Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/14/326130353a646663363a393230303a3a2f34302d3438203d3e20323032373336.roa
File:                     326130353a646663363a393230303a3a2f34302d3438203d3e20323032373336.roa (raw, json)
Hash identifier:          TtglgXbfB68+Zba8EnwWk1ArurcSYVgneP4BBMmpX3g=
Subject key identifier:   C2:15:B0:89:AD:1D:95:BF:36:63:05:3C:D1:C3:B2:F2:96:73:F4:BB
Certificate issuer:       /CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
Certificate serial:       23D257C7AEE4EF6C53567F43348A287FC8BF0A46
Authority key identifier: 3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9
Authority info access:    rsync://rpki.co/repo/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer
Subject info access:      rsync://rpki.co/repo/AS945/14/326130353a646663363a393230303a3a2f34302d3438203d3e20323032373336.roa
Signing time:             Wed 30 Aug 2023 20:02:27 +0000
ROA not before:           Wed 30 Aug 2023 19:57:27 +0000
ROA not after:            Wed 28 Aug 2024 20:02:27 +0000
asID:                     202736
IP address blocks:        2a05:dfc6:9200::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d2:57:c7:ae:e4:ef:6c:53:56:7f:43:34:8a:28:7f:c8:bf:0a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
        Validity
            Not Before: Aug 30 19:57:27 2023 GMT
            Not After : Aug 28 20:02:27 2024 GMT
        Subject: CN=C215B089AD1D95BF3663053CD1C3B2F29673F4BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:88:bd:c6:c1:36:07:0f:8f:5c:95:4c:97:
                    9a:76:91:19:e1:e7:3f:c7:fc:4f:dc:aa:0f:0c:6e:
                    ec:98:59:41:d6:6f:2f:08:23:ee:f3:bc:97:cd:eb:
                    ad:4f:c1:62:ce:0e:3a:2c:ce:b2:cb:ab:69:57:df:
                    58:23:a8:af:db:96:48:cc:e7:a7:31:91:83:93:62:
                    1d:35:ab:1e:01:70:d7:fa:2e:3a:4e:34:2a:0e:66:
                    1a:57:ec:79:c2:6c:da:34:c3:42:16:4a:ba:bf:9a:
                    eb:55:af:7c:09:20:83:53:8b:db:f3:31:56:e9:b1:
                    84:67:25:ab:e1:84:43:f5:26:c4:cb:e1:83:08:10:
                    e7:12:4e:80:8f:7e:a0:0a:a3:2a:a6:d3:6e:55:7d:
                    ec:a0:a9:06:b1:c2:c9:9c:26:71:2e:e8:fe:5f:73:
                    20:c7:24:02:71:83:8a:b4:7e:bb:2f:8a:a7:cc:4b:
                    94:fe:eb:a4:37:05:85:9d:65:99:b8:17:4b:cc:a3:
                    05:b2:87:96:41:3d:cf:67:29:b5:60:0e:0f:53:78:
                    8f:27:4e:16:a6:16:e9:2a:3d:11:6e:55:b6:53:57:
                    75:d9:b6:31:dc:c9:49:b1:ff:67:80:5d:b6:da:05:
                    ea:8f:04:67:40:85:a6:6b:94:a6:09:50:7d:e4:59:
                    8c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:15:B0:89:AD:1D:95:BF:36:63:05:3C:D1:C3:B2:F2:96:73:F4:BB
            X509v3 Authority Key Identifier:
                keyid:3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/14/326130353a646663363a393230303a3a2f34302d3438203d3e20323032373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc6:9200::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:08:dc:f9:4c:1c:33:bd:ac:96:13:95:87:29:47:dc:4c:82:
         e5:07:37:88:2b:42:37:4d:ff:a2:d1:8b:3f:91:60:cb:2b:2f:
         a6:db:a0:bd:81:4b:c7:d8:54:6b:41:45:6f:23:93:eb:87:77:
         f5:a3:a7:89:98:ab:70:62:09:93:1f:85:66:8e:55:06:cc:c4:
         d5:53:67:ea:55:17:0b:90:cb:69:34:f3:cf:20:18:b3:03:ff:
         4e:4f:f5:ae:f4:2f:90:17:30:8b:8c:4a:24:7a:fd:f0:12:a2:
         f8:dd:07:e6:34:b2:bf:73:54:7c:0f:5c:e6:29:43:06:3a:95:
         cc:28:ae:9b:7c:6a:2f:08:8f:3c:89:1f:25:b6:cf:ad:bc:70:
         64:f3:8f:75:a5:5c:03:a4:fe:8f:41:b3:25:f6:25:92:df:5c:
         a1:09:84:73:d6:58:42:f5:fc:02:0b:90:f6:ce:43:b8:9b:59:
         73:3f:5a:3e:93:54:31:df:84:48:4c:37:eb:2a:42:b6:77:93:
         d7:c4:a2:04:3a:09:3a:6e:68:38:3e:8f:14:94:4f:a8:4c:66:
         5d:32:76:df:05:55:7d:91:43:ba:26:fa:56:b8:77:16:d2:2c:
         bb:25:3c:47:74:d8:37:96:de:41:3a:6f:38:f2:88:8d:4a:b4:
         d9:cd:38:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----