Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/982578B4717111EF997A817AC4F9AE02.roa
File:                     982578B4717111EF997A817AC4F9AE02.roa (raw, json)
Hash identifier:          Y3EXWM/1iF+Mbn4w3qmFlNABx+PqYlOfRsUgpbAtDdo=
Subject key identifier:   D2:7C:B8:5D:50:11:E3:92:29:B9:33:51:78:99:AB:79:92:04:CC:24
Certificate issuer:       /CN=A9144391/serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F
Certificate serial:       04
Authority key identifier: 53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/982578B4717111EF997A817AC4F9AE02.roa
Signing time:             Fri 13 Sep 2024 01:43:37 +0000
ROA not before:           Fri 13 Sep 2024 01:43:37 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     18400
IP address blocks:        2401:ae60::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 01:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144391/serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F
        Validity
            Not Before: Sep 13 01:43:37 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66e398c9-a84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3e:73:b6:c7:d2:48:99:39:7e:23:69:8f:c9:
                    a2:36:29:9d:23:42:43:b8:1b:b5:c8:96:0c:c4:85:
                    20:dd:1d:20:05:e7:12:19:47:90:f2:75:bf:ba:bb:
                    2a:4c:4f:b7:64:26:f8:6e:f7:e2:51:92:34:ff:a8:
                    d3:21:e5:09:f6:80:d4:1f:13:5c:81:1a:7d:7b:2a:
                    50:1d:e7:89:3c:94:52:be:72:7e:af:68:9c:11:3e:
                    0f:e4:47:55:c6:62:e3:77:8e:d5:52:ad:30:d8:f0:
                    79:89:d3:ba:3f:d1:2d:f2:d0:70:c8:6b:de:2b:91:
                    ce:d0:31:34:5d:49:c5:c6:78:b9:89:3f:3b:0f:8d:
                    27:a1:59:56:c0:e7:7e:93:f5:63:a6:07:96:2b:9a:
                    c2:2f:70:b9:04:46:6b:32:fe:a9:0e:b3:83:4b:b7:
                    98:c8:a7:6c:a1:47:42:0a:96:7e:12:5f:28:87:ce:
                    f8:25:4f:2a:44:e0:a8:b6:6d:48:bb:71:f7:97:86:
                    1c:86:92:c8:0b:a6:4b:f9:1b:09:1a:27:b3:c9:b6:
                    5d:25:3d:26:e4:67:f2:60:6f:85:82:15:ad:68:94:
                    a6:55:7d:43:bc:d6:5b:a3:6d:c0:0c:58:79:80:7f:
                    b2:c1:04:8a:50:93:c5:e2:88:5f:ea:1a:cd:36:1e:
                    3e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7C:B8:5D:50:11:E3:92:29:B9:33:51:78:99:AB:79:92:04:CC:24
            X509v3 Authority Key Identifier:
                keyid:53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/982578B4717111EF997A817AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:ae60::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:50:52:11:c4:02:6d:73:6b:eb:81:f3:76:c5:3d:8f:ac:5a:
         f9:18:c5:ca:48:06:a5:96:ea:27:59:26:7a:a7:a9:74:b8:e0:
         e2:32:17:cf:db:e0:02:07:e7:6d:b1:d1:74:55:4f:b1:41:05:
         5f:0b:92:88:f5:97:25:1c:52:a5:7f:a5:ed:1d:f4:46:b5:67:
         2b:57:6a:6e:42:87:38:d4:3f:f2:a5:87:bf:08:1b:36:6e:7c:
         c1:fa:8c:89:cf:28:79:19:11:55:c7:cc:5f:57:99:05:41:00:
         d5:30:f9:e7:07:74:22:b9:77:19:a9:94:f9:13:0f:15:4c:3e:
         26:8a:7c:e8:42:26:15:c7:76:79:68:a2:7a:2c:03:74:97:49:
         76:0e:54:7f:12:d9:c5:f4:75:9c:41:e0:19:30:01:86:88:28:
         85:85:89:fe:6c:e0:da:bd:6a:4b:54:4b:d3:38:35:5b:fb:be:
         1f:a1:cb:2e:d0:a4:84:52:1b:7d:7a:ef:20:80:51:ce:98:0e:
         c5:4a:30:77:3a:7d:64:c7:61:46:2e:74:83:9c:5a:e0:d0:43:
         31:b8:eb:61:75:d8:65:e2:a0:d3:d2:6a:3d:27:6f:0f:34:b7:
         76:fc:c3:f1:93:83:b7:da:be:5c:b3:eb:c7:f5:0f:e6:1f:0d:
         12:1f:96:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----