Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS210631/1/326130353a646663373a393365303a3a2f34332d3438203d3e20323132353034.roa
File:                     326130353a646663373a393365303a3a2f34332d3438203d3e20323132353034.roa (raw, json)
Hash identifier:          KyiAAlG8HZTwt2PdlLE/seX1UFgRZU95Q5H4fGBHBLU=
Subject key identifier:   8F:36:79:18:54:C3:48:B7:E9:87:52:25:91:C1:4B:40:44:A7:1D:32
Certificate issuer:       /CN=BBD41C25FF2CD05EC4F6CD07C26D5113BC4FF8AB
Certificate serial:       7FF4B81E680C1D246764CC2590B1941871940B6B
Authority key identifier: BB:D4:1C:25:FF:2C:D0:5E:C4:F6:CD:07:C2:6D:51:13:BC:4F:F8:AB
Authority info access:    rsync://rpki.co/repo/AS205432/0/BBD41C25FF2CD05EC4F6CD07C26D5113BC4FF8AB.cer
Subject info access:      rsync://rpki.co/repo/AS210631/1/326130353a646663373a393365303a3a2f34332d3438203d3e20323132353034.roa
Signing time:             Fri 12 May 2023 14:02:25 +0000
ROA not before:           Fri 12 May 2023 13:57:25 +0000
ROA not after:            Fri 10 May 2024 14:02:25 +0000
asID:                     212504
IP address blocks:        2a05:dfc7:93e0::/43 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f4:b8:1e:68:0c:1d:24:67:64:cc:25:90:b1:94:18:71:94:0b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBD41C25FF2CD05EC4F6CD07C26D5113BC4FF8AB
        Validity
            Not Before: May 12 13:57:25 2023 GMT
            Not After : May 10 14:02:25 2024 GMT
        Subject: CN=8F36791854C348B7E987522591C14B4044A71D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:28:36:68:d3:91:ad:15:08:bd:fd:74:cc:fe:
                    f8:1b:f9:4e:fc:d0:08:68:4d:a6:42:f7:2c:63:71:
                    9b:43:1b:71:0e:f2:fe:32:fd:92:47:ff:f7:e6:ab:
                    52:58:55:87:c5:75:a0:95:ea:c8:fc:1e:fb:94:69:
                    72:ff:96:e0:d9:70:39:da:f8:5c:c1:5f:c5:38:7f:
                    de:87:58:0e:1e:35:a1:44:7d:9b:64:08:ec:50:28:
                    2f:3a:af:14:6f:64:3b:ee:65:bc:71:91:9e:4b:40:
                    2f:67:a6:17:cb:9f:c2:59:4b:4b:63:df:c0:45:74:
                    f1:77:3d:5f:1a:e7:85:f8:53:2d:41:53:e1:5d:0e:
                    27:e0:fe:f0:d4:e5:47:77:b9:65:1d:51:97:8a:d2:
                    89:d7:58:b3:ee:3d:fb:5d:b0:37:27:75:b4:62:5e:
                    f6:69:2d:a2:21:c5:b0:ae:8d:ca:e3:61:13:e4:ec:
                    9b:73:35:a8:b1:6c:08:1b:77:17:69:12:7e:ad:2b:
                    61:20:4f:6f:69:24:72:14:c1:4d:06:02:84:f9:54:
                    39:39:a2:a1:69:bd:ef:25:46:0b:ef:d3:f4:b6:e5:
                    a7:45:63:d9:6c:26:f2:cd:7e:be:43:e8:3b:74:ec:
                    7a:45:30:78:42:62:44:a5:1c:8c:94:ed:b3:f1:48:
                    18:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:36:79:18:54:C3:48:B7:E9:87:52:25:91:C1:4B:40:44:A7:1D:32
            X509v3 Authority Key Identifier:
                keyid:BB:D4:1C:25:FF:2C:D0:5E:C4:F6:CD:07:C2:6D:51:13:BC:4F:F8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS210631/1/BBD41C25FF2CD05EC4F6CD07C26D5113BC4FF8AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/BBD41C25FF2CD05EC4F6CD07C26D5113BC4FF8AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS210631/1/326130353a646663373a393365303a3a2f34332d3438203d3e20323132353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:93e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         40:2f:74:d4:18:14:1f:d4:68:e9:c5:2b:ee:5d:db:2a:e1:05:
         d9:00:08:b2:8e:4c:d2:e3:49:50:9e:71:1d:4d:7e:c5:ea:7c:
         c4:de:0c:70:0e:0b:f5:ea:fc:4a:3b:c0:fb:11:da:5e:9b:17:
         95:e7:c5:08:5c:72:a7:2e:56:8f:58:10:d6:0b:3e:ec:47:17:
         f9:00:5f:b5:49:57:8e:da:94:65:11:be:dd:fa:c2:a6:c9:1e:
         89:5a:69:c8:5a:e8:e6:4a:8a:3f:c3:68:76:8e:12:4c:bc:6d:
         6b:e4:95:68:ae:15:3c:6d:30:26:19:6f:44:42:b6:a5:8e:9d:
         97:55:9b:b3:3f:af:e2:4e:d5:66:0e:41:dc:c2:10:b6:52:50:
         bc:56:bd:04:96:dc:b3:22:59:8a:1e:0a:2e:52:f4:f3:ae:32:
         22:10:e5:e4:69:43:a9:9e:fe:89:db:78:da:da:28:08:d5:a1:
         69:1b:61:18:71:e7:aa:9b:21:08:07:26:92:bc:90:3a:71:d8:
         2d:a5:b7:17:fc:64:c9:93:e6:d8:dd:62:5b:94:b6:84:10:b9:
         c5:e5:5f:0b:8c:69:8f:5b:f9:34:59:51:3b:5f:9f:0e:3e:69:
         9b:c9:c0:cf:10:c7:4e:47:8c:27:80:4b:37:29:76:30:4b:6c:
         7b:5f:1b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----