Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/108DFBC062E511EDAE835229C4F9AE02.roa
File:                     108DFBC062E511EDAE835229C4F9AE02.roa (raw, json)
Hash identifier:          KfTGIhWQgcxO3SqYAsYTO74C3nx9LZ/1QziXZUauz88=
Subject key identifier:   17:C6:A0:28:37:2D:D2:8B:58:88:5F:B4:6B:70:05:CC:F0:9E:67:17
Certificate issuer:       /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial:       034B
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/108DFBC062E511EDAE835229C4F9AE02.roa
Signing time:             Sat 12 Nov 2022 23:52:28 +0000
ROA not before:           Sat 12 Nov 2022 23:52:28 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     138211
IP address blocks:        2407:d340:7100::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843 (0x34b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
        Validity
            Not Before: Nov 12 23:52:28 2022 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=637031bc-ce79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fe:dc:aa:67:21:0c:b8:16:e9:9b:ad:9e:25:
                    17:0a:89:05:04:2a:f8:33:c0:8a:05:6c:bf:64:34:
                    15:bd:e4:67:b0:3f:51:3b:cf:2b:03:a3:4d:ca:ed:
                    ed:20:31:d8:16:61:41:06:1a:39:2b:86:4b:6a:bb:
                    97:85:a5:7d:8b:e1:06:ba:30:df:d4:b3:c2:59:87:
                    aa:84:94:43:9e:a5:67:a0:9f:bd:b1:dc:65:3e:51:
                    e7:37:20:4a:6a:e4:29:e7:84:f5:57:28:09:fc:c2:
                    f2:f2:a1:8f:1c:19:dd:59:09:46:a2:21:1b:99:ed:
                    55:e1:3d:62:e4:a0:3a:35:21:26:e0:90:e6:9a:02:
                    91:68:ee:70:84:ba:ea:6e:ee:48:60:3b:17:e0:77:
                    13:85:20:f6:0f:08:03:f6:34:98:b9:6e:68:21:bd:
                    3a:3c:eb:54:5b:36:a1:9e:98:9a:e2:7a:1a:b7:83:
                    12:3f:37:08:4a:e2:98:ac:fc:b4:44:36:e6:0f:93:
                    3a:1b:ce:f2:5a:aa:cd:0f:a3:7a:20:08:28:a6:64:
                    ea:c6:4c:d9:38:38:93:8f:a4:dc:8b:bb:a4:d9:94:
                    82:3e:d1:dd:ec:03:fd:0d:84:7f:c8:d1:30:f5:37:
                    ba:51:f3:cd:47:fb:c9:4d:df:6a:c0:53:89:37:90:
                    8b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C6:A0:28:37:2D:D2:8B:58:88:5F:B4:6B:70:05:CC:F0:9E:67:17
            X509v3 Authority Key Identifier:
                keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/108DFBC062E511EDAE835229C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:d340:7100::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:9d:08:08:a8:26:d3:03:a8:9e:05:f4:e0:08:9e:33:18:c5:
         c0:43:4b:b4:27:82:90:d8:00:67:99:07:3e:b4:53:8d:d5:be:
         e5:3c:a3:1e:d7:3a:5a:d3:70:71:7f:27:5b:f1:1f:a9:ff:ca:
         1c:d3:06:f9:03:ed:a4:f0:ea:b7:96:a8:0a:98:0c:bd:0a:ea:
         9f:02:c2:0d:a8:74:4a:3b:b3:e5:95:f7:eb:d8:55:0d:ac:de:
         86:a3:15:7b:f7:66:58:f8:6d:a1:b7:1a:3d:55:d9:a0:82:fb:
         ad:e6:17:6f:e4:61:6f:4f:f9:07:0e:7f:50:d9:9c:d7:11:68:
         ea:0f:7e:52:37:8e:fc:22:44:85:0d:23:dc:f7:ce:a8:00:0c:
         b1:d5:36:42:38:67:02:ad:41:5d:93:96:87:fd:c1:85:aa:2a:
         98:a4:35:b1:4c:63:24:3f:d5:95:aa:5c:ca:da:6e:f8:53:32:
         a5:da:0a:29:a2:1d:d8:c5:08:8c:fa:2d:45:01:96:f2:01:50:
         0c:8b:2b:18:77:c2:f7:4b:af:a2:3a:f2:8a:a6:cd:2e:4c:1d:
         a9:f5:69:78:1b:b5:ad:4c:aa:91:97:5a:1c:72:ce:32:e3:0f:
         0c:af:47:e9:a8:8f:26:30:f0:2d:92:8e:7b:4b:d8:8d:e4:db:
         d8:72:d5:a7
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgICA0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQxOUUxMTAvBgNVBAUTKDE0NDU0ODlGREQ1MEFBNDRBQzFEMkEzQzNBMTY2RTA2
QzY2MkFGRDUwHhcNMjIxMTEyMjM1MjI4WhcNMjMxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzcwMzFiYy1jZTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxP7cqmchDLgW6ZutniUXCokFBCr4M8CKBWy/ZDQVveRnsD9RO88rA6NNyu3t
IDHYFmFBBho5K4ZLaruXhaV9i+EGujDf1LPCWYeqhJRDnqVnoJ+9sdxlPlHnNyBK
auQp54T1VygJ/MLy8qGPHBndWQlGoiEbme1V4T1i5KA6NSEm4JDmmgKRaO5whLrq
bu5IYDsX4HcThSD2DwgD9jSYuW5oIb06POtUWzahnpia4noat4MSPzcISuKYrPy0
RDbmD5M6G87yWqrND6N6IAgopmTqxkzZODiTj6Tci7uk2ZSCPtHd7AP9DYR/yNEw
9Te6UfPNR/vJTd9qwFOJN5CLxQIDAQABo4IClzCCApMwHQYDVR0OBBYEFBfGoCg3
LdKLWIhftGtwBczwnmcXMB8GA1UdIwQYMBaAFBRFSJ/dUKpErB0qPDoWbgbGYq/V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDE5RS85ODFFRTk4NjBC
MjExMUVDODQyMTQ5NERDNEY5QUUwMi9GRVZJbjkxUXFrU3NIU284T2hadUJzWmly
OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZFVkluOTFRcWtTc0hTbzhPaFp1QnNaaXI5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzQxOUUvOTgxRUU5ODYwQjIxMTFFQzg0MjE0OTREQzRGOUFFMDIvMTA4REZCQzA2
MkU1MTFFREFFODM1MjI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgAkB9NAcTANBgkqhkiG9w0BAQsFAAOCAQEATp0ICKgm0wOo
ngX04AieMxjFwENLtCeCkNgAZ5kHPrRTjdW+5TyjHtc6WtNwcX8nW/Efqf/KHNMG
+QPtpPDqt5aoCpgMvQrqnwLCDah0Sjuz5ZX369hVDazehqMVe/dmWPhtobcaPVXZ
oIL7reYXb+Rhb0/5Bw5/UNmc1xFo6g9+UjeO/CJEhQ0j3PfOqAAMsdU2QjhnAq1B
XZOWh/3BhaoqmKQ1sUxjJD/Vlapcytpu+FMypdoKKaId2MUIjPotRQGW8gFQDIsr
GHfC90uvojryiqbNLkwdqfVpeBu1rUyqkZdaHHLOMuMPDK9H6aiPJjDwLZKOe0vY
jeTb2HLVpw==
-----END CERTIFICATE-----