Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/0E58C024B6B111EBA3D4E20FC4F9AE02.roa
File:                     0E58C024B6B111EBA3D4E20FC4F9AE02.roa (raw, json)
Hash identifier:          +n/Wj94veD/OrgkyW2OmM40/GXsfnsri64QmPuZLBC0=
Subject key identifier:   43:00:F4:6E:E7:9A:B9:BF:80:18:C4:C0:23:4B:67:45:14:79:F9:D3
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2638
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/0E58C024B6B111EBA3D4E20FC4F9AE02.roa
Signing time:             Sun 06 Aug 2023 16:13:06 +0000
ROA not before:           Sun 06 Aug 2023 16:13:05 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     142030
IP address blocks:        2402:9e80:70::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9784 (0x2638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Aug  6 16:13:05 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64cfc691-76ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:33:ca:44:f8:c6:f9:85:1c:6a:48:a2:89:c6:
                    1c:9f:a7:5a:0b:c8:be:ba:3b:ff:3c:69:ae:1a:16:
                    29:ff:d3:dd:bc:ad:8d:bc:49:1f:2e:80:d4:db:c7:
                    20:b0:17:a2:d6:e3:1d:31:48:8a:dd:b6:7c:bc:8e:
                    18:06:86:c4:aa:36:c0:4d:dc:9f:98:8e:d2:93:43:
                    15:ef:3e:bf:8c:7f:04:f8:87:de:78:af:28:31:69:
                    d3:09:62:f9:37:aa:25:57:4f:b2:17:c2:7b:f8:9d:
                    30:4a:61:ac:84:79:05:62:8e:10:21:0a:da:ae:4e:
                    93:81:8d:a7:12:3f:4f:71:04:ef:5e:4f:3c:45:7d:
                    90:cd:4a:10:26:08:1b:67:67:4d:8c:29:65:d5:59:
                    04:10:ff:05:65:5a:c8:a8:57:85:7f:e5:c7:65:17:
                    9c:05:b7:90:c3:4f:a7:88:d6:de:8b:07:79:fc:bf:
                    15:34:71:41:45:d8:43:92:d5:80:4e:2d:8a:75:ea:
                    fa:5c:3d:98:12:ad:b7:21:b1:af:4f:3c:81:c1:c6:
                    15:41:39:90:31:9c:a2:f4:c4:c9:66:c1:68:96:77:
                    d0:df:af:b9:f0:32:36:59:9e:33:c4:28:6d:93:5d:
                    68:5c:94:53:b4:a3:a8:aa:a8:67:18:b2:ff:c6:cc:
                    8f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:00:F4:6E:E7:9A:B9:BF:80:18:C4:C0:23:4B:67:45:14:79:F9:D3
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/0E58C024B6B111EBA3D4E20FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:70::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:32:42:25:c8:a7:b5:35:81:40:cf:76:23:95:07:b8:f1:c4:
         df:38:eb:17:0a:e3:f4:39:08:03:4c:5c:bd:50:cd:d5:27:03:
         60:4d:ba:8c:a5:2c:1b:b0:65:f8:ec:d0:a5:42:20:f4:e7:d4:
         bb:d0:9e:1b:5e:f1:74:81:9e:a4:d0:20:f1:dd:69:7e:89:0a:
         25:57:c1:f9:6b:18:31:16:93:bf:5c:77:09:3d:0b:82:e6:c5:
         65:c1:50:30:86:46:f5:c5:fd:2c:cb:f7:5e:ce:ca:97:ed:56:
         5f:f8:1b:1a:4a:7b:59:cc:65:21:dc:f9:63:4e:d5:52:16:c8:
         27:58:0f:5e:81:70:f6:98:fa:4f:01:6b:99:02:36:fb:e0:4f:
         c4:c2:60:ad:37:a0:7c:b6:f6:b2:f9:ff:dd:6c:e0:16:f0:f7:
         9e:0b:7c:4e:ed:d4:9d:34:c5:a8:88:a2:61:d5:05:f6:54:bb:
         8f:6d:89:19:02:f2:c1:ef:61:d2:b6:b6:db:7d:56:e1:b9:a7:
         e8:13:1b:7b:3f:8c:93:05:e2:32:e7:d9:83:8d:00:c7:6b:3e:
         66:15:2f:69:e3:f3:ac:a5:1c:01:e2:c1:76:c8:e0:de:6b:64:
         12:0e:e3:1d:38:f3:0d:35:89:fd:23:7c:0a:e5:84:18:36:db:
         3c:6a:13:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----