Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/761FBE36813711ED82FB2D45C4F9AE02.roa
File:                     761FBE36813711ED82FB2D45C4F9AE02.roa (raw, json)
Hash identifier:          DvZMJ5BluzNVjbLoMwmiuFX2eADPrC+scpTq6Qm46mg=
Subject key identifier:   B8:0A:E6:D1:4E:E2:5B:1E:35:BC:B9:F3:AA:00:E8:16:A5:17:7B:A7
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0AD5
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/761FBE36813711ED82FB2D45C4F9AE02.roa
Signing time:             Tue 01 Aug 2023 14:04:19 +0000
ROA not before:           Tue 01 Aug 2023 14:04:19 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     32167
IP address blocks:        2406:840:e911::/48 maxlen: 48
                          2406:840:fa80::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2773 (0xad5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Aug  1 14:04:19 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64c910e3-703d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b1:08:5a:0e:1b:5f:50:02:6e:aa:3b:c4:f1:
                    3a:c8:0f:ff:8b:e9:5f:ea:0d:c7:7a:cd:22:85:3e:
                    cf:f0:0d:6e:ab:c9:13:8b:0b:b4:22:48:d0:81:21:
                    ff:1e:02:c7:5f:c8:6d:9e:50:cf:a3:13:c2:2a:9c:
                    94:3f:62:c9:02:1d:c1:58:a0:49:5b:af:93:dc:cd:
                    c9:e2:0d:f2:30:c8:82:e9:57:de:53:ef:96:3b:03:
                    9e:94:35:e0:9f:52:73:34:77:7a:c2:b4:64:03:0b:
                    a3:f2:89:b8:83:42:05:ce:a8:9e:d6:f1:a1:82:a4:
                    24:a2:f9:e2:a9:ad:8c:9f:51:6e:42:72:44:7b:66:
                    81:60:db:b0:86:9a:12:81:e1:87:14:4d:cb:de:7c:
                    d0:7c:7b:95:76:49:9c:90:19:a5:53:d8:53:04:82:
                    96:78:12:6c:d5:7d:20:da:6d:6b:20:f8:3c:0b:43:
                    6f:25:5f:17:59:c6:2d:24:ab:1d:3e:6d:5e:a5:aa:
                    c9:47:8a:9c:29:77:f2:73:4b:cc:87:20:6c:f7:a7:
                    c3:38:28:88:ed:ca:3d:21:c6:d3:4c:69:9e:70:e3:
                    04:f7:52:cd:d6:50:63:22:77:a1:0b:31:12:12:41:
                    d9:f5:77:ad:0f:ca:05:bc:1c:0a:78:e2:b3:f7:8b:
                    bf:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0A:E6:D1:4E:E2:5B:1E:35:BC:B9:F3:AA:00:E8:16:A5:17:7B:A7
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/761FBE36813711ED82FB2D45C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:e911::/48
                  2406:840:fa80::/44

    Signature Algorithm: sha256WithRSAEncryption
         53:c6:55:d8:65:7c:3f:ab:ef:1b:9d:d9:f9:42:84:4a:2e:44:
         69:d6:d0:6a:d2:8c:79:bf:11:6f:b3:c8:80:6e:96:af:6c:46:
         b8:5b:8c:10:98:e8:72:14:1b:f7:51:0b:f4:a6:a0:c0:90:18:
         b3:43:ff:e0:06:2a:30:c5:f8:b1:89:cc:f6:9a:9e:55:eb:39:
         01:92:ed:b7:aa:c9:7a:d9:60:70:63:b7:fa:97:4f:ba:09:cc:
         07:59:17:e9:19:74:7b:1a:c0:25:81:bf:f8:50:24:50:dc:8a:
         fb:d0:54:83:30:d4:a8:34:3e:00:77:79:2e:d5:2e:c0:43:1e:
         e7:40:8c:65:f7:17:9b:64:25:c6:5a:0d:75:a8:01:f3:2c:47:
         1e:8d:0f:a1:01:d2:43:38:fb:fb:ae:d8:4b:4f:c2:c4:12:24:
         39:7e:fb:fd:bb:d1:90:53:fc:ed:b4:5e:51:d2:53:d5:33:a0:
         75:dc:b8:08:fa:80:c7:bb:9d:0b:a7:9d:cb:fa:a1:ec:72:b4:
         3a:53:c7:5a:8e:e5:20:a8:ff:69:2c:fe:90:95:59:95:e8:38:
         07:b6:3a:a0:0c:e9:a4:a5:e3:a2:0d:6a:85:cf:51:5d:33:37:
         1f:48:be:98:3f:e3:87:af:c7:ed:eb:a4:8e:07:25:f3:43:d8:
         7b:6a:c4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----