Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/59C8096CE25511EDBC456C82C4F9AE02.roa
File:                     59C8096CE25511EDBC456C82C4F9AE02.roa (raw, json)
Hash identifier:          ajXCWPkkNcuY387Q9NFIgEzLe9923VaSbVM0vkG1BBM=
Subject key identifier:   6D:3A:2D:65:03:43:91:AA:E5:EF:9B:37:70:52:35:29:B7:F0:42:80
Certificate issuer:       /CN=A91E8DF5/serialNumber=029649105BEF3C16B764C83E0121F63BF5032CAA
Certificate serial:       0F
Authority key identifier: 02:96:49:10:5B:EF:3C:16:B7:64:C8:3E:01:21:F6:3B:F5:03:2C:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ApZJEFvvPBa3ZMg-ASH2O_UDLKo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/59C8096CE25511EDBC456C82C4F9AE02.roa
Signing time:             Mon 24 Apr 2023 04:06:13 +0000
ROA not before:           Mon 24 Apr 2023 04:06:12 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     50058
IP address blocks:        2001:df2:45c0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8DF5/serialNumber=029649105BEF3C16B764C83E0121F63BF5032CAA
        Validity
            Not Before: Apr 24 04:06:12 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64460034-6efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:55:ba:8e:ae:69:e8:c9:a0:1f:26:63:e3:fb:
                    33:a8:93:de:0d:ce:a9:35:4d:6f:23:d1:db:f4:7f:
                    9a:2b:7b:be:38:61:c3:f0:db:83:92:63:0f:6f:94:
                    3d:e2:cb:e4:52:2f:62:0b:b0:5d:e6:86:55:44:82:
                    1d:47:65:df:19:66:bc:fb:a0:ea:be:3e:19:66:ac:
                    4a:ab:21:5f:1d:45:44:fb:6f:b7:21:64:bd:92:62:
                    5e:de:7f:97:c7:d0:2e:9f:03:92:5b:a3:11:9d:0c:
                    06:1b:b9:7f:40:64:89:fe:c9:fa:55:94:c2:1a:4f:
                    69:14:74:a1:02:0b:ef:96:19:a3:a2:78:35:5a:32:
                    1f:a6:51:7e:d5:89:fb:9a:18:84:e6:4e:e7:70:44:
                    26:56:04:1f:83:5a:47:9a:d2:1e:53:bb:a5:27:0e:
                    3a:93:f9:e2:68:cf:fe:1a:76:b4:b2:58:61:71:29:
                    5d:39:eb:26:32:e1:88:43:62:cd:ce:de:50:8d:ce:
                    26:a7:dd:c8:88:d7:c0:8d:a6:ff:6a:97:ac:2e:5e:
                    8e:6e:d0:e7:5e:0e:9f:2a:ac:e3:ee:0b:d5:8e:83:
                    55:6d:31:15:d8:0c:7b:b2:f9:e4:d7:dc:d9:07:a4:
                    17:99:02:ed:79:27:eb:0d:28:6a:cf:28:41:73:11:
                    15:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3A:2D:65:03:43:91:AA:E5:EF:9B:37:70:52:35:29:B7:F0:42:80
            X509v3 Authority Key Identifier:
