Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/47742F5AB04D11ED80ADCF0FC4F9AE02.roa
File:                     47742F5AB04D11ED80ADCF0FC4F9AE02.roa (raw, json)
Hash identifier:          HdzhLIQ2ARYctS9xOU0It3uOZdklMezJLJ5B3V3wIxc=
Subject key identifier:   18:B3:64:23:6C:AC:63:3A:82:C2:C5:9C:AD:1B:AD:F0:6A:6F:FA:E4
Certificate issuer:       /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial:       03B3
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/47742F5AB04D11ED80ADCF0FC4F9AE02.roa
Signing time:             Sun 19 Feb 2023 12:02:28 +0000
ROA not before:           Sun 19 Feb 2023 12:02:28 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     208529
IP address blocks:        2407:d340:7522::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 947 (0x3b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
        Validity
            Not Before: Feb 19 12:02:28 2023 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=63f20fd3-0f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:03:1d:59:c1:47:13:7c:1e:ac:c4:9b:a0:
                    a8:69:24:76:7e:e9:08:92:3a:42:76:32:c3:65:d3:
                    15:a5:fd:ed:21:ac:4b:ac:98:6a:38:ec:ed:5d:00:
                    89:0c:76:ec:5f:31:df:81:73:34:91:c5:86:cd:c8:
                    08:b5:46:ec:a7:ea:d8:37:dc:04:40:9f:32:e6:8e:
                    4d:e6:4a:f4:33:df:21:8e:76:cb:bb:3b:47:f4:ee:
                    19:1b:4b:e8:aa:eb:ae:d4:87:99:c0:8c:c0:06:ca:
                    53:39:fb:cf:39:76:8e:68:d5:dd:9d:41:ea:e3:28:
                    69:5b:9e:e9:d5:3a:57:61:cc:bd:f5:8a:6d:3f:0b:
                    c5:58:b7:9f:26:c8:c2:0a:21:0a:c9:0c:79:99:d5:
                    f9:66:10:63:48:7b:ee:a5:5d:7d:6a:90:18:54:50:
                    e9:a0:85:b8:c3:5f:95:8e:a2:af:68:1b:34:f2:64:
                    f3:20:99:92:21:d8:9c:26:55:e8:8f:05:e9:3e:6f:
                    99:98:0a:88:77:48:48:9b:e0:69:cb:4b:0c:d6:ba:
                    70:5b:32:e9:e9:dc:67:3d:b6:ca:72:6d:96:4f:9c:
                    4a:6d:20:c7:3e:8e:06:8c:d1:e9:c4:a6:a4:bf:28:
                    5d:35:fc:ed:53:08:11:24:99:3d:a2:89:d5:89:75:
                    11:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B3:64:23:6C:AC:63:3A:82:C2:C5:9C:AD:1B:AD:F0:6A:6F:FA:E4
            X509v3 Authority Key Identifier:
                keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/47742F5AB04D11ED80ADCF0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:d340:7522::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:1e:92:e0:d9:12:ff:a8:8e:57:e4:89:e9:21:e4:66:74:1d:
         76:fe:5b:8e:e4:92:51:64:aa:66:c5:63:bf:8b:ae:1e:b9:04:
         5c:e0:04:bf:a1:f9:22:5a:cd:80:8b:9b:fc:fa:7a:68:9e:bb:
         6a:02:a7:67:7a:d3:b8:a2:e4:86:94:ad:16:f8:2b:36:95:b4:
         e1:b7:9a:cd:e5:62:69:7b:3a:2b:7c:21:4f:db:2b:39:51:17:
         ff:03:e7:6c:9e:8e:41:0c:e7:c0:81:d6:30:84:54:97:1e:b5:
         97:2f:4d:1e:d4:e9:72:a4:a9:d6:a3:5b:8f:d3:93:52:7c:bb:
         3b:f7:4d:7d:ca:c9:a2:31:fe:28:5b:f5:e0:ed:ec:2d:cd:50:
         2e:dd:2b:99:39:71:00:e0:c8:3c:6c:ed:c3:5b:83:37:b9:ad:
         c7:00:e9:c2:95:3a:b1:29:86:65:a0:02:81:e3:26:cb:c8:84:
         46:36:dd:6f:51:67:f5:d4:67:ce:18:f9:1b:e9:64:b7:62:dd:
         ab:65:26:50:4b:e4:4f:64:15:63:02:e3:74:52:ea:59:ae:a7:
         5c:23:c8:7d:58:7a:d0:01:fa:8b:11:6d:14:5f:a2:f0:e7:91:
         a0:e2:1d:e3:f9:06:89:88:89:d3:e0:dc:0c:84:b0:95:9f:f1:
         91:19:00:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----