Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/7086C108890711EEA367A12CC4F9AE02.roa
File:                     7086C108890711EEA367A12CC4F9AE02.roa (raw, json)
Hash identifier:          SMYVmN3H85ArX88Q9SnZho91DrBw7afY44CRQJ2Yhk8=
Subject key identifier:   2F:6F:96:C8:B8:47:42:CB:F5:7F:08:8B:4E:11:6C:D2:D5:22:5F:FA
Certificate issuer:       /CN=A91C725F/serialNumber=CC72E1797B2204D8EC69EC98C41739CC8C664C9C
Certificate serial:       0966
Authority key identifier: CC:72:E1:79:7B:22:04:D8:EC:69:EC:98:C4:17:39:CC:8C:66:4C:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHLheXsiBNjsaeyYxBc5zIxmTJw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/7086C108890711EEA367A12CC4F9AE02.roa
Signing time:             Wed 22 Nov 2023 07:19:14 +0000
ROA not before:           Wed 22 Nov 2023 07:19:14 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     134585
IP address blocks:        2403:5bc0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 14 Oct 2024 01:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2406 (0x966)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C725F/serialNumber=CC72E1797B2204D8EC69EC98C41739CC8C664C9C
        Validity
            Not Before: Nov 22 07:19:14 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=655dab72-ce22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:42:52:a6:d3:40:61:a1:44:28:ea:33:f5:fe:
                    59:fa:01:a0:48:c1:52:7d:7d:5e:7a:e1:5b:d5:b1:
                    b3:ab:75:c5:5a:ad:30:6c:8d:f7:fa:3e:2b:2a:aa:
                    a2:ff:de:24:f6:39:98:5b:25:dc:13:9b:19:81:e7:
                    b9:e7:53:f5:f8:09:79:00:07:40:2a:43:c1:74:1c:
                    c0:d0:a9:9f:81:fb:b0:4e:66:a4:7c:9f:90:f4:66:
                    fa:ce:0f:7a:b4:01:dd:1a:8e:24:be:d8:df:08:16:
                    dc:60:ca:64:90:65:fd:5b:f3:ef:b8:a2:d2:ac:0a:
                    19:7e:5e:ef:3a:09:a3:61:59:52:c7:ed:b8:fa:da:
                    6b:d4:19:61:ba:44:b9:72:e1:69:bc:d1:67:c4:31:
                    a3:7b:50:c0:b6:96:f3:69:ab:ed:c5:dd:e4:50:b9:
                    1a:82:9a:e6:60:a0:5f:a7:fc:bd:3b:f6:fd:b5:1c:
                    2c:9e:b6:49:26:ad:28:4f:9a:1b:a8:16:ca:10:bf:
                    7f:e5:c5:9c:5b:2b:41:5c:04:6e:8a:f1:a1:84:97:
                    95:5b:8e:8c:28:3a:98:10:82:38:e4:4f:dd:44:d1:
                    0d:6a:0f:d5:21:d1:ad:89:33:42:d7:f3:7f:12:ee:
                    3b:70:fa:ea:ce:23:cd:0b:f2:c3:8f:1a:a3:cb:e1:
                    80:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6F:96:C8:B8:47:42:CB:F5:7F:08:8B:4E:11:6C:D2:D5:22:5F:FA
            X509v3 Authority Key Identifier:
                keyid:CC:72:E1:79:7B:22:04:D8:EC:69:EC:98:C4:17:39:CC:8C:66:4C:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/zHLheXsiBNjsaeyYxBc5zIxmTJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHLheXsiBNjsaeyYxBc5zIxmTJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/7086C108890711EEA367A12CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:5bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:8f:bb:48:62:69:1b:c2:96:2b:63:5c:30:c4:d2:3b:84:bc:
         79:bc:74:4f:2a:ea:44:71:a5:ab:d9:a5:39:38:3f:50:cc:c4:
         f7:5f:b0:02:e0:ba:c6:59:07:90:60:10:ec:c5:bc:3d:51:b6:
         67:22:f1:0c:e6:07:ef:5a:92:6a:94:d5:01:f3:2f:41:b3:8e:
         38:b3:f7:6e:ab:17:e3:04:10:8f:3c:05:fc:f5:15:a7:f8:3c:
         73:a9:0f:00:d0:5d:67:53:65:01:65:d8:3b:0f:bc:c6:ca:e4:
         4b:d0:d2:f3:d7:df:3c:e2:fe:d5:41:07:40:64:b4:7b:72:e4:
         e3:98:65:69:40:65:d0:14:39:fc:60:b6:44:63:d1:36:f2:2d:
         f2:99:5f:b8:29:22:86:ba:61:14:04:22:eb:61:1e:f3:e9:2f:
         86:36:2a:26:ac:dd:5b:01:17:82:1b:e3:2f:93:38:2e:00:60:
         d9:c2:37:4e:24:ee:81:5c:43:65:bc:ce:b4:5c:56:e0:4b:91:
         43:49:ff:4d:c0:8a:6c:2e:22:93:87:46:6f:02:d9:30:d3:13:
         93:fa:b0:19:31:6a:fe:f2:01:dd:bb:93:1d:4f:bf:98:15:7e:
         06:d9:88:83:ec:68:a5:62:69:ad:4b:39:8c:0b:19:54:f3:25:
         cb:33:08:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----