Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/FAF3CBD8D14B11EEB5E10E87C4F9AE02.roa
File:                     FAF3CBD8D14B11EEB5E10E87C4F9AE02.roa (raw, json)
Hash identifier:          HRBdyA46Zp6dmWGqG8DFeOY5VyJI8Xlf00QazAl9dpc=
Subject key identifier:   E2:10:2C:7E:B8:32:49:75:29:D7:F1:1E:FE:17:5C:28:9E:EE:1E:F6
Certificate issuer:       /CN=A913A0DD/serialNumber=71D332604CD538EA726987AF7E6FE8B870F42FE4
Certificate serial:       095F
Authority key identifier: 71:D3:32:60:4C:D5:38:EA:72:69:87:AF:7E:6F:E8:B8:70:F4:2F:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cdMyYEzVOOpyaYevfm_ouHD0L-Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/FAF3CBD8D14B11EEB5E10E87C4F9AE02.roa
Signing time:             Thu 22 Feb 2024 06:31:16 +0000
ROA not before:           Thu 22 Feb 2024 06:31:16 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     135386
IP address blocks:        2400:4740::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 01:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2399 (0x95f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A0DD/serialNumber=71D332604CD538EA726987AF7E6FE8B870F42FE4
        Validity
            Not Before: Feb 22 06:31:16 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65d6ea34-d6c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a2:46:8d:a7:36:72:da:ea:4a:4a:65:a0:a6:
                    6e:69:b9:31:5e:f9:3b:a5:1e:e7:ba:d4:38:9e:39:
                    75:c6:69:86:f5:cf:25:6a:08:a0:a4:f3:59:45:5f:
                    ef:bb:41:dd:40:70:ef:67:65:68:d2:9c:1e:ec:2d:
                    b1:31:f0:59:dc:77:98:a4:ac:07:dd:a3:91:65:d3:
                    68:e3:97:7a:c5:6e:39:35:b2:48:cf:dd:15:ff:0c:
                    ee:35:9d:7e:55:b0:f4:04:d1:97:53:be:f0:dc:bf:
                    46:c9:4b:ee:84:8d:b5:47:e0:0c:ca:41:07:f0:63:
                    74:4a:93:ff:d5:0f:59:d2:d5:06:f1:3a:d2:35:88:
                    04:af:54:f3:0b:0d:1f:17:9e:cc:4d:77:b2:6b:af:
                    c9:fa:a7:88:a0:86:d2:ce:d5:94:ae:08:a9:20:b9:
                    01:f3:e5:53:f3:5b:30:54:25:12:e2:1e:fb:60:38:
                    ec:13:67:e6:5b:0c:6a:9c:02:91:78:17:cd:2c:31:
                    bb:0f:4f:dd:e2:c7:31:84:d2:67:c7:64:4a:a8:5c:
                    d7:c8:0e:a5:8b:d4:7b:cf:c6:e9:23:50:84:eb:ac:
                    40:c9:99:a2:50:b9:1d:e4:2a:96:42:54:85:ed:97:
                    51:35:7e:eb:f2:0b:6d:4d:c3:e9:4d:54:1e:6b:62:
                    eb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:10:2C:7E:B8:32:49:75:29:D7:F1:1E:FE:17:5C:28:9E:EE:1E:F6
            X509v3 Authority Key Identifier:
