Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/C0CA56A827DC11ED91B34848C4F9AE02.roa
File:                     C0CA56A827DC11ED91B34848C4F9AE02.roa (raw, json)
Hash identifier:          StXDtQlyp4UA03ND5ABgUhlHONH9pSFtI8CMH6O59vY=
Subject key identifier:   27:A1:87:DF:28:25:A8:33:40:11:EE:F3:B5:C9:06:4A:3E:6B:52:5D
Certificate issuer:       /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
Certificate serial:       12AD
Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/C0CA56A827DC11ED91B34848C4F9AE02.roa
Signing time:             Mon 29 Aug 2022 20:54:20 +0000
ROA not before:           Mon 29 Aug 2022 20:54:20 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     8046
IP address blocks:        2402:d240:1776:412::/64 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4781 (0x12ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
        Validity
            Not Before: Aug 29 20:54:20 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=630d277c-14f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ec:60:4c:7c:5c:2e:0f:71:0b:d0:88:3a:6d:
                    2d:37:8e:37:fc:1a:e1:27:6f:09:92:ae:99:f5:d8:
                    51:3b:09:8e:2a:25:07:75:8e:02:e8:20:22:a0:9a:
                    6d:21:83:8c:af:95:90:7a:d3:51:4e:7c:9a:da:67:
                    90:3f:11:e8:86:dd:e8:cc:c2:73:f6:78:26:78:7f:
                    3d:54:6c:0e:16:8e:5a:20:6e:62:c4:f9:6a:b4:dc:
                    ba:c9:52:bd:45:30:19:ef:f2:05:0e:5d:a5:ca:69:
                    09:c9:c6:0a:57:76:d3:89:55:34:43:00:b9:c4:97:
                    f4:0c:a0:78:08:4a:b3:8c:91:cd:76:4e:07:78:22:
                    22:6e:22:c4:f8:43:98:f6:a7:b0:43:76:5d:f1:ed:
                    62:00:8c:11:42:17:d3:27:02:7e:e8:e0:bc:0e:62:
                    ef:d4:da:dc:08:66:35:6d:3b:7b:8c:0a:e7:42:f4:
                    0a:3e:69:0b:50:1b:2e:18:e8:d9:58:82:fc:42:c0:
                    ce:a4:31:0e:a0:01:cc:30:09:e1:dc:d9:c7:df:98:
                    46:b0:5f:96:58:c1:fb:e2:96:6e:be:84:e5:90:8b:
                    97:cb:6d:2b:1a:58:8b:4e:b0:e5:f8:6d:24:fa:15:
                    5a:95:e4:1a:29:c9:53:0d:2c:97:8b:ee:09:63:26:
                    81:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A1:87:DF:28:25:A8:33:40:11:EE:F3:B5:C9:06:4A:3E:6B:52:5D
            X509v3 Authority Key Identifier:
                keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/C0CA56A827DC11ED91B34848C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:d240:1776:412::/64

    Signature Algorithm: sha256WithRSAEncryption
         c1:74:24:39:98:23:3e:6a:2a:35:79:58:09:03:1f:55:9f:a3:
         a3:f5:b2:1c:b9:03:00:02:75:ff:79:e8:94:0e:70:e8:30:be:
         5b:cb:02:df:7a:3a:55:8c:b7:dd:54:92:a8:0f:5f:98:de:64:
         34:a7:b5:27:f8:b9:f1:c3:1d:9c:cf:99:1c:2f:2b:38:dd:f0:
         3a:c1:39:37:bb:66:a3:23:b0:78:12:41:17:99:4c:7e:29:e4:
         16:41:54:98:00:dc:6e:e6:42:56:33:8f:36:cb:a0:c5:cf:c7:
         8e:dc:9f:f6:ce:d3:ac:ca:03:68:92:d4:f5:0f:50:b6:75:3d:
         ef:9c:a8:e1:62:dd:bd:fd:ab:f5:54:68:40:85:d2:b0:36:e1:
         5d:84:10:aa:4d:1f:40:e3:c7:b1:27:c7:10:7d:56:47:7f:e2:
         a6:7a:2f:6d:01:ec:69:99:d8:72:c3:5c:cd:fa:52:d6:1e:a4:
         08:f1:3a:54:62:0d:9c:37:8e:bf:d4:3c:c6:f0:59:8d:53:42:
         43:72:46:39:68:0c:14:51:71:cf:e7:a0:09:50:3a:03:11:a9:
         38:e3:db:68:f0:1c:4a:4d:bb:d4:b5:8f:7c:86:b5:55:31:3b:
         cc:dc:d2:71:61:bc:58:66:6d:99:6d:95:73:61:42:25:78:61:
         2e:3d:99:cf
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgICEq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU5RkMxMTAvBgNVBAUTKDEyRUE4MkFFMEE5NDMxMDlCMUY0RjM0OTg0RTlDMzZE
NEM2RDU3MUYwHhcNMjIwODI5MjA1NDIwWhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzBkMjc3Yy0xNGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm+xgTHxcLg9xC9CIOm0tN443/BrhJ28Jkq6Z9dhROwmOKiUHdY4C6CAioJpt
IYOMr5WQetNRTnya2meQPxHoht3ozMJz9ngmeH89VGwOFo5aIG5ixPlqtNy6yVK9
RTAZ7/IFDl2lymkJycYKV3bTiVU0QwC5xJf0DKB4CEqzjJHNdk4HeCIibiLE+EOY
9qewQ3Zd8e1iAIwRQhfTJwJ+6OC8DmLv1NrcCGY1bTt7jArnQvQKPmkLUBsuGOjZ
WIL8QsDOpDEOoAHMMAnh3NnH35hGsF+WWMH74pZuvoTlkIuXy20rGliLTrDl+G0k
+hValeQaKclTDSyXi+4JYyaBFwIDAQABo4ICmjCCApYwHQYDVR0OBBYEFCehh98o
JagzQBHu87XJBko+a1JdMB8GA1UdIwQYMBaAFBLqgq4KlDEJsfTzSYTpw21MbVcf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlGQy84MTA0NUUzQTU2
NjAxMUU4QkYzRkQ1MjdDNEY5QUUwMi9FdXFDcmdxVU1RbXg5UE5KaE9uRGJVeHRW
eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0V1cUNyZ3FVTVFteDlQTkpoT25EYlV4dFZ4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjU5RkMvODEwNDVFM0E1NjYwMTFFOEJGM0ZENTI3QzRGOUFFMDIvQzBDQTU2QTgy
N0RDMTFFRDkxQjM0ODQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQcBAf8E
FTATMBEEAgACMAsDCQAkAtJAF3YEEjANBgkqhkiG9w0BAQsFAAOCAQEAwXQkOZgj
PmoqNXlYCQMfVZ+jo/WyHLkDAAJ1/3nolA5w6DC+W8sC33o6VYy33VSSqA9fmN5k
NKe1J/i58cMdnM+ZHC8rON3wOsE5N7tmoyOweBJBF5lMfinkFkFUmADcbuZCVjOP
Nsugxc/Hjtyf9s7TrMoDaJLU9Q9QtnU975yo4WLdvf2r9VRoQIXSsDbhXYQQqk0f
QOPHsSfHEH1WR3/ipnovbQHsaZnYcsNczfpS1h6kCPE6VGINnDeOv9Q8xvBZjVNC
Q3JGOWgMFFFxz+egCVA6AxGpOOPbaPAcSk271LWPfIa1VTE7zNzScWG8WGZtmW2V
c2FCJXhhLj2Zzw==
-----END CERTIFICATE-----