Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/D6418C40F18511EDB06A5526C4F9AE02.roa
File:                     D6418C40F18511EDB06A5526C4F9AE02.roa (raw, json)
Hash identifier:          XHo/mnDDU8vK+leW8fXah8wC5Fl5fanF3zLa04QNmc8=
Subject key identifier:   8D:A7:D9:7B:EA:DA:B0:C9:C5:6B:E3:91:30:59:B7:25:CB:8A:C5:A6
Certificate issuer:       /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial:       330F
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/D6418C40F18511EDB06A5526C4F9AE02.roa
Signing time:             Sat 13 May 2023 12:01:05 +0000
ROA not before:           Sat 13 May 2023 12:01:05 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     148001
IP address blocks:        240a:eff0::/28 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13071 (0x330f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
        Validity
            Not Before: May 13 12:01:05 2023 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=645f7c00-2133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:6c:ee:14:5f:15:cf:79:9e:63:5c:ec:9f:
                    fe:e3:21:6c:1d:a4:22:99:0d:4a:69:8c:62:09:01:
                    8f:8e:9f:12:13:f9:08:51:d7:e4:05:4d:95:7e:c5:
                    c6:74:eb:90:a0:1d:a0:ca:10:52:0e:68:85:08:22:
                    68:8e:32:6a:80:a2:b3:2e:38:fa:08:4f:98:24:03:
                    7d:83:1c:5f:ad:f1:1f:6a:d7:4a:ea:a5:ff:0c:ab:
                    6a:35:90:1a:2b:aa:1e:66:ac:b9:f8:4f:ff:97:05:
                    7b:df:44:f1:5c:74:ec:af:8e:8d:a6:f8:19:d1:1f:
                    aa:3a:35:8a:29:a8:c0:2c:0c:e7:33:0f:4e:26:77:
                    36:68:58:5e:2c:de:38:65:c2:87:15:48:f6:88:07:
                    70:76:c5:58:f6:99:cc:2e:d5:2e:2c:9e:fb:f3:75:
                    97:d1:8d:ab:1d:fe:bf:69:f4:87:41:0f:02:5e:2f:
                    30:07:63:85:ce:f8:76:ee:2e:31:8e:b3:8d:0f:e4:
                    53:9a:f5:68:91:49:db:86:46:6a:30:19:d7:ba:0d:
                    4c:0e:92:6c:38:43:c4:60:d5:a6:9c:44:bd:e6:9a:
                    b3:ab:f8:5c:35:d3:5c:14:4c:c9:2c:7b:21:e7:3c:
                    bd:b2:61:f7:a8:fc:62:03:9b:87:4b:e5:72:b8:d1:
                    67:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A7:D9:7B:EA:DA:B0:C9:C5:6B:E3:91:30:59:B7:25:CB:8A:C5:A6
            X509v3 Authority Key Identifier:
                keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/D6418C40F18511EDB06A5526C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:eff0::/28

    Signature Algorithm: sha256WithRSAEncryption
         71:59:e3:fa:98:c0:d1:e8:6e:41:56:99:eb:37:01:fa:b6:a0:
         a8:89:98:3c:03:78:c2:61:64:35:bf:9b:f5:a8:b1:10:fa:65:
         c6:10:49:81:80:a0:ea:a9:d7:85:79:38:72:b4:31:48:b5:1f:
         9f:9a:14:0c:07:b2:e1:62:ed:29:68:4b:ea:60:68:f9:8f:0b:
         8b:8c:80:4b:35:4f:b0:38:d7:1d:d4:d0:6b:ae:7b:2c:db:3c:
         a6:04:59:5e:4f:1a:c3:53:44:e4:32:51:c0:9e:d0:a0:07:a4:
         69:75:9f:5e:a0:1e:97:3a:6a:54:db:f7:c5:95:7d:6b:ca:af:
         5a:9a:3e:ab:84:7b:f4:62:e1:b3:65:3b:39:73:97:9e:00:df:
         27:8a:15:b9:17:c3:f5:ad:fe:9a:44:fe:4b:96:b3:91:7e:2e:
         d1:ac:a2:6b:e3:5d:d8:0c:cf:e5:75:40:50:b1:d0:a2:e1:bc:
         84:d3:b4:42:5d:bf:5b:02:7a:99:1c:df:7d:57:43:c2:fd:80:
         46:ae:75:e2:c1:2a:f5:ee:fb:1b:18:5f:05:5a:16:22:a8:c6:
         57:d2:5d:7c:d9:a9:61:7f:1f:c4:00:21:44:ec:f6:13:b9:19:
         f4:2b:f2:71:92:d5:f3:da:07:a2:e2:59:2a:82:eb:38:17:4e:
         5e:89:77:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----