Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS31898.roa
File:                     AS31898.roa (raw, json)
Hash identifier:          bs6vbh/esCgiYtmfi23Onczx1BsK6YyPAOxsY3HXdBk=
Subject key identifier:   E4:19:6E:57:31:61:42:3F:38:E6:2D:21:73:F4:71:53:01:77:4C:9B
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       409AEEAC6307CEA390BED262B9E20D842659834E
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS31898.roa
Signing time:             Mon 31 Jul 2023 09:21:42 +0000
ROA not before:           Mon 31 Jul 2023 09:16:42 +0000
ROA not after:            Mon 29 Jul 2024 09:21:42 +0000
asID:                     31898
IP address blocks:        194.116.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:9a:ee:ac:63:07:ce:a3:90:be:d2:62:b9:e2:0d:84:26:59:83:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Jul 31 09:16:42 2023 GMT
            Not After : Jul 29 09:21:42 2024 GMT
        Subject: CN=E4196E573161423F38E62D2173F4715301774C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f5:6f:cb:48:f0:61:dc:13:74:b6:51:c3:39:
                    b9:ad:10:fe:3f:11:43:dc:c0:a1:e8:9f:1e:a5:2b:
                    03:5c:82:c4:de:e7:41:6e:8f:4a:4f:dd:d3:ef:61:
                    22:3c:f0:7b:33:1b:44:6b:dd:ef:3d:02:eb:c6:fe:
                    19:bb:aa:2a:c2:e5:15:58:f0:46:7e:fa:d9:0b:da:
                    d8:09:e2:bb:71:6c:97:69:6c:73:f2:27:71:e5:f3:
                    92:f7:df:1e:6c:88:a2:b3:20:43:1a:b8:18:e5:d3:
                    54:15:75:de:8c:f7:ab:01:dd:9d:3c:bd:78:51:d4:
                    a4:e7:6d:13:f9:18:8d:c1:69:04:67:c5:36:46:2a:
                    b9:58:2d:f1:e1:17:6a:ed:2f:80:61:3d:5c:74:d1:
                    09:37:4f:5b:b2:e2:2b:92:19:6d:c6:1f:e4:c4:0c:
                    96:ec:75:2b:79:a3:03:aa:86:b0:ad:d9:ad:53:3b:
                    fa:2a:bb:ec:52:29:df:0b:63:31:6e:75:0f:ff:a7:
                    3c:3d:36:97:80:af:a0:1b:7b:1f:f4:38:06:a2:dc:
                    2d:00:74:9e:04:14:54:d7:06:36:f9:b5:aa:53:67:
                    40:35:92:e4:cd:9d:d2:e2:98:35:7f:8f:de:ac:47:
                    ec:63:81:a8:bb:f8:10:28:87:95:0d:58:e9:ae:64:
                    f5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:19:6E:57:31:61:42:3F:38:E6:2D:21:73:F4:71:53:01:77:4C:9B
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS31898.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.116.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:b2:62:5e:14:1b:85:e1:fc:85:d8:b6:ee:19:ee:ff:9f:e1:
         14:8d:0f:d4:71:01:b0:35:a4:15:34:16:0b:ce:ef:5a:93:8a:
         e3:86:e1:14:f1:41:7a:dc:2d:e0:06:f7:46:10:5a:21:7f:f9:
         dd:db:09:dd:3d:f9:2b:80:0f:fe:4e:68:6e:bd:24:76:c1:bd:
         16:c7:4e:0c:9b:50:6e:73:9d:6c:e8:26:16:c7:fe:d0:43:96:
         b5:71:ec:c0:62:35:2e:40:55:3a:34:55:c8:cd:2b:80:db:34:
         67:cd:e2:2f:e4:9e:7c:de:55:47:e2:14:2f:54:19:5b:cd:4d:
         31:03:5e:2a:5c:b3:3b:c7:9e:59:09:b8:61:b7:09:61:02:40:
         3c:a0:16:a0:b2:46:fa:47:66:ea:3f:6d:af:eb:0a:4c:d8:a7:
         a3:f4:4a:3e:8b:e1:7b:8d:da:32:72:01:b2:0e:83:b1:6d:67:
         e7:41:1e:68:1c:73:7b:96:dd:59:9c:66:79:4a:3a:72:2e:18:
         d0:b7:45:09:67:1c:df:08:b5:cf:fe:e0:0c:c4:5f:5c:72:04:
         51:ed:d8:92:c8:71:91:96:3c:4d:aa:8f:e6:78:6c:39:00:0b:
         7d:8f:f1:37:81:a5:50:46:3a:6f:e7:89:db:68:6b:72:c8:76:
         c1:5d:44:6b
-----BEGIN CERTIFICATE-----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