Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/10/32332e3133382e3233322e302f32342d3234203d3e203632383533.roa
File:                     32332e3133382e3233322e302f32342d3234203d3e203632383533.roa (raw, json)
Hash identifier:          Ewpfj2zrN8eLUm+Jcmmr8y1dfsha1B+rpsh9IgBd7nU=
Subject key identifier:   39:25:7C:1C:3D:6B:6F:D1:C3:4B:AA:E2:45:97:A7:BF:6E:1C:32:1D
Certificate issuer:       /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial:       144D234C6502CFC9423C4F555E183896B570F811
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority info access:    rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject info access:      rsync://rpki.co/repo/AS945/10/32332e3133382e3233322e302f32342d3234203d3e203632383533.roa
Signing time:             Mon 10 Apr 2023 03:31:27 +0000
ROA not before:           Mon 10 Apr 2023 03:26:27 +0000
ROA not after:            Mon 08 Apr 2024 03:31:27 +0000
asID:                     62853
IP address blocks:        23.138.232.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4d:23:4c:65:02:cf:c9:42:3c:4f:55:5e:18:38:96:b5:70:f8:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
        Validity
            Not Before: Apr 10 03:26:27 2023 GMT
            Not After : Apr  8 03:31:27 2024 GMT
        Subject: CN=39257C1C3D6B6FD1C34BAAE24597A7BF6E1C321D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:77:f1:a0:d7:9c:f3:3c:08:b0:da:fc:23:df:
                    a1:74:47:95:c2:1f:55:98:2a:aa:cc:65:67:80:a3:
                    8e:5a:b3:73:a2:ee:72:80:fe:5a:72:46:33:c7:13:
                    ac:17:f1:c9:b1:c3:64:3a:3d:e8:98:6f:9d:51:1c:
                    00:a0:9e:46:5f:19:05:2b:0c:29:eb:68:d0:7c:5f:
                    b4:c6:b5:b9:27:8e:f5:b1:e3:15:d6:d2:ae:e6:85:
                    3c:d3:eb:75:ba:9a:5f:f5:82:38:50:6b:67:7f:55:
                    92:8d:96:71:f3:55:83:92:f6:58:52:ec:5e:c9:66:
                    f0:00:3c:45:03:43:4e:21:5c:ad:b9:45:e2:5a:e5:
                    fe:8f:49:5b:4c:9f:98:47:6a:49:68:3b:ba:af:1f:
                    f5:54:1b:ba:53:62:9c:c5:0d:93:f9:e5:7a:fd:2e:
                    38:6b:4f:79:47:3c:32:e2:cd:85:ba:f4:ea:86:23:
                    86:79:dc:33:a5:db:f1:92:e2:9c:84:37:6c:3c:af:
                    e8:4b:7c:89:bb:95:6b:66:d4:f2:b7:89:2f:6c:b0:
                    8e:9d:d4:18:47:42:ce:9a:6c:4f:d0:4d:cf:51:12:
                    fe:dd:2f:04:56:57:47:d8:e1:b5:9c:84:86:4a:37:
                    68:7c:93:6c:ae:67:e6:55:fd:dc:61:96:8d:c6:60:
                    21:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:25:7C:1C:3D:6B:6F:D1:C3:4B:AA:E2:45:97:A7:BF:6E:1C:32:1D
            X509v3 Authority Key Identifier:
                keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/10/32332e3133382e3233322e302f32342d3234203d3e203632383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:02:20:1e:6f:50:cc:76:b4:ab:1d:3d:8b:68:07:92:a2:e4:
         97:d7:e2:64:af:b1:66:f3:78:76:21:33:99:c7:3d:06:9c:6c:
         96:96:af:2b:41:39:bf:d3:3c:4d:06:a3:fc:36:a1:1d:8c:0d:
         f4:45:db:d8:f8:10:af:f2:d9:a3:e6:d8:20:b1:36:5d:a6:bb:
         25:d5:fc:67:ef:4f:45:bc:18:12:9b:2b:d7:e3:14:da:9b:2b:
         75:bb:59:09:47:98:2a:8b:88:98:70:ab:2a:9f:fc:37:db:af:
         56:37:f7:29:d9:a2:63:45:2f:96:68:8e:0d:1d:c5:f5:35:21:
         b7:68:b0:a8:e8:da:e1:c4:e1:68:57:bf:f1:7d:50:f8:e6:2f:
         ed:9f:7b:fa:85:e6:7c:12:bd:9a:7f:78:07:a9:0d:2c:be:b1:
         6d:fb:62:82:4e:ca:82:a5:3b:df:82:a3:c9:da:f3:e5:1a:38:
         42:5b:16:46:7a:8c:8d:14:64:fc:1e:92:31:b8:d0:c5:d1:e4:
         7f:19:a2:7d:9d:b7:de:c8:29:8e:84:be:25:7f:b6:23:94:64:
         c3:2b:f5:92:63:0b:fc:4d:c4:09:e5:37:84:72:09:bd:50:b9:
         f5:76:d8:65:2d:b5:5b:21:de:03:60:45:0f:75:c9:d2:70:1d:
         24:e4:9b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 22:48:20 2023 by rpki-client on console-ams.rpki-client.org