Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/10/323630323a3233343a3a2f33322d3332203d3e20393435.roa
File:                     323630323a3233343a3a2f33322d3332203d3e20393435.roa (raw, json)
Hash identifier:          KjPlPl/U2T6ehWwvGAoSWY0fy/PDk9IPv+LQKEQkibI=
Subject key identifier:   0C:BF:A4:5C:73:F9:B0:FE:B0:D3:BA:FD:4C:A9:FE:27:5E:61:77:49
Certificate issuer:       /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial:       13BEEF4D2CC887911B31963B07478CE4A455DD5F
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority info access:    rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject info access:      rsync://rpki.co/repo/AS945/10/323630323a3233343a3a2f33322d3332203d3e20393435.roa
Signing time:             Thu 21 Sep 2023 14:23:07 +0000
ROA not before:           Thu 21 Sep 2023 14:18:07 +0000
ROA not after:            Thu 19 Sep 2024 14:23:07 +0000
asID:                     945
IP address blocks:        2602:234::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:be:ef:4d:2c:c8:87:91:1b:31:96:3b:07:47:8c:e4:a4:55:dd:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
        Validity
            Not Before: Sep 21 14:18:07 2023 GMT
            Not After : Sep 19 14:23:07 2024 GMT
        Subject: CN=0CBFA45C73F9B0FEB0D3BAFD4CA9FE275E617749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3c:72:f1:3e:4d:52:5f:e0:cb:9c:6e:a0:5d:
                    a2:4f:a2:ff:e5:c5:34:da:29:87:87:90:b2:e9:72:
                    53:b6:96:d8:c9:f0:2a:eb:2e:fa:47:13:54:3d:4d:
                    24:07:78:55:d1:d0:63:4c:36:f0:08:dd:90:f0:4f:
                    97:f0:5c:d0:dd:f7:67:a6:36:30:b7:e6:d0:7c:56:
                    65:9b:eb:bd:e1:96:2f:28:e2:18:ae:a1:95:3b:e0:
                    8d:8a:5f:16:8a:65:91:21:ec:0f:41:ef:4b:fe:9a:
                    31:9f:59:75:ee:85:fc:25:ff:ce:67:16:47:64:34:
                    2a:1d:f0:53:cf:1c:59:be:3e:6d:37:d7:dc:cb:50:
                    d3:92:1d:70:ce:92:d5:e0:5b:34:32:46:7f:14:f5:
                    91:da:f7:4c:f1:a9:af:4e:a2:9b:f0:09:be:a4:94:
                    8e:56:8a:5c:b1:e6:45:e7:68:c1:d6:af:a2:97:40:
                    68:f3:04:51:b1:48:19:7b:0e:50:7a:61:0b:1d:c8:
                    01:3f:90:b8:95:81:6d:2e:7c:f1:cc:88:81:6f:74:
                    9f:f1:87:c9:99:80:67:10:18:c8:9a:8a:31:ae:6b:
                    b4:60:9a:80:aa:ff:0d:19:dc:a7:7a:e0:6d:b5:ed:
                    d6:93:3c:43:1e:3e:27:ea:a5:f7:0f:c0:b1:96:56:
                    79:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BF:A4:5C:73:F9:B0:FE:B0:D3:BA:FD:4C:A9:FE:27:5E:61:77:49
            X509v3 Authority Key Identifier:
                keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/10/323630323a3233343a3a2f33322d3332203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:234::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:f5:d6:bd:8b:01:6a:63:95:fb:86:8c:21:43:1b:b6:9e:20:
         98:5a:71:88:0c:94:30:37:75:eb:f9:4f:45:1b:23:a9:69:29:
         39:e2:4f:95:f7:9d:5d:d5:f3:22:93:5d:84:98:7b:56:43:1a:
         b2:74:6d:82:41:08:c3:40:e3:41:12:c3:98:c9:54:28:7c:19:
         42:0d:46:77:47:ea:c8:f6:69:d0:ea:a3:bb:77:ba:39:7c:f9:
         1a:d7:c3:8a:37:58:ca:74:a6:69:fe:67:56:b4:e0:61:26:12:
         7e:f2:08:3c:06:8e:ad:16:0c:a7:d6:3d:d6:d1:7b:5b:11:8b:
         55:ed:cc:91:ae:3c:8a:c0:d6:c0:6b:17:03:64:fe:3c:2c:2b:
         c7:81:0e:cf:f6:f6:ac:ec:a7:2e:e5:08:54:20:74:15:18:42:
         b8:04:dc:e8:21:25:d0:77:26:fe:e0:8a:66:f7:f1:ca:46:8e:
         5f:71:1e:5d:59:3b:fa:12:fa:b5:58:5d:9b:d6:d4:17:8a:38:
         c8:3b:ea:61:26:27:2c:2d:dc:37:9b:27:b1:7b:96:4f:e5:78:
         55:c0:e3:20:b1:20:0e:69:27:b5:55:49:c0:3c:f5:b5:50:02:
         ea:7d:88:fa:56:73:4e:62:de:7e:0e:87:13:74:b7:52:17:c3:
         e4:94:82:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----