Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/10C34112CFED11ECA4798D14C4F9AE02.roa
File:                     10C34112CFED11ECA4798D14C4F9AE02.roa (raw, json)
Hash identifier:          25rR1amU9ID4sFCvyCVaT0kavz2+YRi14FW5yARJ8AE=
Subject key identifier:   EE:D1:D0:5E:EB:41:8A:93:4B:79:91:B1:E6:84:AA:A2:05:C8:B0:53
Certificate issuer:       /CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52
Certificate serial:       0758
Authority key identifier: C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/10C34112CFED11ECA4798D14C4F9AE02.roa
Signing time:             Fri 14 Apr 2023 22:39:33 +0000
ROA not before:           Fri 14 Apr 2023 22:39:33 +0000
ROA not after:            Wed 29 May 2024 00:00:00 +0000
asID:                     398791
IP address blocks:        2407:1c00:6200::/40 maxlen: 40
                          2407:1c00:6300::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1880 (0x758)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52
        Validity
            Not Before: Apr 14 22:39:33 2023 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=6439d625-16ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d5:5d:9b:2e:b8:0c:3d:24:4d:81:81:98:3d:
                    c5:dc:d2:bd:0c:5b:cc:5f:61:b6:04:ff:d1:4d:a9:
                    b3:1a:a4:21:fa:8c:fc:a1:b1:51:24:7b:ae:37:77:
                    a1:59:aa:b2:09:21:ef:30:36:0d:4d:0c:b3:96:d3:
                    c0:7e:b2:8d:90:eb:a1:3e:48:4b:de:6e:5d:be:90:
                    5f:ed:3e:f3:f6:10:a5:46:27:d4:c3:a1:b7:1b:22:
                    b2:a5:22:a1:9c:47:67:f6:b4:59:0d:ff:a4:4e:58:
                    48:4a:b1:d4:37:ca:18:dc:5d:b9:5d:71:93:46:06:
                    dc:af:af:c6:ee:1e:ae:b4:6f:ed:ab:1d:d3:f7:9e:
                    cf:31:9e:3a:8d:d5:2b:f7:8a:e7:98:ea:68:ea:f0:
                    54:3a:a7:1b:bc:8a:74:5f:1f:99:ae:c0:b6:8a:dc:
                    82:27:68:52:fb:3e:47:b3:ec:78:11:0c:2b:32:e1:
                    cf:1b:f9:b9:3c:92:1e:6a:50:d2:a0:83:5a:70:47:
                    0b:0e:59:d0:e1:41:f5:3f:73:dd:1a:5c:cc:21:7a:
                    8c:51:4a:56:26:ef:3c:6c:d5:20:61:c3:08:6a:e6:
                    5f:ed:2a:16:67:12:1e:6b:7c:25:12:f3:76:b2:b3:
                    08:5d:46:47:4f:8a:09:01:bd:a6:be:b3:86:e6:5f:
                    67:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D1:D0:5E:EB:41:8A:93:4B:79:91:B1:E6:84:AA:A2:05:C8:B0:53
            X509v3 Authority Key Identifier:
                keyid:C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/10C34112CFED11ECA4798D14C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:1c00:6200::/39

    Signature Algorithm: sha256WithRSAEncryption
         03:9a:17:5f:83:33:d6:e2:1d:40:e9:41:23:7e:17:8d:8c:dc:
         ef:a5:e8:8f:28:2f:3c:ba:0f:59:51:e7:d3:b6:81:4d:a6:76:
         57:1e:88:cb:ed:e5:67:ca:7e:64:3d:0c:c2:c4:8b:bc:8d:f1:
         6a:80:b3:78:0f:e2:a2:8b:25:8d:24:b1:d6:5b:2e:85:13:93:
         9b:73:7b:0c:c8:fc:1a:49:52:f5:ef:cf:59:2f:01:38:09:8b:
         a5:24:a6:6b:4a:fc:a7:2d:45:f8:11:b7:8e:b9:f5:69:26:b9:
         8c:9d:cc:3a:00:69:4a:cd:38:9c:20:c9:20:9e:b2:70:8b:0e:
         dd:c4:4e:f6:eb:07:4b:c3:e0:59:71:97:ae:eb:0b:5a:dd:cf:
         d2:27:19:05:8f:3d:e2:37:b7:38:64:8c:52:80:c8:e8:62:af:
         d1:d0:74:72:a5:01:d3:58:3f:8f:ca:79:f4:2f:ed:0b:91:58:
         45:bf:c7:94:5f:b1:9d:88:f3:08:ff:92:cb:a9:18:3f:6f:44:
         d7:e0:bc:54:48:92:8d:e4:c6:fb:64:c0:0d:d2:41:a9:1d:b7:
         57:f3:c7:5d:c2:78:00:23:64:24:d4:1b:68:ce:9f:90:ed:dc:
         b4:01:b0:54:93:f2:85:ad:40:1e:a9:ab:72:01:e2:70:f3:b3:
         2e:12:9a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 31 19:29:15 2023 by rpki-client on console-fra.rpki-client.org