Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/4E6DC1C4210C11EE8355944BC4F9AE02.roa
File:                     4E6DC1C4210C11EE8355944BC4F9AE02.roa (raw, json)
Hash identifier:          m9vC5vHfczHYRPkbapm3tDKPJpj6Wo3YBBmm0sPS5k0=
Subject key identifier:   AF:F8:D4:39:17:93:40:AF:1F:C2:7E:2C:AE:24:47:B2:31:2C:D8:4C
Certificate issuer:       /CN=A918C287/serialNumber=847014B15AFA781D228192BE054153DB6667D576
Certificate serial:       0177
Authority key identifier: 84:70:14:B1:5A:FA:78:1D:22:81:92:BE:05:41:53:DB:66:67:D5:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHAUsVr6eB0igZK-BUFT22Zn1XY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/4E6DC1C4210C11EE8355944BC4F9AE02.roa
Signing time:             Wed 12 Jul 2023 23:32:04 +0000
ROA not before:           Wed 12 Jul 2023 23:32:04 +0000
ROA not after:            Sat 01 May 2038 00:00:00 +0000
asID:                     123443211
IP address blocks:        2401:4600::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C287/serialNumber=847014B15AFA781D228192BE054153DB6667D576
        Validity
            Not Before: Jul 12 23:32:04 2023 GMT
            Not After : May  1 00:00:00 2038 GMT
        Subject: CN=64af37f3-5efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f5:4d:d1:2c:5a:7f:f4:3f:0b:68:7e:54:54:
                    ce:58:bc:25:d5:e5:8d:6b:cd:2b:aa:b3:35:19:ff:
                    b0:1e:c9:a9:67:f8:38:d4:b2:90:19:62:19:72:27:
                    8b:08:92:2f:15:b0:99:49:d1:d7:52:fc:91:3b:59:
                    50:3c:85:cc:52:b3:d7:14:68:5e:28:14:ea:83:75:
                    18:81:b5:1c:c8:05:3f:19:92:b8:8f:f0:e4:53:79:
                    af:67:a7:65:ab:14:34:f2:93:fe:65:ea:69:15:53:
                    52:14:3d:73:8b:82:70:8d:0e:0d:25:df:2d:4e:19:
                    8b:80:92:70:1e:9e:d2:bb:84:1c:67:4c:2b:1e:e7:
                    aa:7f:37:d5:a0:94:65:ef:38:c6:65:69:97:b9:f7:
                    42:14:62:fa:29:64:8b:09:11:49:c7:f5:d4:5a:35:
                    32:9a:9f:fb:ef:45:2a:73:e6:83:75:f8:23:c2:ce:
                    29:4f:d4:9b:b5:a8:7e:2d:52:87:fc:e4:d2:00:df:
                    85:ca:0f:c2:12:f5:0b:8f:25:f2:2f:e0:4e:b6:d8:
                    e8:9e:38:56:66:9d:bc:46:71:7f:2e:ff:fd:90:6b:
                    9b:d2:62:b8:5d:06:cf:55:2b:ef:cc:0c:d6:11:97:
                    3d:69:7e:f3:3f:3d:2e:79:db:57:77:91:7a:ae:4d:
                    b5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F8:D4:39:17:93:40:AF:1F:C2:7E:2C:AE:24:47:B2:31:2C:D8:4C
            X509v3 Authority Key Identifier:
                keyid:84:70:14:B1:5A:FA:78:1D:22:81:92:BE:05:41:53:DB:66:67:D5:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/hHAUsVr6eB0igZK-BUFT22Zn1XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHAUsVr6eB0igZK-BUFT22Zn1XY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/4E6DC1C4210C11EE8355944BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:4600::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:92:0d:40:bd:ed:83:70:9d:0e:3b:e2:5a:ba:00:7d:55:69:
         0a:2d:22:f5:2b:7b:73:a7:91:ce:8d:3f:67:3f:07:37:2e:77:
         bf:3b:4a:87:58:35:47:85:c5:97:c5:e8:10:24:80:96:57:4c:
         f2:d1:1e:26:ff:4e:e0:f1:10:1c:62:5b:07:20:48:ee:08:43:
         37:58:f5:d9:50:ba:ae:bd:2d:e7:1f:d5:ba:19:8f:ef:66:ff:
         c9:06:6a:79:3f:ee:bd:69:ce:0c:90:2d:b5:d0:a4:b2:ce:9c:
         4a:26:fe:6e:fa:6d:32:45:4f:f5:0f:e0:87:d9:69:a5:76:1f:
         e6:c3:1e:19:53:77:40:05:34:05:e8:22:ad:a8:e1:dd:3c:85:
         40:cd:f4:f5:57:6d:ef:19:8b:ad:8d:23:7e:a0:4a:a8:5e:a3:
         9b:b5:95:1e:f3:fe:b4:cc:66:38:6b:ad:a6:64:a0:cb:b1:b4:
         7c:a5:b1:49:f0:ab:76:96:7a:29:2f:a5:6f:11:85:53:db:47:
         78:0d:51:6d:13:8e:9b:ce:d6:55:34:41:91:7d:b4:db:4c:cd:
         5d:21:ec:d5:20:9d:27:9f:cb:2a:93:48:09:ad:7f:27:9a:1b:
         96:84:13:70:19:f5:30:87:d9:d0:7c:ee:f1:3a:37:b0:36:a8:
         94:83:bf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----