Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/352947888E5911ED9CF53827C4F9AE02.roa
File:                     352947888E5911ED9CF53827C4F9AE02.roa (raw, json)
Hash identifier:          W6owLWtxaewAXMi/Tece10mFTdBNVYflRjTDQ3dDt+g=
Subject key identifier:   7D:7E:51:E2:C2:5E:53:C0:03:04:15:8D:03:16:46:4A:22:7B:A5:90
Certificate issuer:       /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial:       0390
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/352947888E5911ED9CF53827C4F9AE02.roa
Signing time:             Sat 07 Jan 2023 07:02:12 +0000
ROA not before:           Sat 07 Jan 2023 07:02:12 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     200631
IP address blocks:        2407:d340:7120::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912 (0x390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
        Validity
            Not Before: Jan  7 07:02:12 2023 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=63b918f3-6a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c6:1f:3d:c9:a3:19:f5:3e:36:7c:c7:6c:59:
                    df:dd:31:bb:c4:dd:91:f3:de:9d:80:40:d7:3b:54:
                    6a:b9:88:61:77:12:73:24:48:c9:f7:30:84:ac:ab:
                    31:e3:67:05:32:c9:f8:45:08:24:d2:23:95:1d:34:
                    06:76:35:c7:d8:66:b5:dc:60:f5:22:00:94:92:3c:
                    05:5e:02:7b:05:90:6a:b9:68:f2:bc:fe:fc:03:dc:
                    d1:4d:1f:04:69:85:20:da:10:d3:c8:07:b7:95:7e:
                    f7:41:55:3a:5a:2c:55:86:48:76:dc:5c:0c:bd:98:
                    15:64:0e:ba:a0:67:40:47:99:ac:0e:e3:53:35:86:
                    33:90:7e:bb:c9:70:b5:03:30:cf:f5:26:19:3d:66:
                    6e:7d:71:db:96:e4:2f:77:30:47:b0:b5:95:4f:65:
                    0a:c7:12:d6:1f:83:a5:46:64:8c:b9:11:fa:07:57:
                    03:ef:f3:c9:11:fc:f3:1c:a3:00:ad:89:12:24:91:
                    09:d1:9a:54:73:26:14:34:5c:78:3e:8e:b5:7d:d3:
                    df:d9:ac:1a:3d:c3:35:7d:05:64:05:57:cf:7c:e0:
                    8d:b4:8c:c8:c6:be:5e:ed:c2:87:bb:67:b8:14:c6:
                    8f:3e:c0:df:3e:bb:db:7b:04:10:97:89:c8:e6:95:
                    1b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7E:51:E2:C2:5E:53:C0:03:04:15:8D:03:16:46:4A:22:7B:A5:90
            X509v3 Authority Key Identifier:
                keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/352947888E5911ED9CF53827C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:d340:7120::/44

    Signature Algorithm: sha256WithRSAEncryption
         c0:2b:61:81:d0:6c:99:dc:23:94:3f:a7:c4:03:7b:ae:e2:c0:
         77:85:e3:56:c7:8f:47:7e:73:fb:4c:6d:6f:31:c2:88:55:dd:
         ae:69:a9:f3:81:49:1a:d4:dd:d9:7f:4e:d7:38:c0:da:78:df:
         d0:94:05:dd:ac:5e:8e:e2:42:80:1e:17:4a:14:ba:d9:13:d5:
         82:4f:7a:7a:84:c7:61:0d:ca:4b:65:e2:d0:f1:1c:81:14:69:
         9e:96:91:a8:e0:e8:ed:74:b9:99:a3:5d:21:2d:67:b3:c8:aa:
         17:e7:0d:34:80:f6:bb:dc:57:fe:fc:8a:3e:ef:63:60:4a:20:
         26:2b:b2:b4:6c:60:0a:df:2e:24:da:ab:b5:a9:b0:91:a2:8d:
         8b:ab:d1:e0:13:a1:87:80:c8:49:eb:b0:e3:e2:9e:cc:0d:ef:
         21:d0:b1:67:19:ca:d2:4b:77:7f:c9:a4:1c:0e:48:e9:9f:03:
         dc:84:02:92:4e:fd:2a:e5:f5:95:67:ff:b0:61:a0:5f:35:43:
         35:8b:cb:26:0d:e7:80:55:7a:e9:be:e1:1a:bd:17:a1:88:d5:
         cf:02:ec:fe:08:e7:a4:7a:61:68:4e:0a:5c:25:0d:30:9d:4f:
         9f:a9:be:4a:1b:ce:95:f8:39:80:ba:42:d3:a5:91:6d:b4:e1:
         36:ed:c0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----