Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/FAD902E2860B11EAA83B7B38C4F9AE02.roa
File:                     FAD902E2860B11EAA83B7B38C4F9AE02.roa (raw, json)
Hash identifier:          hcrsRMBNE6GsuwohfpzKD6o7Hdx9Z8dBkR2VBh05Ax4=
Subject key identifier:   B7:D8:4A:B8:07:C2:BC:80:6B:0E:7C:9C:53:43:DB:62:38:3B:31:0C
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0A71
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/FAD902E2860B11EAA83B7B38C4F9AE02.roa
Signing time:             Sun 14 May 2023 22:15:16 +0000
ROA not before:           Sun 14 May 2023 22:15:16 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     208698
IP address blocks:        2406:840:eee0::/43 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2673 (0xa71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 14 22:15:16 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64615d74-9664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ab:24:da:d7:2a:eb:24:1f:fb:fe:bc:e4:9e:
                    67:fc:35:6a:ad:39:2d:6e:62:f9:6b:f8:51:79:e1:
                    07:c5:ac:fb:74:69:40:a5:8b:cf:86:59:8b:be:26:
                    e7:d4:da:17:19:ca:a9:0a:63:5f:eb:4e:7a:31:a5:
                    2a:c5:da:0d:dd:c6:ac:95:f8:5f:ca:3b:46:1b:f1:
                    5b:85:a7:a3:c8:f1:96:1c:72:f7:2f:bc:43:6f:6f:
                    12:ca:2d:db:c2:24:02:b7:b0:f2:7c:f1:e2:2b:d9:
                    98:2e:3c:a2:a6:23:a4:43:2b:11:54:f3:0a:3f:bb:
                    a2:9a:4e:d2:fe:31:62:d5:2f:ff:d9:c5:ed:65:19:
                    52:8c:e9:e4:8d:85:5a:c1:de:0c:db:1d:7f:37:46:
                    78:ca:31:21:0e:20:43:70:26:44:e0:a6:5a:d9:2f:
                    fe:c5:f6:ea:f4:b4:16:94:c1:95:35:ba:83:77:9a:
                    1f:0b:b0:e8:f3:bc:f4:67:8d:b3:c1:b6:bd:c6:f8:
                    5a:57:89:d7:e5:7a:d8:11:71:a7:68:6f:80:22:c4:
                    dd:0b:3d:68:2c:45:67:32:36:63:9e:fc:d8:07:b1:
                    1b:b5:49:0d:5f:80:9d:4d:ec:c4:ad:31:96:c4:d4:
                    5e:fd:0c:c6:a6:b3:68:6d:86:09:84:7d:53:4c:71:
                    33:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D8:4A:B8:07:C2:BC:80:6B:0E:7C:9C:53:43:DB:62:38:3B:31:0C
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/FAD902E2860B11EAA83B7B38C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:eee0::/43

    Signature Algorithm: sha256WithRSAEncryption
         30:68:71:9d:05:00:0e:77:d9:85:49:11:6d:bd:df:a4:82:b4:
         3c:fd:95:38:b6:48:8c:71:71:22:57:b2:8b:d6:3e:d7:29:6b:
         26:c7:1a:40:2d:d0:03:2f:86:41:c8:1e:18:ab:ed:d6:cc:58:
         6f:16:28:35:8b:db:bf:3b:ae:39:23:d6:62:c9:55:9c:0b:50:
         57:72:93:90:40:29:65:c4:c6:b9:9a:bc:d6:21:85:ae:0f:7f:
         6a:e7:29:c9:b7:be:bb:f6:ee:3c:b5:af:df:f5:56:10:79:4d:
         20:2a:96:b8:00:a9:ba:69:2c:b6:3e:af:1f:78:b1:9d:72:fa:
         92:93:63:19:01:83:7e:84:e6:7b:d3:73:08:6f:6d:7f:13:dd:
         85:4e:85:0d:ad:15:05:b4:0d:f9:dd:a6:cc:99:66:87:7e:07:
         5b:fd:4e:1b:28:da:2a:8f:fe:60:7d:e9:f6:d0:ae:ec:46:72:
         39:6b:b5:4e:63:02:f3:ad:c1:67:64:71:19:a2:c4:b8:47:d3:
         c7:bd:d5:4e:99:43:de:23:a8:f9:ef:16:07:f8:0a:90:a6:33:
         3a:49:7f:9c:87:51:bf:53:5b:0f:d1:49:79:64:81:2e:59:55:
         dd:c7:37:1f:9d:ef:e3:3a:ed:45:86:84:f4:b3:20:6a:94:1a:
         03:b5:5f:cd
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICCnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjMwNTE0MjIxNTE2WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDYxNWQ3NC05NjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr6sk2tcq6yQf+/685J5n/DVqrTktbmL5a/hReeEHxaz7dGlApYvPhlmLvibn
1NoXGcqpCmNf6056MaUqxdoN3caslfhfyjtGG/FbhaejyPGWHHL3L7xDb28Syi3b
wiQCt7DyfPHiK9mYLjyipiOkQysRVPMKP7uimk7S/jFi1S//2cXtZRlSjOnkjYVa
wd4M2x1/N0Z4yjEhDiBDcCZE4KZa2S/+xfbq9LQWlMGVNbqDd5ofC7Do87z0Z42z
wba9xvhaV4nX5XrYEXGnaG+AIsTdCz1oLEVnMjZjnvzYB7EbtUkNX4CdTezErTGW
xNRe/QzGprNobYYJhH1TTHEz7QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFLfYSrgH
wryAaw58nFND22I4OzEMMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvRkFEOTAyRTI4
NjBCMTFFQUE4M0I3QjM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwUkBghA7uAwDQYJKoZIhvcNAQELBQADggEBADBocZ0FAA53
2YVJEW2936SCtDz9lTi2SIxxcSJXsovWPtcpaybHGkAt0AMvhkHIHhir7dbMWG8W
KDWL2787rjkj1mLJVZwLUFdyk5BAKWXExrmavNYhha4Pf2rnKcm3vrv27jy1r9/1
VhB5TSAqlrgAqbppLLY+rx94sZ1y+pKTYxkBg36E5nvTcwhvbX8T3YVOhQ2tFQW0
DfndpsyZZod+B1v9Thso2iqP/mB96fbQruxGcjlrtU5jAvOtwWdkcRmixLhH08e9
1U6ZQ94jqPnvFgf4CpCmMzpJf5yHUb9TWw/RSXlkgS5ZVd3HNx+d7+M67UWGhPSz
IGqUGgO1X80=
-----END CERTIFICATE-----