Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS202400/0/323630323a666161383a31303a3a2f34342d3434203d3e203539373330.roa
File:                     323630323a666161383a31303a3a2f34342d3434203d3e203539373330.roa (raw, json)
Hash identifier:          ggtwkCjfn6joy4Ntj6DHd5/btIhfhtrpR+AHkgR7mik=
Subject key identifier:   B1:CF:6F:21:B7:F9:06:0E:B1:37:28:01:4C:20:F6:46:27:AC:37:13
Certificate issuer:       /CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Certificate serial:       72DA9B2E38AB685206B1BBD53744859B80B64570
Authority key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject info access:      rsync://rpki.co/repo/AS202400/0/323630323a666161383a31303a3a2f34342d3434203d3e203539373330.roa
Signing time:             Wed 19 Apr 2023 05:53:47 +0000
ROA not before:           Wed 19 Apr 2023 05:48:47 +0000
ROA not after:            Wed 17 Apr 2024 05:53:47 +0000
asID:                     59730
IP address blocks:        2602:faa8:10::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:da:9b:2e:38:ab:68:52:06:b1:bb:d5:37:44:85:9b:80:b6:45:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
        Validity
            Not Before: Apr 19 05:48:47 2023 GMT
            Not After : Apr 17 05:53:47 2024 GMT
        Subject: CN=B1CF6F21B7F9060EB13728014C20F64627AC3713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:30:6b:d7:ca:59:b4:f9:f9:68:1a:f0:5f:8e:
                    c9:71:85:6a:22:78:3a:2b:42:89:74:6e:12:44:ff:
                    0b:69:58:d3:8b:7c:63:20:05:c2:a2:71:e8:c1:b7:
                    17:28:14:61:6e:16:47:45:ee:64:00:ef:22:bb:03:
                    b7:eb:62:6f:4e:17:73:a0:96:99:0a:e0:94:dd:2f:
                    11:4b:a9:c6:af:d3:07:05:3f:a7:1a:91:f6:c3:d1:
                    d3:6f:af:24:1a:eb:ff:cb:28:fe:68:31:c6:c4:0a:
                    f7:0d:07:65:61:59:bd:1a:f8:14:a1:04:12:20:3f:
                    a2:12:58:36:39:f1:3b:e6:5c:28:d9:30:be:dd:e5:
                    55:b4:33:f4:0b:6b:65:33:e3:62:79:19:bd:6b:3a:
                    77:1f:35:0c:56:21:8d:17:c4:49:12:58:a5:af:b0:
                    d4:d0:db:62:07:17:50:42:33:6e:f0:f5:4c:15:a9:
                    14:e3:6f:50:a8:53:92:da:81:1c:9e:25:de:41:0f:
                    de:01:f0:42:ee:e5:07:e3:57:8d:43:9b:f3:46:d7:
                    4f:b1:bf:74:f9:b9:b5:15:92:42:6f:af:44:bc:a2:
                    df:4e:15:50:81:a1:82:de:d6:03:42:8e:61:c6:6b:
                    46:3d:22:20:91:ea:68:65:f4:01:c8:e3:ae:3f:8d:
                    85:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CF:6F:21:B7:F9:06:0E:B1:37:28:01:4C:20:F6:46:27:AC:37:13
            X509v3 Authority Key Identifier:
                keyid:B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/0/323630323a666161383a31303a3a2f34342d3434203d3e203539373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         13:55:c9:57:08:31:2b:7b:09:1d:4e:8b:b0:a1:00:42:0d:fc:
         14:80:e8:a9:4e:64:e1:66:36:de:29:59:b9:fe:24:4e:1e:63:
         6e:cd:72:42:1d:28:8f:2e:ce:5b:7e:c7:ed:2d:c5:1f:08:ec:
         f4:a6:3d:48:08:5f:58:05:52:0f:07:e2:73:a4:28:df:f9:98:
         74:96:80:a2:a7:0d:a7:e5:26:d8:85:03:57:87:1f:47:76:89:
         06:60:32:b8:67:e2:30:32:69:b7:c9:59:84:9a:c0:cc:0b:1b:
         79:54:5b:f9:d4:5c:d7:77:e6:a8:7e:3f:f1:f9:6f:06:7c:94:
         64:ce:81:7c:b8:eb:0a:5d:78:cf:f6:85:14:d1:c5:e5:ab:40:
         03:6c:71:ee:a9:5b:7c:f4:90:9d:1d:33:1a:7d:14:6f:5f:68:
         db:68:53:df:aa:59:1e:9c:24:f3:8e:9a:10:8b:47:e6:30:0a:
         1b:dc:be:69:8e:62:17:72:72:68:97:8d:f9:a8:89:4b:81:3e:
         6f:de:b7:e9:3c:0b:d7:3f:4f:9a:29:94:20:01:34:62:6a:60:
         85:7b:ee:34:df:73:67:04:e6:85:66:e8:5e:40:46:cd:20:da:
         e5:a7:5b:0a:83:b2:32:5d:0a:0f:6a:69:e7:a7:26:57:ea:94:
         49:9d:08:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----