Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/312/GAjHeEY891Cz9B8mhXzFfA2k2d0.roa
File:                     GAjHeEY891Cz9B8mhXzFfA2k2d0.roa (raw, json)
Hash identifier:          G5lweNqGicojjrW78bKTK27m5rpZ5++ADPYDX0YWOx4=
Subject key identifier:   18:08:C7:78:46:3C:F7:50:B3:F4:1F:26:85:7C:C5:7C:0D:A4:D9:DD
Certificate issuer:       /CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Certificate serial:       1012
Authority key identifier: 85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/GAjHeEY891Cz9B8mhXzFfA2k2d0.roa
Signing time:             Fri 19 May 2023 05:53:32 +0000
ROA not before:           Fri 19 May 2023 05:53:32 +0000
ROA not after:            Wed 27 Mar 2024 01:13:10 +0000
asID:                     135373
IP address blocks:        112.73.0.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4114 (0x1012)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
        Validity
            Not Before: May 19 05:53:32 2023 GMT
            Not After : Mar 27 01:13:10 2024 GMT
        Subject: CN=1808C778463CF750B3F41F26857CC57C0DA4D9DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:96:01:f8:ba:3a:0d:53:17:fc:e9:ac:c7:ab:
                    0e:f9:31:a5:bc:79:ff:40:ee:f6:38:7c:62:47:42:
                    a7:ed:1f:01:21:ce:9c:ac:7f:18:d5:88:47:d9:3b:
                    cd:79:4c:76:61:a2:07:d6:05:97:99:17:a8:77:e1:
                    ba:29:0f:7a:8b:a0:9c:be:fb:a0:d7:e9:a1:c2:19:
                    93:d0:45:99:a2:39:6a:01:82:8d:51:d9:84:c5:ab:
                    b3:ca:fc:2d:22:01:a0:12:04:1d:8b:72:4f:56:4f:
                    d7:4c:68:3f:87:1f:30:91:d6:c7:4f:32:76:96:47:
                    54:32:60:57:6f:ed:0c:98:4b:ad:2a:fb:d6:50:6e:
                    d9:50:6c:96:c9:bb:f4:d9:91:19:51:2f:46:94:fb:
                    5e:69:9d:05:b7:a0:3a:bd:2c:d2:71:ee:14:ce:fd:
                    9c:e6:fd:88:a5:2e:f4:e0:34:0b:c3:a4:b1:7f:b8:
                    4b:89:60:1e:a1:b5:11:c8:59:c2:83:1f:43:9e:64:
                    85:4b:af:06:ec:36:a4:30:e8:75:06:46:7b:f6:5b:
                    92:bc:8e:eb:93:7d:80:e0:86:f8:d8:23:3b:91:00:
                    e6:5f:a4:c0:31:ed:8c:8f:a6:1e:0c:19:88:52:28:
                    01:2f:02:b9:46:76:97:7c:4e:4e:6f:31:dc:45:0b:
                    c1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:08:C7:78:46:3C:F7:50:B3:F4:1F:26:85:7C:C5:7C:0D:A4:D9:DD
            X509v3 Authority Key Identifier:
                keyid:85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/hfO_0aFAkMSCmloxOk0x-cyPMS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/GAjHeEY891Cz9B8mhXzFfA2k2d0.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.73.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:c4:26:e5:c8:56:7d:57:73:83:e5:52:22:2c:0e:52:0f:91:
         55:9a:20:2f:fe:c8:a7:af:a2:68:2d:d6:e2:6d:c4:f5:57:c4:
         8c:37:b7:fe:09:33:6d:dd:2e:05:c4:10:e7:f0:3e:8b:95:22:
         6c:44:fe:48:0a:d2:cd:29:a0:e5:dc:81:8c:f0:4f:b5:51:0b:
         06:a2:37:1b:75:ea:f7:ea:e9:35:5c:c2:d5:84:46:b0:9a:7b:
         4e:6b:97:8b:c6:ba:ab:38:9a:6c:84:b5:89:2e:04:91:f9:59:
         1d:00:be:40:6c:be:7f:45:a9:a7:d1:4c:7b:b0:fd:10:ce:2a:
         57:49:52:3d:48:34:80:fd:50:8e:12:c6:db:23:e1:af:ce:e0:
         90:13:11:e9:bd:68:4a:ca:80:30:97:b8:92:82:ea:26:7e:03:
         ec:c9:64:c3:9a:6a:2a:34:85:0f:c0:da:a5:7c:ed:58:71:59:
         e3:0d:fb:7c:45:01:28:c6:2a:23:2f:5b:6a:72:55:4c:27:5a:
         ba:eb:22:6d:71:6e:4d:da:3b:2a:4d:59:9e:75:28:b0:b6:33:
         e7:47:d8:88:22:04:73:2a:ee:ec:83:f6:b0:de:e5:9a:0b:12:
         17:c8:23:4c:1e:02:41:2c:55:bd:9b:b9:bb:5b:09:6b:13:a5:
         70:49:b2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----