Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C229CAAC683511EE933FE514C4F9AE02.roa
File:                     C229CAAC683511EE933FE514C4F9AE02.roa (raw, json)
Hash identifier:          05UBp1AV2Ivfx9HSAwRZKBnQIoPbSEVTH3GCPXiXyzc=
Subject key identifier:   F2:50:1C:C3:7A:B9:A8:28:49:79:7C:78:3E:EC:10:7D:DA:64:DA:EE
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0B43
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C229CAAC683511EE933FE514C4F9AE02.roa
Signing time:             Wed 11 Oct 2023 12:57:40 +0000
ROA not before:           Wed 11 Oct 2023 12:57:40 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     199436
IP address blocks:        2406:840:9999::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 11 Oct 2023 13:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2883 (0xb43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Oct 11 12:57:40 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=65269bc3-65c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:41:c1:b7:22:32:df:fe:a6:91:00:d9:e1:46:
                    98:6f:d4:ca:9c:72:d4:ad:de:2c:a2:40:75:7b:0f:
                    52:75:06:44:7d:90:19:aa:13:ac:16:30:a7:ed:0b:
                    ae:ad:5b:cd:d1:7f:3a:11:e9:41:03:12:23:03:e7:
                    77:fd:7c:4f:c0:35:4a:62:57:17:ca:d7:ea:8a:99:
                    84:19:e5:bc:ea:6e:28:cb:8d:ed:a8:c2:f5:00:2d:
                    7d:af:4b:97:08:76:cf:4f:07:07:58:39:6b:19:ca:
                    54:52:57:23:fd:6e:f4:c8:aa:b9:37:c2:d1:2a:78:
                    cc:80:fe:f8:a4:13:aa:c4:43:49:92:c3:a0:5c:7a:
                    16:c1:b3:89:a1:f3:00:3e:ed:df:60:3f:b6:60:6f:
                    b8:ea:8b:eb:7c:03:9c:b2:c3:fd:d6:64:5c:57:d6:
                    a0:4e:af:3b:9b:95:bf:f5:6e:b5:f8:0a:31:47:15:
                    21:ba:3f:d6:0b:9c:22:ac:bb:fa:69:e3:18:42:c3:
                    da:97:4b:66:ad:1f:08:7e:52:0f:85:a1:dc:b8:99:
                    c9:47:dd:f0:98:fb:e4:70:c3:2b:dc:00:93:c1:ab:
                    d9:3b:39:1a:f2:c7:60:c9:12:30:a7:fc:6f:d0:01:
                    82:0a:59:8c:72:61:e0:73:75:74:64:41:04:19:a1:
                    a9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:50:1C:C3:7A:B9:A8:28:49:79:7C:78:3E:EC:10:7D:DA:64:DA:EE
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C229CAAC683511EE933FE514C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:9999::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:a9:e1:fc:9f:75:cb:64:1d:92:68:e1:11:fe:e5:c5:ea:4f:
         db:3e:4a:47:7c:1a:70:1a:7c:c9:a9:35:99:9b:b5:49:e3:fd:
         68:c8:ff:34:eb:92:55:10:4b:ed:e4:ac:a8:15:5f:e5:61:5e:
         fe:74:97:85:16:73:c4:e2:54:a6:2c:a2:70:5e:21:f6:ea:37:
         80:2c:6a:b2:ac:85:7b:b1:16:f4:5b:02:4f:33:ba:7e:87:f3:
         91:40:f3:07:2b:41:ae:9c:e9:3a:23:69:71:7e:53:2a:cc:5d:
         19:44:4c:24:a6:48:e8:6e:0b:02:52:35:8a:22:02:78:26:9e:
         71:ec:7f:8d:56:2e:42:2e:9a:a9:ec:84:81:c0:1b:43:ad:f9:
         ba:fc:f6:2e:6f:8b:19:98:c7:aa:f2:c3:c7:c9:90:f4:7e:d8:
         61:73:c0:84:2e:1d:9b:d1:86:2c:a5:5e:7f:bc:b3:30:71:ac:
         d8:64:f9:7c:37:49:8a:db:01:5b:e6:3e:3c:72:cf:f9:6f:89:
         85:09:3b:dc:14:21:26:a3:74:65:c9:6c:4e:09:0b:d6:e6:8a:
         e1:a4:1b:76:ce:19:47:6d:cb:c7:69:ee:ea:d8:0f:3f:a6:dd:
         06:d1:86:4a:30:a8:17:d0:52:92:92:36:ef:18:4f:6d:ea:dd:
         45:74:20:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----