3AwUsukl8ALQrvu5P2LXsyKEGIrwS1QVmhsk3y/hh3e2SrfUo94rNwxN
Hfb58vt/hqwVhYH+m9nDylLD1XCGzqY1Po2SumGn46GyF0DuoThqlCFesBHx1Y3u
L2ES4V/ree15v2cFWU3xnW4slZL2jI8JhuIFWQvFufZIwJVJen8rVAuWZYBrWyEt
CjFSgMao4ePQ05zGtPbIXjrPG1m6RYo+U+IRUH8tbiQ7IId+gQVVBfOsD0sLJ/TE
kiwEhQM=
-----END CERTIFICATE-----