Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/296CCA26624C11ECBBFEC928C4F9AE02.roa
File:                     296CCA26624C11ECBBFEC928C4F9AE02.roa (raw, json)
Hash identifier:          Bq4z4ndClQCXvrPZsdGFxWvcsbCa+iwW7QUUguTOj44=
Subject key identifier:   8B:19:E9:D3:59:5E:2E:49:35:51:AC:52:E6:81:B4:B6:7A:31:57:54
Certificate issuer:       /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial:       1A39
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/296CCA26624C11ECBBFEC928C4F9AE02.roa
Signing time:             Sun 30 Apr 2023 17:13:55 +0000
ROA not before:           Sun 30 Apr 2023 17:13:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     142033
IP address blocks:        2403:7100:a::/48 maxlen: 48
                          2403:7100:b::/48 maxlen: 48
                          2403:7100:c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6713 (0x1a39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
        Validity
            Not Before: Apr 30 17:13:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=644ea1d2-4821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4f:84:6e:d8:ae:8c:87:22:14:96:2f:17:d8:
                    11:53:9a:36:66:1e:e5:9f:42:74:13:9c:f0:f9:d7:
                    8f:f3:af:f8:b2:05:78:92:88:22:25:e6:3c:5c:eb:
                    2d:57:ff:10:e3:a0:95:77:64:59:ca:6e:78:24:24:
                    bd:61:6c:81:d9:6a:e9:f4:54:c7:82:37:74:ff:57:
                    e6:03:b1:b8:59:cd:be:ae:2a:60:53:85:de:76:ab:
                    56:e6:66:de:74:bd:b8:3b:15:bf:54:9b:ba:61:9c:
                    77:28:93:62:a6:b1:3b:a1:9b:b9:63:37:24:a3:33:
                    68:d8:fe:02:43:fa:5e:2d:55:ad:c8:02:bd:5f:83:
                    00:20:1a:5c:3d:e8:c0:c1:01:87:b0:08:70:e0:9f:
                    98:ee:e1:3b:d4:8d:b9:05:9b:a8:7f:47:01:92:02:
                    62:22:50:a0:24:d5:95:5e:11:4f:40:18:30:90:28:
                    be:2e:d1:78:08:59:86:1a:04:f8:9f:ff:9d:37:22:
                    ca:2f:59:04:8f:54:86:c9:25:76:c9:ff:36:36:a3:
                    ca:8d:7a:14:e7:b4:29:f1:3c:d0:94:8f:3b:aa:95:
                    11:ef:dd:78:cd:c6:a4:80:be:e7:e9:bf:6b:38:dd:
                    d8:ac:8a:84:4e:00:c8:58:02:78:5f:ee:2e:5b:36:
                    d4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:19:E9:D3:59:5E:2E:49:35:51:AC:52:E6:81:B4:B6:7A:31:57:54
            X509v3 Authority Key Identifier:
                keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/296CCA26624C11ECBBFEC928C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:7100:a::-2403:7100:c:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         2f:64:d9:d5:fa:54:1b:77:45:63:94:58:52:13:cf:e0:b1:e8:
         8e:34:08:31:62:b0:11:dc:fb:42:32:41:78:12:ba:83:fd:99:
         46:42:61:f3:bf:55:83:bd:ad:f6:90:30:52:55:72:b1:94:62:
         50:99:d3:9c:7a:6c:b7:4a:47:6a:d6:1f:5d:a8:b5:49:d6:79:
         fa:f1:25:aa:73:9e:ea:38:8f:fb:6a:86:87:c6:a2:ce:82:fb:
         91:9d:84:46:05:fb:05:bf:35:48:2a:f3:74:e1:e3:6e:c9:a9:
         85:3e:a9:73:e5:2a:24:e8:41:e4:28:e6:a5:55:e8:81:54:3a:
         60:89:3c:b0:07:71:81:38:0d:16:5d:e6:d3:ae:84:64:ff:31:
         14:58:4a:d5:90:34:1a:e5:0f:05:02:d2:40:81:0c:ef:50:c6:
         7f:79:67:a3:13:83:e1:4a:30:85:43:ef:6a:c3:64:39:b1:ae:
         f0:61:6c:b0:9c:94:74:a5:ed:9c:37:4f:5a:42:06:a1:ad:3e:
         fa:08:78:bb:58:46:74:1f:1b:7f:71:63:55:7a:21:67:74:e0:
         62:a9:99:d6:6a:cc:ce:62:5c:9b:ae:0d:91:3b:1e:01:87:57:
         68:39:0b:c7:a8:19:79:af:88:16:cc:49:3b:d2:5e:68:e2:f8:
         48:04:7c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----