Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/14/326130353a646663363a393230303a3a2f34302d3438203d3e20323034393336.roa
File:                     326130353a646663363a393230303a3a2f34302d3438203d3e20323034393336.roa (raw, json)
Hash identifier:          mnkvODs/v7y50z7rlAPqKiuCUcFYJZpVOsQ/QDdeCFE=
Subject key identifier:   35:14:53:BE:EB:FA:2F:D6:AC:30:94:03:51:CE:8E:CE:80:4D:9A:F3
Certificate issuer:       /CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
Certificate serial:       24850F28AC7FED1CC1BFE1A65627E66E8BE8F116
Authority key identifier: 3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9
Authority info access:    rsync://rpki.co/repo/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer
Subject info access:      rsync://rpki.co/repo/AS945/14/326130353a646663363a393230303a3a2f34302d3438203d3e20323034393336.roa
Signing time:             Wed 30 Aug 2023 20:02:39 +0000
ROA not before:           Wed 30 Aug 2023 19:57:39 +0000
ROA not after:            Wed 28 Aug 2024 20:02:39 +0000
asID:                     204936
IP address blocks:        2a05:dfc6:9200::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:85:0f:28:ac:7f:ed:1c:c1:bf:e1:a6:56:27:e6:6e:8b:e8:f1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
        Validity
            Not Before: Aug 30 19:57:39 2023 GMT
            Not After : Aug 28 20:02:39 2024 GMT
        Subject: CN=351453BEEBFA2FD6AC30940351CE8ECE804D9AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4b:3c:2b:cd:4a:b3:ca:0b:10:60:92:80:26:
                    bc:de:4f:7f:c1:09:ad:3e:ca:93:3c:49:a8:2c:6c:
                    23:f8:28:36:fc:bb:04:18:98:8b:13:6e:56:85:71:
                    ab:23:1a:a9:c9:f4:31:05:8a:82:c8:73:92:25:d5:
                    c6:5a:cc:0d:f2:25:7a:a2:aa:6a:cb:7b:30:c2:9d:
                    8e:87:3c:aa:58:e6:fe:27:e4:8f:fc:76:08:e0:44:
                    34:30:ce:63:19:95:d7:e3:dc:5e:57:11:ea:e2:db:
                    f8:3d:51:2e:ee:92:ff:68:59:23:43:b4:7e:e9:6c:
                    42:eb:06:9e:c0:c0:45:2e:32:b8:7d:c0:64:60:1c:
                    ee:1a:de:7b:d9:22:81:7b:3b:b7:f0:5f:b9:41:dc:
                    2b:19:ac:97:a8:f5:3c:61:6d:5d:6a:91:0a:f0:cc:
                    ec:eb:e2:86:8c:de:55:71:e8:9d:e6:57:c1:c3:80:
                    c9:15:07:0f:1a:be:4a:32:8d:ab:fd:7d:90:a6:c4:
                    68:ad:2e:95:8c:b0:21:f9:33:de:4d:df:d8:0d:20:
                    03:5f:a2:f6:97:03:fc:31:e0:e0:3f:48:85:cd:13:
                    4b:bd:31:b8:35:9a:83:60:82:0c:04:9d:15:37:6f:
                    b1:2f:d8:24:ec:59:73:96:bc:57:64:94:24:44:50:
                    54:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:14:53:BE:EB:FA:2F:D6:AC:30:94:03:51:CE:8E:CE:80:4D:9A:F3
            X509v3 Authority Key Identifier:
                keyid:3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/14/326130353a646663363a393230303a3a2f34302d3438203d3e20323034393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc6:9200::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:46:02:c3:3f:00:90:68:c0:e9:73:72:f3:9a:62:a4:f8:98:
         9b:5c:4e:5d:39:13:5e:6b:fa:93:f0:ec:73:c1:9a:ca:46:ba:
         62:de:4f:11:96:70:5b:fc:e6:7b:76:91:a4:1c:c4:32:fb:c1:
         7f:98:2e:4f:07:34:94:de:6a:60:1b:29:b1:40:36:3f:d1:27:
         7c:20:96:bd:94:ea:73:4a:e9:d9:63:3d:5d:36:1b:78:4e:90:
         bb:28:2a:82:68:64:3e:37:7d:7d:fa:e4:50:c1:e5:f0:05:5e:
         0c:fe:c6:30:cb:3e:bf:26:6f:3a:09:91:44:cb:42:fe:02:6f:
         73:f3:c3:ea:7b:5d:22:7e:b3:8e:40:4f:b7:b4:c8:f5:9c:67:
         17:01:a5:8d:c0:f8:f3:ae:5c:45:c8:55:ea:32:4c:6c:43:21:
         6f:a4:c9:97:30:84:27:e3:db:19:95:ed:2f:50:8c:2a:39:bf:
         e4:fb:8e:c5:de:b2:b9:88:14:b8:89:dc:b2:7e:7a:0b:f5:bf:
         21:08:af:86:a4:8a:29:74:13:f5:7f:d9:ee:b7:bc:05:b7:74:
         33:16:10:55:a9:7c:6e:f8:ef:4e:2f:64:00:16:1f:94:52:51:
         ce:19:24:a3:a7:43:d3:22:64:14:00:46:9d:50:50:c2:eb:8a:
         f9:ed:f0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----