Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/F779F66C324911EF9066CF0DC4F9AE02.roa
File:                     F779F66C324911EF9066CF0DC4F9AE02.roa (raw, json)
Hash identifier:          SsmlCszHn/hjH+eqy0P3uKurLlAiC3V5c06W44Q69k4=
Subject key identifier:   90:AA:5B:F4:DA:97:60:02:37:1A:24:FA:38:88:29:56:5F:E8:E0:87
Certificate issuer:       /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial:       3E
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/F779F66C324911EF9066CF0DC4F9AE02.roa
Signing time:             Mon 24 Jun 2024 16:53:13 +0000
ROA not before:           Mon 24 Jun 2024 16:53:13 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     215084
IP address blocks:        2403:ad80:101a::/48 maxlen: 48
                          2403:ad80:101b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 24 Jun 2024 16:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
        Validity
            Not Before: Jun 24 16:53:13 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6679a479-e999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:cd:fe:e6:a4:91:bc:3d:f6:da:58:95:a6:
                    14:96:a7:0b:1f:3a:48:4d:ce:c1:2e:6b:2c:2d:0b:
                    97:56:4d:fe:b5:09:99:5e:01:3d:0b:bd:69:fe:08:
                    4d:84:4d:0d:44:f5:5c:59:46:d6:3e:03:4b:1b:d3:
                    6a:0c:1f:34:c1:50:76:9d:a4:8c:e6:a6:3e:e3:2c:
                    73:37:39:3c:ef:86:bd:25:37:d2:43:79:b5:58:77:
                    21:3f:d7:ea:7a:64:06:47:ec:4a:d1:14:f7:02:ee:
                    82:f2:9c:81:c0:8b:ff:37:cd:66:84:a5:3e:33:82:
                    ee:4f:8e:a8:91:9f:09:7b:0c:b1:81:e1:2a:ae:d4:
                    58:ba:af:bf:4d:e2:47:48:b5:2d:49:cc:5a:df:59:
                    ba:5f:21:78:5f:b8:04:92:d1:5a:a3:05:61:b4:c5:
                    2b:1a:32:64:e5:1a:57:5a:fc:d4:11:1d:8a:91:18:
                    9e:7c:6f:7e:6e:11:d1:20:db:22:52:9d:81:0b:9e:
                    e3:97:2b:e0:88:b8:f4:62:48:c6:e4:49:d7:8c:02:
                    b9:b1:68:ee:03:cf:22:a4:15:88:4c:e4:ad:46:72:
                    44:88:ed:65:f7:98:e5:61:1b:51:ca:a4:3d:aa:36:
                    5f:b5:27:53:21:cf:bc:c2:ab:86:b1:f4:98:a9:f4:
                    23:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AA:5B:F4:DA:97:60:02:37:1A:24:FA:38:88:29:56:5F:E8:E0:87
            X509v3 Authority Key Identifier:
                keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/F779F66C324911EF9066CF0DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:ad80:101a::/47

    Signature Algorithm: sha256WithRSAEncryption
         19:d7:cd:f7:80:17:24:93:c2:ea:a6:74:e7:0f:fe:46:df:ab:
         4b:3b:ca:62:1d:78:6f:39:5b:bd:67:d2:fd:50:c7:95:ba:bf:
         74:c9:ee:00:9e:9e:5c:e1:d8:64:87:1e:09:f5:af:e8:b2:93:
         55:99:4d:43:67:d3:94:10:33:53:11:95:f4:ba:11:47:a6:90:
         2d:b4:0c:03:21:be:4e:39:da:e5:ff:81:f1:d9:56:51:ca:c9:
         32:a1:17:16:6b:83:36:09:cf:ab:e3:c0:cf:26:d3:58:ee:30:
         7b:ae:3f:c3:de:64:8e:82:10:d4:d6:47:0c:00:b9:c4:40:d5:
         0b:4a:05:4d:a5:49:a5:15:bf:9f:08:d4:e7:ab:73:58:ed:09:
         0d:0b:1b:71:b6:59:bd:22:86:5a:55:68:1d:96:32:16:ad:6b:
         d3:1e:c8:e1:86:98:e4:c7:c2:ec:d5:1c:99:c6:97:56:a4:d3:
         a1:11:15:20:fe:ac:63:94:83:ee:ec:f2:78:7d:c5:60:e2:78:
         b5:87:ef:4e:9e:08:2c:5c:c6:14:d6:9d:2e:af:40:e2:ee:c3:
         c7:aa:72:c3:b0:5f:52:63:4b:fd:23:7b:66:fe:f5:60:7f:ed:
         84:5f:3d:e9:77:9a:14:d2:1d:f1:b2:1c:de:62:d9:07:6b:d2:
         fc:7d:64:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----