Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS202400/0/323630323a666161383a313a3a2f34382d3438203d3e20313531313838.roa
File:                     323630323a666161383a313a3a2f34382d3438203d3e20313531313838.roa (raw, json)
Hash identifier:          fuKn9t7X5Wzab1dt1o9l4LH1hRxGvl6ehs4RIxBiP6Y=
Subject key identifier:   B4:82:3A:55:BE:ED:DA:A9:88:1A:9B:7A:F1:CC:0E:78:4F:6E:E7:4C
Certificate issuer:       /CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Certificate serial:       7DDDE0D41F3C92284D838C8CD379CDA897509FA5
Authority key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject info access:      rsync://rpki.co/repo/AS202400/0/323630323a666161383a313a3a2f34382d3438203d3e20313531313838.roa
Signing time:             Thu 13 Apr 2023 15:50:12 +0000
ROA not before:           Thu 13 Apr 2023 15:45:12 +0000
ROA not after:            Thu 11 Apr 2024 15:50:12 +0000
asID:                     151188
IP address blocks:        2602:faa8:1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:dd:e0:d4:1f:3c:92:28:4d:83:8c:8c:d3:79:cd:a8:97:50:9f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
        Validity
            Not Before: Apr 13 15:45:12 2023 GMT
            Not After : Apr 11 15:50:12 2024 GMT
        Subject: CN=B4823A55BEEDDAA9881A9B7AF1CC0E784F6EE74C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:e2:fb:35:a7:a2:f5:16:6a:06:9f:06:d8:
                    90:0c:29:f0:9e:7e:5f:b8:aa:1c:40:bd:7f:89:7a:
                    bf:08:1d:ac:f5:cd:48:b2:d8:ac:14:9e:c3:f4:c5:
                    e9:31:f1:c6:37:e3:de:c0:08:ce:97:ac:2b:cb:cf:
                    36:85:d7:a3:26:40:df:3e:ae:07:1b:3b:19:ee:68:
                    af:91:26:26:a4:39:af:9e:11:69:95:e1:b5:8e:96:
                    bf:18:40:75:cc:1d:68:50:02:14:4d:50:83:34:2a:
                    3c:55:f5:7a:a2:61:a7:74:28:f5:67:31:2d:1c:c7:
                    43:ba:9f:db:18:67:37:a0:c8:2f:cf:e3:4a:be:b0:
                    ed:69:fa:db:dd:c7:be:94:91:f8:71:b3:fa:56:f2:
                    bb:69:34:9a:98:a2:d3:07:f9:cb:2e:9d:53:23:08:
                    c2:dc:ea:83:27:46:d3:a2:3a:c9:bc:cb:a2:4c:65:
                    58:0d:b1:5e:28:92:f8:d0:c6:33:d9:06:ad:18:db:
                    92:a7:70:f5:e3:e7:9f:95:3b:96:d9:ed:39:3d:52:
                    55:ff:82:1e:43:94:4d:41:88:0c:3e:63:c2:f4:3c:
                    b1:15:ed:7e:11:c7:74:23:18:39:b5:60:d2:bf:8e:
                    40:ae:ac:33:00:8b:21:fd:b8:c9:56:85:11:4b:e4:
                    8d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:82:3A:55:BE:ED:DA:A9:88:1A:9B:7A:F1:CC:0E:78:4F:6E:E7:4C
            X509v3 Authority Key Identifier:
                keyid:B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/0/323630323a666161383a313a3a2f34382d3438203d3e20313531313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:36:de:ea:ba:39:2a:e2:a9:f7:6e:ec:09:2e:4c:74:a7:2a:
         8e:0d:98:67:bc:c9:86:a6:14:80:f4:71:a8:60:2b:dd:97:74:
         fc:b0:88:df:27:87:b6:bb:bd:b7:e0:75:27:c5:bc:ee:b6:94:
         b7:9c:17:ae:c4:1e:d9:b0:4c:d4:78:b2:a9:a4:71:13:26:16:
         00:7d:dc:e3:17:ca:7e:59:a8:68:86:fd:14:62:60:c9:1c:ea:
         18:f7:0c:32:bd:ce:69:83:8f:c1:b8:b2:8e:5e:06:07:41:e6:
         8b:cc:e4:e3:4c:62:3c:00:84:6c:94:c3:ac:b1:b0:3e:e8:15:
         4e:91:f7:96:8e:1d:e3:86:4a:62:67:3b:a1:fa:29:05:07:11:
         48:7e:2c:10:ec:90:19:cb:1c:fc:c2:a5:3b:97:f3:9a:3c:ce:
         3a:92:3e:1f:9e:8c:a4:d3:a8:e3:c2:ab:fc:ee:66:81:80:ca:
         ba:95:e4:65:de:5d:43:8e:aa:4d:f9:81:6b:fb:6a:ff:a2:fa:
         f8:e5:62:bd:3f:b5:07:c4:d7:f9:dd:9c:2c:98:4d:06:45:1c:
         08:42:c2:24:65:e1:44:a5:a9:f4:8f:03:fd:9a:68:94:e5:42:
         9b:32:55:2f:b8:4d:17:3a:96:e9:f6:f4:d2:6b:24:e2:31:dc:
         30:ac:10:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----