Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/10/323630323a666234343a3130303a3a2f34302d3430203d3e2031303132.roa
File:                     323630323a666234343a3130303a3a2f34302d3430203d3e2031303132.roa (raw, json)
Hash identifier:          RaoPrhqXKkhVD024YIV3/bJYU/Hz2dnbrCbUWUwbIJI=
Subject key identifier:   9F:8D:EC:EB:60:88:86:19:10:18:92:EB:77:DA:B7:C8:04:BB:41:E6
Certificate issuer:       /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial:       52BC44DD194DC71BA66CE3A492564616E17CD955
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority info access:    rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject info access:      rsync://rpki.co/repo/AS945/10/323630323a666234343a3130303a3a2f34302d3430203d3e2031303132.roa
Signing time:             Mon 10 Apr 2023 03:31:28 +0000
ROA not before:           Mon 10 Apr 2023 03:26:28 +0000
ROA not after:            Mon 08 Apr 2024 03:31:28 +0000
asID:                     1012
IP address blocks:        2602:fb44:100::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:bc:44:dd:19:4d:c7:1b:a6:6c:e3:a4:92:56:46:16:e1:7c:d9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
        Validity
            Not Before: Apr 10 03:26:28 2023 GMT
            Not After : Apr  8 03:31:28 2024 GMT
        Subject: CN=9F8DECEB60888619101892EB77DAB7C804BB41E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:61:66:e7:9e:5c:90:4a:c3:32:b6:47:ce:4f:
                    7a:43:ce:8e:f3:8a:fb:09:64:67:10:d3:ba:c4:c9:
                    71:64:0f:bf:5c:de:35:b5:93:72:00:2e:5b:81:86:
                    b7:fc:6e:41:25:53:7a:08:54:37:e4:88:02:90:a8:
                    40:05:9b:1c:ca:6e:7d:ee:0f:ba:5d:3d:44:c6:df:
                    1a:e1:c9:9c:9c:07:77:2e:cb:d8:97:a4:ab:bb:d9:
                    60:78:de:13:ee:53:28:f7:60:3b:61:47:2b:7f:31:
                    fa:dd:2d:1d:ef:9a:1c:45:24:26:84:c2:59:3d:f6:
                    80:3f:bf:7b:94:8a:32:1a:e2:8b:53:50:2d:cc:c9:
                    17:40:8e:5f:72:84:a0:b8:46:e5:89:21:b7:a1:ea:
                    61:b7:d6:31:42:23:6a:b9:07:ae:99:88:a7:1f:4b:
                    53:4c:ba:b7:16:99:bf:95:11:14:b3:1b:ff:77:3c:
                    4d:9a:27:c4:94:cb:d0:91:dd:33:8f:42:fa:6a:1d:
                    e5:f1:9d:df:43:5c:a6:49:3d:ee:02:9f:8b:03:bf:
                    74:94:e0:b2:16:72:4b:c4:c8:ed:cc:9a:02:34:bc:
                    ad:3e:f7:7a:b7:42:5f:33:b9:0b:26:3e:7f:0d:b7:
                    a9:e8:c5:ad:3a:65:7a:27:3a:77:cc:e0:32:78:34:
                    97:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8D:EC:EB:60:88:86:19:10:18:92:EB:77:DA:B7:C8:04:BB:41:E6
            X509v3 Authority Key Identifier:
                keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/10/323630323a666234343a3130303a3a2f34302d3430203d3e2031303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb44:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         c8:ef:0d:10:62:70:38:7c:30:87:0e:20:8c:54:21:7d:df:3d:
         4e:e8:a1:5b:6f:4a:ae:3b:59:24:8f:e6:2e:35:f5:5f:a4:bd:
         35:1c:17:7e:44:a6:82:05:22:d2:3a:b3:6b:ed:83:dd:3c:aa:
         47:ab:11:fe:26:e3:cd:a8:00:7b:fd:41:fc:68:41:99:e9:f1:
         12:f2:79:f0:15:20:6b:66:4c:b5:8a:1e:f9:8d:6b:c1:f6:30:
         c1:c5:23:da:2e:52:67:69:c2:36:cf:75:bf:b2:a0:f9:d6:bc:
         46:73:8f:3f:f2:7e:51:ae:f6:7c:f7:1f:b7:21:e0:f6:f9:69:
         b4:a6:63:d9:af:d1:a3:58:ee:e2:d5:85:b0:99:81:f2:cc:a1:
         07:f8:bf:54:22:73:e4:97:0b:6e:69:97:fb:2a:60:f2:8e:53:
         7b:9e:16:1f:da:16:4d:f1:6e:66:6e:1c:af:32:fc:6f:9a:c9:
         c5:30:f5:0e:ad:5e:2a:a8:89:e0:25:1c:77:48:c9:2a:cb:87:
         d3:12:8e:c9:5f:ad:25:2b:a0:19:b8:b0:1e:bf:13:ba:f7:c7:
         73:3e:64:ba:d0:76:86:1d:1a:e0:e1:93:4e:84:ae:54:97:90:
         eb:b4:76:4e:46:d4:65:36:04:de:df:aa:96:ba:98:bb:a2:9b:
         87:5c:c3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----