Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/EF7A1702E8F411EDBC11CF6BC4F9AE02.roa
File:                     EF7A1702E8F411EDBC11CF6BC4F9AE02.roa (raw, json)
Hash identifier:          4tAmQ6eznHhfoymnzRFlpZj0lv81jBEyRTf7POSWQjY=
Subject key identifier:   4E:52:8F:34:E0:25:86:10:89:D0:8A:9B:07:93:C2:9B:4E:AA:0F:9E
Certificate issuer:       /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial:       03F0
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/EF7A1702E8F411EDBC11CF6BC4F9AE02.roa
Signing time:             Tue 02 May 2023 14:23:41 +0000
ROA not before:           Tue 02 May 2023 14:23:41 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     206003
IP address blocks:        2407:d340:7522::/48 maxlen: 48
                          2407:d340:8001::/48 maxlen: 48
                          2407:d340:9000::/36 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1008 (0x3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
        Validity
            Not Before: May  2 14:23:41 2023 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=64511cec-78a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3a:b5:2f:ee:56:fc:3b:56:b5:b4:6c:8b:b9:
                    77:b8:ad:09:d1:2d:29:c1:55:da:12:cd:cf:68:95:
                    11:07:b4:f7:b5:be:ae:c8:aa:42:e1:40:88:9b:2f:
                    78:af:27:7c:3d:94:36:7c:09:62:93:ac:93:90:1d:
                    e2:af:42:96:76:89:aa:8c:73:0c:da:fa:ce:bc:c8:
                    bd:13:b5:a1:8d:ee:9d:21:49:54:60:35:9e:06:f6:
                    4d:34:6f:9f:5f:76:60:13:79:13:d9:b3:6c:19:5c:
                    f8:7f:7b:06:5d:a9:d1:13:c7:4a:f5:0c:2a:11:53:
                    72:e8:71:9d:ed:26:a8:bb:d9:58:59:4e:4e:c6:26:
                    ce:4b:f2:5d:4d:9e:0c:c7:9c:78:a1:15:bd:76:aa:
                    8d:1d:98:b4:2f:70:66:1c:7d:46:de:74:ef:bd:9c:
                    63:58:71:d2:14:77:2d:7e:41:dc:2d:4a:d4:88:9b:
                    99:2e:44:14:9a:d4:c7:f3:8b:5f:2e:c6:fe:8e:5e:
                    85:41:d9:d5:1c:f9:13:d1:53:fa:ee:b1:d8:dc:bc:
                    f5:12:ea:a2:25:eb:e0:3b:d8:b4:e1:aa:6e:83:29:
                    0d:fd:5a:f0:65:52:45:07:23:a5:17:cd:51:18:f3:
                    c5:50:9d:d7:a2:ea:e1:48:46:79:dd:6b:fe:1b:4f:
                    ea:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:52:8F:34:E0:25:86:10:89:D0:8A:9B:07:93:C2:9B:4E:AA:0F:9E
            X509v3 Authority Key Identifier:
                keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/EF7A1702E8F411EDBC11CF6BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:d340:7522::/48
                  2407:d340:8001::/48
                  2407:d340:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1c:8f:de:21:67:6a:3f:07:29:c6:29:37:ab:ab:d4:73:3c:e4:
         10:b9:e5:be:46:2e:cd:46:0c:1d:53:6f:fd:65:ea:48:bf:b2:
         73:d6:44:c9:34:03:df:ea:7b:1a:be:30:74:af:20:c9:38:c7:
         ff:8e:fb:50:31:3f:ba:e5:b0:33:d3:42:23:78:31:a5:27:c5:
         9e:01:51:0e:e5:c1:05:80:73:67:a5:8b:3e:0e:ef:d7:a7:d2:
         51:70:b2:b3:24:09:e9:fc:13:81:31:3d:c6:6b:eb:52:04:bf:
         e9:b5:a5:50:03:cd:72:d5:24:b3:e2:8c:45:a9:4d:29:64:af:
         23:8a:54:97:a8:d8:51:92:c9:61:81:94:eb:3f:d9:5b:f6:33:
         51:e1:24:54:4b:23:cb:fb:a0:89:13:d3:28:c1:3a:fa:4d:8d:
         69:b0:03:8b:4e:ee:bb:c2:fb:51:51:c9:23:35:50:a6:62:42:
         5a:ba:14:32:0d:6e:a4:24:52:4b:e3:21:e0:8e:a6:f7:f6:c8:
         6a:b7:24:6f:2a:75:60:32:1f:dd:8a:32:0e:9e:9f:b8:7c:81:
         e5:54:cb:18:2b:c3:a6:6d:c0:ce:bc:5f:fe:d6:47:99:bd:ea:
         92:90:e0:ac:39:ea:d6:53:24:c7:8b:1a:24:e5:5f:f0:da:cd:
         f0:4e:1a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----