Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/8E6871E0600311ED856E0141C4F9AE02.roa
File:                     8E6871E0600311ED856E0141C4F9AE02.roa (raw, json)
Hash identifier:          28i5AhdnypHYs6ZFMNYDYI1g4Z5hH6jKC1XOtJPzuEg=
Subject key identifier:   48:A4:A8:3A:58:65:33:1E:41:35:7E:4D:ED:2D:7B:24:7B:31:A4:2C
Certificate issuer:       /CN=A9198996/serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
Certificate serial:       01AE
Authority key identifier: 69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/8E6871E0600311ED856E0141C4F9AE02.roa
Signing time:             Wed 17 May 2023 06:15:13 +0000
ROA not before:           Wed 17 May 2023 06:15:13 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     132088
IP address blocks:        2402:e940:20::/44 maxlen: 44
                          2402:e940:30::/44 maxlen: 44
                          2402:e940:40::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198996/serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
        Validity
            Not Before: May 17 06:15:13 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=646470f1-3f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6d:92:6b:c4:a6:a2:d8:28:e4:ef:2b:37:2b:
                    41:9c:a5:fa:14:2e:8b:a4:5d:0f:ae:db:55:17:2e:
                    7f:ba:a3:ac:2a:23:0b:d9:15:24:f1:72:44:93:c9:
                    29:d9:8a:5f:6a:3b:22:f6:f1:69:bd:18:b5:56:aa:
                    01:13:f3:36:11:0e:33:93:f8:9f:4c:8c:bd:a9:e8:
                    07:46:74:8a:17:88:31:c2:cb:74:24:80:ce:f4:7e:
                    54:c1:cc:36:87:f9:75:c0:c2:2a:84:c3:f3:4c:42:
                    b8:5d:07:55:3d:53:fe:0f:9f:2b:28:f8:56:67:99:
                    0b:29:93:4d:30:45:a3:17:d9:aa:4a:6a:74:f7:39:
                    a2:83:3c:05:ed:2a:f1:b0:f1:2c:d8:63:25:32:e3:
                    f8:51:c8:87:fb:86:62:4c:91:eb:96:18:fb:cf:bd:
                    98:64:06:e6:45:72:b9:76:6b:19:30:49:0d:d6:f6:
                    a1:8f:ce:b9:8a:a8:13:30:3b:4a:cf:ee:cf:16:ad:
                    92:84:87:2c:96:ed:0a:6a:6c:54:e6:2e:52:9a:4f:
                    8f:59:62:c2:9d:ec:ff:7d:e6:c7:47:ca:70:07:87:
                    a5:c1:95:f2:01:9d:1a:94:7c:a3:ac:a4:3f:7b:a6:
                    16:50:7f:50:1d:3d:62:74:2b:69:c0:ec:04:56:6b:
                    df:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A4:A8:3A:58:65:33:1E:41:35:7E:4D:ED:2D:7B:24:7B:31:A4:2C
            X509v3 Authority Key Identifier:
                keyid:69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/8E6871E0600311ED856E0141C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e940:20::-2402:e940:4f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         46:d5:6a:b0:95:e8:d7:6d:83:83:41:7d:f1:ed:b4:37:89:64:
         e1:f8:9d:32:80:47:e3:48:63:a3:6f:c2:39:09:bf:bc:90:e9:
         bd:82:ba:72:3d:4e:26:7c:3a:8c:75:f2:66:16:5c:64:1d:65:
         c6:66:0a:c0:50:58:7b:32:f4:b8:ef:9c:07:ad:83:29:db:ab:
         68:58:53:cb:dc:76:ae:0d:b1:ab:e5:41:c6:de:a5:e5:b5:02:
         2a:d4:15:b3:ae:49:ec:c0:8f:87:c6:6f:47:01:60:18:bf:dc:
         f8:50:36:f5:61:b2:7c:cb:c8:f5:d5:83:eb:c0:b8:af:78:bc:
         aa:d5:92:60:ee:d1:c5:2e:b5:15:20:0b:b9:ac:65:8d:89:b5:
         14:80:20:b1:7c:8f:7b:6e:39:7a:8e:39:ac:ba:c7:26:84:91:
         89:d4:97:bf:ac:8a:10:70:29:60:34:c9:3c:a8:09:29:b3:f3:
         94:b3:71:02:e6:7d:60:06:eb:9b:f4:21:6b:8d:f6:70:c4:80:
         7f:13:d4:ae:c3:cd:14:78:de:43:f1:56:f1:14:03:a1:52:da:
         e8:22:a3:04:4d:66:5e:c1:d3:79:3d:d3:5e:b0:b2:7e:ae:0b:
         c2:20:01:0a:dd:e8:2a:7f:47:87:41:fb:6c:dd:82:d0:2c:75:
         52:7d:eb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----