Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EB22C65A510511ECB3B1A47AC4F9AE02.roa
File:                     EB22C65A510511ECB3B1A47AC4F9AE02.roa (raw, json)
Hash identifier:          jNL0LA9MxNiAmwnyyu3si7R+Ldbw+3JfQDoh/2+ATks=
Subject key identifier:   7E:71:C2:A5:26:31:B5:DA:36:1C:DD:0E:D8:A2:27:71:A7:C1:B9:E0
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0A57
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EB22C65A510511ECB3B1A47AC4F9AE02.roa
Signing time:             Sun 14 May 2023 22:14:44 +0000
ROA not before:           Sun 14 May 2023 22:14:44 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     142634
IP address blocks:        2406:840:e240::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2647 (0xa57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 14 22:14:44 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64615d54-a34c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d9:87:8c:80:63:21:74:10:50:9f:be:c8:83:
                    22:6e:a4:37:47:71:d2:ab:3f:28:5d:ef:c5:36:b2:
                    6b:f7:4b:b3:e2:54:b1:01:04:f0:8d:a0:87:23:2e:
                    fc:6b:67:de:d4:06:19:2a:49:9f:54:b3:3e:f0:49:
                    37:9a:fd:3c:4a:83:df:52:42:1c:9a:1f:11:51:e0:
                    f7:e6:d7:c9:fa:00:e5:7b:d5:f9:9c:28:4c:20:de:
                    75:f0:72:a6:10:79:b2:8a:31:d5:65:73:de:27:f3:
                    be:6b:5a:15:05:4d:7c:ab:28:32:d6:48:11:75:ce:
                    b0:b4:3a:f5:e2:d1:71:14:ed:80:e1:37:1f:1a:c7:
                    42:46:4f:29:1b:9f:ad:32:6a:ca:95:f8:f6:51:44:
                    07:71:e5:b2:ec:c5:4d:bc:4c:29:b9:91:57:64:46:
                    8e:12:0d:bb:45:15:44:fa:94:d1:18:f1:eb:c8:c5:
                    ac:f7:47:87:ec:22:30:8c:d0:3f:8e:75:24:64:c3:
                    8b:76:de:6b:3e:94:a2:fe:49:18:8c:d9:e3:4a:b1:
                    cd:04:f7:d9:bc:d4:2f:61:7f:52:d5:82:4b:fd:13:
                    6e:63:54:23:c8:69:b5:82:ac:2f:67:3f:80:43:c3:
                    6e:0f:c9:81:b5:89:68:1a:1a:e0:54:64:6a:4b:02:
                    14:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:71:C2:A5:26:31:B5:DA:36:1C:DD:0E:D8:A2:27:71:A7:C1:B9:E0
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EB22C65A510511ECB3B1A47AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:e240::/44

    Signature Algorithm: sha256WithRSAEncryption
         8e:23:d6:c4:5c:4c:29:76:50:91:43:dc:07:54:d0:7a:ae:26:
         22:49:70:89:73:bb:b0:31:67:49:ad:5d:d3:42:0a:90:3b:a8:
         1d:63:98:f7:f8:2d:db:ec:f9:f8:ef:2b:a9:b5:4d:bd:d6:f2:
         57:7a:a5:3b:b5:c0:0b:d4:29:54:b7:f9:42:d6:7b:04:71:c3:
         48:f5:d5:2c:6b:17:c3:96:6e:16:fe:9d:09:b8:65:9f:66:98:
         87:2b:94:2a:25:57:9c:a9:2a:93:b4:57:10:21:70:ed:44:ae:
         b9:7c:98:9e:c0:6d:87:e2:27:83:04:cd:17:93:ba:38:bc:6c:
         94:0e:3c:7a:97:21:36:1c:e2:ec:1a:53:c6:56:e5:1c:56:44:
         b5:fd:bd:96:57:f3:b5:fc:f1:32:c0:22:59:33:bd:cd:4f:94:
         91:aa:44:f6:8a:65:27:58:1f:b9:b6:45:69:3a:23:e3:c6:79:
         1d:1a:08:5a:1d:4e:3c:d4:07:c9:0c:ff:54:02:bb:5d:18:14:
         49:75:5e:49:09:3c:d6:8f:dc:88:4a:e4:63:a8:1a:0a:71:cc:
         74:bb:b4:21:70:e4:a3:d5:ad:00:88:29:05:d7:e1:15:97:b3:
         75:7d:99:19:fd:f4:f1:fa:6f:0e:cd:7f:ba:65:30:c6:0c:44:
         4a:9b:d3:88
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICClcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjMwNTE0MjIxNDQ0WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDYxNWQ1NC1hMzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq9mHjIBjIXQQUJ++yIMibqQ3R3HSqz8oXe/FNrJr90uz4lSxAQTwjaCHIy78
a2fe1AYZKkmfVLM+8Ek3mv08SoPfUkIcmh8RUeD35tfJ+gDle9X5nChMIN518HKm
EHmyijHVZXPeJ/O+a1oVBU18qygy1kgRdc6wtDr14tFxFO2A4TcfGsdCRk8pG5+t
MmrKlfj2UUQHceWy7MVNvEwpuZFXZEaOEg27RRVE+pTRGPHryMWs90eH7CIwjNA/
jnUkZMOLdt5rPpSi/kkYjNnjSrHNBPfZvNQvYX9S1YJL/RNuY1QjyGm1gqwvZz+A
Q8NuD8mBtYloGhrgVGRqSwIUsQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFH5xwqUm
MbXaNhzdDtiiJ3GnwbngMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvRUIyMkM2NUE1
MTA1MTFFQ0IzQjFBNDdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQkBghA4kAwDQYJKoZIhvcNAQELBQADggEBAI4j1sRcTCl2
UJFD3AdU0HquJiJJcIlzu7AxZ0mtXdNCCpA7qB1jmPf4Ldvs+fjvK6m1Tb3W8ld6
pTu1wAvUKVS3+ULWewRxw0j11SxrF8OWbhb+nQm4ZZ9mmIcrlColV5ypKpO0VxAh
cO1Errl8mJ7AbYfiJ4MEzReTuji8bJQOPHqXITYc4uwaU8ZW5RxWRLX9vZZX87X8
8TLAIlkzvc1PlJGqRPaKZSdYH7m2RWk6I+PGeR0aCFodTjzUB8kM/1QCu10YFEl1
XkkJPNaP3IhK5GOoGgpxzHS7tCFw5KPVrQCIKQXX4RWXs3V9mRn99PH6bw7Nf7pl
MMYMREqb04g=
-----END CERTIFICATE-----