                keyid:71:D3:32:60:4C:D5:38:EA:72:69:87:AF:7E:6F:E8:B8:70:F4:2F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/cdMyYEzVOOpyaYevfm_ouHD0L-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cdMyYEzVOOpyaYevfm_ouHD0L-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/FAF3CBD8D14B11EEB5E10E87C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:4740::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:1e:5b:67:66:48:fb:4d:55:29:cb:9f:50:da:4b:91:66:2e:
         42:1a:df:d8:85:ea:cc:b5:08:64:4b:74:41:3a:42:04:22:1c:
         0c:af:88:67:3f:aa:70:0c:26:92:0d:57:82:00:3e:aa:29:d5:
         f3:6e:86:dc:63:8b:5b:fb:e8:78:0a:90:1c:30:29:f3:61:9d:
         bb:b8:e6:40:23:e5:88:2c:f8:62:eb:b2:4d:6d:2c:7f:7b:d0:
         00:57:ef:5c:b8:ea:a4:e9:28:5a:ff:15:69:a1:06:2f:47:d8:
         cf:a0:6c:8c:d9:c6:1d:51:0f:92:fa:fb:68:98:c4:f4:24:31:
         82:2d:b2:cb:fb:ed:9b:92:a4:8c:16:74:78:1e:56:eb:eb:90:
         47:5d:b0:2e:95:cf:53:a5:a3:c8:c2:9b:a6:89:57:12:13:86:
         0d:bf:a4:2c:1b:05:ed:83:d5:9f:d4:3c:68:ab:8e:a4:09:66:
         c0:7e:e6:0b:b0:73:6c:d9:c6:d4:3d:a0:ec:e8:d6:43:63:48:
         4b:0d:5d:6f:f9:a0:a6:4b:ed:70:02:a0:53:85:9a:42:50:98:
         39:c8:fd:46:63:82:e3:b8:ed:fe:74:9c:7d:8c:5c:de:f0:83:
         fe:17:e8:e2:57:23:cd:0d:0b:f1:7c:d6:bf:09:c0:c0:e6:b4:
         da:3b:2d:a5
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICCV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0EwREQxMTAvBgNVBAUTKDcxRDMzMjYwNENENTM4RUE3MjY5ODdBRjdFNkZFOEI4
NzBGNDJGRTQwHhcNMjQwMjIyMDYzMTE2WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWQ2ZWEzNC1kNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA36JGjac2ctrqSkploKZuabkxXvk7pR7nutQ4njl1xmmG9c8lagigpPNZRV/v
u0HdQHDvZ2Vo0pwe7C2xMfBZ3HeYpKwH3aORZdNo45d6xW45NbJIz90V/wzuNZ1+
VbD0BNGXU77w3L9GyUvuhI21R+AMykEH8GN0SpP/1Q9Z0tUG8TrSNYgEr1TzCw0f
F57MTXeya6/J+qeIoIbSztWUrgipILkB8+VT81swVCUS4h77YDjsE2fmWwxqnAKR
eBfNLDG7D0/d4scxhNJnx2RKqFzXyA6li9R7z8bpI1CE66xAyZmiULkd5CqWQlSF
7ZdRNX7r8gttTcPpTVQea2LrBwIDAQABo4ICljCCApIwHQYDVR0OBBYEFOIQLH64
Mkl1KdfxHv4XXCie7h72MB8GA1UdIwQYMBaAFHHTMmBM1TjqcmmHr35v6Lhw9C/k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTBERC8yMTQzM0NEMjY4
MzMxMUVBQThBNzMyNzhDNEY5QUUwMi9jZE15WUV6Vk9PcHlhWWV2Zm1fb3VIRDBM
LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NkTXlZRXpWT09weWFZZXZmbV9vdUhEMEwtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0EwREQvMjE0MzNDRDI2ODMzMTFFQUE4QTczMjc4QzRGOUFFMDIvRkFGM0NCRDhE
MTRCMTFFRUI1RTEwRTg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkAEdAMA0GCSqGSIb3DQEBCwUAA4IBAQC/HltnZkj7TVUp
y59Q2kuRZi5CGt/YherMtQhkS3RBOkIEIhwMr4hnP6pwDCaSDVeCAD6qKdXzbobc
Y4tb++h4CpAcMCnzYZ27uOZAI+WILPhi67JNbSx/e9AAV+9cuOqk6Sha/xVpoQYv
R9jPoGyM2cYdUQ+S+vtomMT0JDGCLbLL++2bkqSMFnR4Hlbr65BHXbAulc9TpaPI
wpumiVcSE4YNv6QsGwXtg9Wf1Dxoq46kCWbAfuYLsHNs2cbUPaDs6NZDY0hLDV1v
+aCmS+1wAqBThZpCUJg5yP1GY4LjuO3+dJx9jFze8IP+F+jiVyPNDQvxfNa/CcDA
5rTaOy2l
-----END CERTIFICATE-----