                keyid:02:96:49:10:5B:EF:3C:16:B7:64:C8:3E:01:21:F6:3B:F5:03:2C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/ApZJEFvvPBa3ZMg-ASH2O_UDLKo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ApZJEFvvPBa3ZMg-ASH2O_UDLKo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/59C8096CE25511EDBC456C82C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:45c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:c7:5e:b0:3d:56:ae:b3:fa:54:0d:7b:28:56:87:e1:62:f9:
         47:0c:d4:2d:30:53:8f:7e:ea:a9:0a:0e:a0:48:79:1c:39:dc:
         7e:20:e8:7e:70:27:09:a7:81:50:47:db:a0:92:ae:d0:53:b1:
         4c:78:ee:52:13:24:7a:84:32:de:fb:ca:f1:84:d1:1f:ee:3f:
         b3:cc:d1:30:3d:a0:4d:17:40:fc:ac:b5:b0:2e:72:06:ba:35:
         33:75:30:c2:9c:50:46:4f:a4:d7:12:09:93:2e:83:4e:2a:46:
         c6:78:a7:f7:0a:48:b6:d9:ff:f3:69:26:be:42:bd:db:d1:d7:
         3b:88:88:1f:09:68:91:b1:24:0a:a4:6e:0c:e1:0a:f8:12:77:
         89:2e:a5:c3:c5:c5:17:67:7c:1d:c1:fa:f4:22:75:63:34:d6:
         c4:31:e8:8c:21:25:3a:84:bc:f8:dc:89:3e:25:ac:5a:ce:8d:
         b5:22:9e:77:a5:36:28:dd:33:48:d0:30:84:f9:11:56:4e:88:
         be:d3:3b:b4:a8:65:1c:fa:8b:26:a8:47:7a:65:c2:86:05:03:
         c4:e9:32:11:34:05:ff:fb:a5:2c:99:4e:fa:43:2a:1d:70:bc:
         ef:64:6e:99:81:d5:f5:c7:cd:1e:75:99:b3:9b:84:52:94:27:
         5a:60:93:ed
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
OERGNTExMC8GA1UEBRMoMDI5NjQ5MTA1QkVGM0MxNkI3NjRDODNFMDEyMUY2M0JG
NTAzMkNBQTAeFw0yMzA0MjQwNDA2MTJaFw0yNDA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0NDYwMDM0LTZlZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCiVbqOrmnoyaAfJmPj+zOok94Nzqk1TW8j0dv0f5ore744YcPw24OSYw9vlD3i
y+RSL2ILsF3mhlVEgh1HZd8ZZrz7oOq+PhlmrEqrIV8dRUT7b7chZL2SYl7ef5fH
0C6fA5JboxGdDAYbuX9AZIn+yfpVlMIaT2kUdKECC++WGaOieDVaMh+mUX7Vifua
GITmTudwRCZWBB+DWkea0h5Tu6UnDjqT+eJoz/4adrSyWGFxKV056yYy4YhDYs3O
3lCNzian3ciI18CNpv9ql6wuXo5u0OdeDp8qrOPuC9WOg1VtMRXYDHuy+eTX3NkH
pBeZAu15J+sNKGrPKEFzERVNAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUbTotZQND
karl75s3cFI1KbfwQoAwHwYDVR0jBBgwFoAUApZJEFvvPBa3ZMg+ASH2O/UDLKow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4REY1L0VFNTY3MTI4RDk4
NTExRURBMjVDQzgzMUM0RjlBRTAyL0FwWkpFRnZ2UEJhM1pNZy1BU0gyT19VRExL
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQXBaSkVGdnZQQmEzWk1nLUFTSDJPX1VETEtvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OERGNS9FRTU2NzEyOEQ5ODUxMUVEQTI1Q0M4MzFDNEY5QUUwMi81OUM4MDk2Q0Uy
NTUxMUVEQkM0NTZDODJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABDfJFwDANBgkqhkiG9w0BAQsFAAOCAQEAJcdesD1WrrP6
VA17KFaH4WL5RwzULTBTj37qqQoOoEh5HDncfiDofnAnCaeBUEfboJKu0FOxTHju
UhMkeoQy3vvK8YTRH+4/s8zRMD2gTRdA/Ky1sC5yBro1M3UwwpxQRk+k1xIJky6D
TipGxnin9wpIttn/82kmvkK929HXO4iIHwlokbEkCqRuDOEK+BJ3iS6lw8XFF2d8
HcH69CJ1YzTWxDHojCElOoS8+NyJPiWsWs6NtSKed6U2KN0zSNAwhPkRVk6IvtM7
tKhlHPqLJqhHemXChgUDxOkyETQF//ulLJlO+kMqHXC872RumYHV9cfNHnWZs5uE
UpQnWmCT7Q==