Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS202400/0/323630323a666161383a38383a3a2f34382d3438203d3e20323031343435.roa
File:                     323630323a666161383a38383a3a2f34382d3438203d3e20323031343435.roa (raw, json)
Hash identifier:          M5+dYLQz/NVezFwfKhPj4MDTNgS7tQp2yzQwHmtXO5I=
Subject key identifier:   4A:76:CB:90:89:6A:E3:53:BD:BB:3E:11:E1:BB:ED:78:B0:FC:81:99
Certificate issuer:       /CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Certificate serial:       09A628BC01A416492475AD5832442130423FD2AF
Authority key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject info access:      rsync://rpki.co/repo/AS202400/0/323630323a666161383a38383a3a2f34382d3438203d3e20323031343435.roa
Signing time:             Mon 24 Apr 2023 11:17:55 +0000
ROA not before:           Mon 24 Apr 2023 11:12:55 +0000
ROA not after:            Mon 22 Apr 2024 11:17:55 +0000
asID:                     201445
IP address blocks:        2602:faa8:88::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a6:28:bc:01:a4:16:49:24:75:ad:58:32:44:21:30:42:3f:d2:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
        Validity
            Not Before: Apr 24 11:12:55 2023 GMT
            Not After : Apr 22 11:17:55 2024 GMT
        Subject: CN=4A76CB90896AE353BDBB3E11E1BBED78B0FC8199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:5c:48:19:be:fb:46:a1:de:e0:11:5f:23:
                    2d:f2:67:59:9f:27:26:ed:e1:67:25:da:2f:96:c7:
                    3d:de:53:d2:a0:8e:e0:7f:93:6d:11:f1:57:db:27:
                    16:6a:db:74:ff:b9:94:5f:e7:1f:cf:ba:3c:31:cb:
                    0b:b7:de:b5:ec:8a:74:d5:df:c6:48:dc:9a:03:84:
                    3e:50:b9:9b:d3:a0:49:e0:c1:d3:6a:9b:4e:16:ce:
                    ed:49:a6:2d:61:a4:c7:2a:31:ae:a5:4d:27:24:b6:
                    f1:af:0d:03:d9:d2:25:14:8e:4b:f6:83:ce:56:b5:
                    55:50:c3:97:d0:84:e3:d8:67:83:cd:dd:4e:d1:71:
                    6c:6d:ce:67:fa:52:72:71:47:7b:ba:ff:29:63:74:
                    7e:cd:ba:06:4b:72:2c:dd:97:ef:7d:12:b0:40:89:
                    63:87:a3:88:27:6c:b0:60:c5:dc:77:07:66:66:7c:
                    c1:ad:bb:86:52:4b:89:26:60:1d:55:c2:ab:17:d8:
                    cd:4a:6b:6a:a1:87:4a:12:3a:34:b7:8d:2e:df:15:
                    94:7c:da:09:61:bf:bf:42:73:d1:d7:ad:02:b3:8b:
                    f0:a9:2c:1b:42:b3:e9:52:be:87:af:c7:0c:c0:86:
                    c5:5d:a0:22:9f:60:63:fd:84:c6:a3:42:13:21:ea:
                    5c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:76:CB:90:89:6A:E3:53:BD:BB:3E:11:E1:BB:ED:78:B0:FC:81:99
            X509v3 Authority Key Identifier:
                keyid:B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/0/323630323a666161383a38383a3a2f34382d3438203d3e20323031343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:88::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:0b:8a:16:c3:58:e3:86:02:86:06:5c:57:52:83:3a:19:6a:
         f8:e9:00:52:b5:e4:30:4f:22:c5:20:ab:70:7e:34:b2:d2:4b:
         6c:74:e8:9c:ed:b1:ff:b6:1e:29:49:9a:60:b6:18:01:c7:6e:
         06:ee:bb:94:3d:f5:46:61:50:b6:d2:2e:dd:18:f2:98:1b:6f:
         b5:40:e5:b1:82:76:b7:e0:98:5f:ad:1a:9a:77:f7:75:67:e1:
         96:76:cb:3d:42:d0:f8:18:81:f6:61:bb:b4:82:f2:fe:bf:73:
         b0:fd:99:f7:e9:e5:b9:b5:87:63:a1:e0:9a:95:39:21:e9:71:
         b0:ba:10:56:3d:69:31:0c:a1:d2:88:eb:b1:3f:0b:51:9b:d0:
         0f:2d:6f:25:7a:a0:91:24:a9:37:69:2a:97:18:e9:c5:ca:29:
         eb:75:42:a9:ab:50:5d:0e:5c:71:b3:ee:ae:88:88:5d:6b:ba:
         7c:ea:e6:26:7e:48:a7:a0:b0:d3:ae:dd:62:08:f2:b6:4d:6a:
         f5:45:e5:a6:ea:fa:2f:6c:ae:6c:b3:81:c1:3f:40:9e:9b:bb:
         7a:88:c3:26:b6:61:45:5e:bd:8a:c1:11:b3:39:38:19:2e:0c:
         41:fd:54:a3:cc:b3:2e:bc:f1:9c:c2:d5:05:c0:19:67:7e:f9:
         cf:d3:d1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----