Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/368C42ACBA5111EBA647D43EC4F9AE02.roa
File:                     368C42ACBA5111EBA647D43EC4F9AE02.roa (raw, json)
Hash identifier:          x/TH7xVc8Ii0tDQCttpXfJRBRpkWxjwOvWSvHtnkkaM=
Subject key identifier:   BB:9B:B0:48:E2:7B:FC:37:06:41:14:46:8B:2B:4B:C0:4D:5B:A6:C9
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0A51
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/368C42ACBA5111EBA647D43EC4F9AE02.roa
Signing time:             Sun 14 May 2023 22:14:37 +0000
ROA not before:           Sun 14 May 2023 22:14:37 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     142266
IP address blocks:        2406:840:fec0::/46 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2641 (0xa51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 14 22:14:37 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64615d4d-2792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:be:ea:8a:aa:58:59:c7:3b:91:13:3a:58:e7:
                    25:88:01:f8:76:bf:7f:1f:a1:3d:a8:e4:d1:28:31:
                    54:32:16:fb:99:55:eb:de:e8:dd:f0:bd:17:90:04:
                    63:8d:e2:d0:97:3c:6e:ec:45:6c:2e:0e:fc:4f:31:
                    45:60:ef:57:a2:5c:cc:fc:25:1d:21:ab:87:48:55:
                    28:eb:08:05:1d:b3:ba:c9:23:6f:e1:8d:9e:15:13:
                    f4:c1:2a:ef:f9:53:68:0b:42:3f:59:30:62:19:e2:
                    61:db:4f:05:be:e7:3f:00:64:50:41:c5:fd:9d:e8:
                    da:1e:bf:ec:f1:3c:01:4c:b5:12:97:16:6f:7b:7b:
                    2d:96:48:d7:1f:11:c5:65:83:c5:78:19:77:5e:73:
                    3f:bb:86:0f:71:e5:6f:b0:d0:be:8d:aa:a7:de:6b:
                    96:2e:57:63:2d:14:0d:80:f8:78:03:7d:8c:9b:58:
                    41:58:3d:42:80:08:d6:fa:0f:1a:e0:14:47:eb:7c:
                    f1:68:c9:30:bc:88:6a:74:9c:5d:d0:c8:c4:a7:47:
                    92:28:47:01:07:fb:ed:5a:a3:f9:a8:d9:e2:94:df:
                    8a:6f:91:5e:0d:df:6d:b0:ea:93:69:51:f0:78:7c:
                    0f:59:e0:d3:4b:d0:71:99:ef:9d:01:d8:86:1a:85:
                    fe:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9B:B0:48:E2:7B:FC:37:06:41:14:46:8B:2B:4B:C0:4D:5B:A6:C9
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/368C42ACBA5111EBA647D43EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fec0::/46

    Signature Algorithm: sha256WithRSAEncryption
         0f:f2:77:79:c3:45:1e:1d:24:c1:42:b8:4e:6c:46:9e:07:60:
         96:a4:a3:07:be:ec:43:52:12:53:80:c7:8b:3d:a5:cf:f2:02:
         2f:3f:3c:fa:83:76:f5:df:81:7e:41:bd:8c:73:0c:b7:72:82:
         85:d6:75:b5:94:a2:ac:0e:ef:5a:95:13:11:7d:2b:b0:58:ca:
         93:f1:45:5d:b7:98:49:1c:f1:eb:fd:c2:4b:b5:a6:d4:fa:f7:
         50:3c:dd:00:d1:0c:9f:98:f2:fe:f2:2a:96:7e:41:c8:7c:38:
         6c:5d:5b:5c:b9:f5:2d:a0:5c:db:98:5f:3d:96:bd:ca:40:a2:
         6a:b0:ec:77:8b:9c:e8:a9:19:ad:32:72:dc:b0:f0:21:a5:81:
         ab:e2:8c:73:8c:81:a6:52:7d:ea:73:6c:9e:7e:eb:29:a0:fa:
         1a:a4:7a:aa:6e:d6:8c:18:4a:da:a5:06:d8:5a:9e:24:e8:e0:
         12:20:d5:62:f2:60:28:6f:29:51:c3:74:2c:93:8f:6a:21:61:
         21:44:d5:59:6f:76:91:be:f1:c7:33:18:40:10:d3:24:2e:d6:
         f2:1a:4c:a2:3c:c0:fe:be:aa:3a:f4:15:3d:b8:56:eb:1a:3c:
         be:bb:a0:4e:72:65:9c:79:e0:ae:f1:00:8b:b8:53:43:ac:b8:
         42:07:4e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----