Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/1EC96BFE8D8611ED93F9D26FC4F9AE02.roa
File:                     1EC96BFE8D8611ED93F9D26FC4F9AE02.roa (raw, json)
Hash identifier:          l6/PKfpvHr1dyOBdkSPtlO6GiL2dNKmmFGbmBLF2XmE=
Subject key identifier:   53:6F:E4:FC:23:53:56:71:2F:62:21:6A:45:7F:AB:3F:96:78:82:BA
Certificate issuer:       /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial:       32B7
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/1EC96BFE8D8611ED93F9D26FC4F9AE02.roa
Signing time:             Fri 06 Jan 2023 05:51:10 +0000
ROA not before:           Fri 06 Jan 2023 05:51:10 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     142500
IP address blocks:        2409::/40 maxlen: 40
                          2409::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12983 (0x32b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
        Validity
            Not Before: Jan  6 05:51:10 2023 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=63b7b6ce-5579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:04:24:29:75:f8:6f:3e:eb:2a:a7:b3:7d:81:
                    e0:da:33:c5:bb:ba:94:a8:a3:ad:da:33:33:c9:3a:
                    00:32:9e:e9:c4:63:7d:52:37:64:86:da:83:ac:95:
                    e5:06:ce:a1:f0:8d:4b:d0:60:46:57:21:ca:bc:2d:
                    64:59:82:ff:cc:f8:2d:fb:4a:a0:b1:3a:f5:05:42:
                    68:f5:9b:7f:66:d6:82:63:df:f1:05:8c:4c:5d:fb:
                    5c:2d:5e:a9:2d:d6:15:55:c7:2b:b2:f7:32:c8:74:
                    9b:c8:7b:e1:a0:62:03:10:23:35:9e:00:82:f6:d0:
                    6e:f8:11:a8:65:55:12:01:14:4f:f0:1f:6d:04:27:
                    5a:08:18:07:b6:cc:ee:10:c1:38:7b:54:8a:47:94:
                    7a:e0:0f:8c:24:cb:4f:e6:a0:49:a3:ec:18:bf:b3:
                    40:59:99:85:72:ab:17:ec:f2:a8:f8:3f:43:2d:c5:
                    bc:ac:5e:e1:74:e2:9c:e4:44:bc:3c:6e:5d:84:63:
                    51:ea:e0:c4:89:58:8c:53:37:02:96:e1:e8:9e:11:
                    fe:9f:57:f8:7b:53:da:90:02:03:95:54:c3:09:81:
                    89:3b:d4:31:ef:25:99:66:9b:4a:09:f7:5f:36:03:
                    00:bd:ea:03:56:79:cf:10:87:80:04:35:21:41:11:
                    13:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6F:E4:FC:23:53:56:71:2F:62:21:6A:45:7F:AB:3F:96:78:82:BA
            X509v3 Authority Key Identifier:
                keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/1EC96BFE8D8611ED93F9D26FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2409::/40

    Signature Algorithm: sha256WithRSAEncryption
         a5:80:03:dd:5a:36:fd:34:76:46:41:57:b0:67:9b:a7:56:5c:
         ca:fb:39:44:fd:1d:aa:b1:29:a4:9e:84:d4:8a:4f:a3:e4:3c:
         a2:01:b7:37:f0:34:01:34:c3:b0:38:17:25:f9:d0:f7:cc:a1:
         ec:ff:48:24:87:38:f9:ed:71:fa:3b:7e:2a:b8:6e:5b:ff:8d:
         ec:e9:13:2e:0a:1c:91:36:3a:5d:a7:31:ec:90:2c:4f:bb:a2:
         8e:ff:43:be:d7:b8:2e:6d:a6:76:af:4c:6b:3d:a0:ed:59:f8:
         3b:9e:42:12:4e:51:77:7d:a3:84:cc:30:87:97:f0:92:46:51:
         c0:f5:ce:5b:fc:ec:7a:d2:7e:ee:86:b5:ea:7f:d1:3a:b1:74:
         c0:1d:48:f5:06:97:ce:5e:a4:48:a9:24:7e:a4:e9:ed:08:67:
         43:bd:15:65:9f:8b:b7:23:af:b1:29:07:f0:0a:16:75:77:c0:
         61:bf:4d:43:75:39:fe:b3:54:54:35:a7:2e:7b:84:cd:10:bc:
         fb:05:89:24:9f:df:f2:53:c8:c5:3a:b8:61:fb:91:f9:2d:a3:
         20:f9:38:cf:ff:cb:75:20:a6:22:d3:7c:62:e5:8b:17:4e:08:
         41:8b:fd:d3:08:b9:ef:02:e4:04:de:88:bd:61:21:ac:5c:52:
         da:b9:a8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----