Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/0E58C024B6B111EBA3D4E20FC4F9AE02.roa
File:                     0E58C024B6B111EBA3D4E20FC4F9AE02.roa (raw, json)
Hash identifier:          GOO4s+pzO/H8K5ZCN/cc/g2sO3D2xbr6BpuRiuAjU2A=
Subject key identifier:   31:9B:17:03:0C:ED:F8:41:22:0E:45:9E:19:08:AE:F5:54:D2:46:91
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       24C4
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/0E58C024B6B111EBA3D4E20FC4F9AE02.roa
Signing time:             Tue 02 Aug 2022 04:23:03 +0000
ROA not before:           Tue 02 Aug 2022 04:23:03 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     142030
IP address blocks:        2402:9e80:70::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9412 (0x24c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Aug  2 04:23:03 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=62e8a6a7-d4f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d0:4f:eb:96:b2:86:3a:8e:ba:3e:7c:8e:c8:
                    e7:ab:da:c0:91:61:40:d3:1b:d7:35:7e:85:0e:62:
                    91:4c:d9:e1:b7:fb:6c:a8:91:c7:ac:0f:76:a7:ac:
                    fe:1e:46:f0:1c:9c:82:9a:d1:e9:67:05:ac:35:3e:
                    a8:7c:0e:f9:95:19:78:56:81:d8:b9:d8:b7:b3:ba:
                    b8:f9:b9:ee:48:94:74:e9:92:b0:ee:4c:0f:45:d9:
                    75:a1:c8:1b:55:a9:c4:3b:48:d3:a6:53:4d:00:24:
                    96:3d:7a:9b:75:29:c2:c5:9a:04:45:e5:dc:17:aa:
                    e3:6b:c8:31:97:90:2c:1c:da:43:2c:e7:93:d6:e4:
                    2a:db:48:a4:62:44:02:00:77:b6:38:54:4c:fd:14:
                    f4:a1:e5:bd:8b:35:80:48:91:61:06:7f:17:99:78:
                    31:4c:32:7d:a8:79:f9:29:db:39:19:c7:58:12:17:
                    7c:d1:c1:72:5a:17:4d:ff:bf:a2:83:dc:ac:09:84:
                    59:49:2c:7a:f6:14:ff:a5:ec:a9:2f:ba:35:a0:1d:
                    ed:e5:87:19:42:b0:3f:7d:fb:77:98:9e:f9:1a:14:
                    14:fe:43:4a:66:47:18:23:c6:65:39:19:f4:6b:4e:
                    8d:3c:96:21:ee:3c:ff:25:a6:21:5a:f2:2c:d5:5d:
                    7f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9B:17:03:0C:ED:F8:41:22:0E:45:9E:19:08:AE:F5:54:D2:46:91
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/0E58C024B6B111EBA3D4E20FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:70::/48

    Signature Algorithm: sha256WithRSAEncryption
         d4:99:d4:88:91:03:68:36:1d:91:e2:ed:45:45:39:e7:75:2e:
         f1:62:99:76:ad:5e:4d:b3:22:00:80:cd:0a:76:ac:17:c1:15:
         a1:e1:34:ef:52:d2:2c:9c:84:8f:f3:ae:9d:e6:7e:9c:b3:7c:
         b1:13:c1:3d:84:da:8b:d3:46:97:6c:5f:81:00:31:66:df:d2:
         3f:cc:6d:ae:34:0e:54:d7:32:26:6a:53:2f:b1:e8:a9:20:18:
         46:4e:c4:21:ae:92:9d:4b:97:9f:8b:f9:62:c3:58:13:12:55:
         ee:9d:10:b1:4f:3b:e8:0c:cc:37:d3:a0:5c:58:46:e2:f2:98:
         09:97:7a:2d:34:4f:cb:c8:5c:43:55:de:64:22:c9:ea:67:cf:
         20:c9:8a:ba:28:4d:6f:8b:a6:84:95:0b:32:56:87:fe:3f:06:
         e2:bc:7d:0a:26:30:b7:68:83:a4:fd:2f:3a:be:ff:e5:c7:fe:
         77:f4:6b:91:f4:72:63:01:99:39:74:e2:42:00:e5:7e:2d:8f:
         2f:5b:54:53:87:8a:80:95:d5:56:7b:f5:e4:57:69:59:a9:3b:
         d1:95:0b:f7:5d:47:5d:94:6e:f7:39:92:ac:27:d2:e4:8b:2a:
         34:68:33:ee:da:b4:c1:fc:ec:a7:b7:ea:c2:f1:2a:5e:bd:81:
         6e:0e:73:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----