Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/2/323630323a666332333a3136303a3a2f34342d3438203d3e20313531303632.roa
File:                     323630323a666332333a3136303a3a2f34342d3438203d3e20313531303632.roa (raw, json)
Hash identifier:          ECwQQCEXBzq7C6E4hSEd16+2p1LQIch7djOCWJaryKA=
Subject key identifier:   C5:81:CE:64:D1:AE:28:56:82:B6:56:D3:BD:42:8E:5A:3B:15:2C:7B
Certificate issuer:       /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial:       5F723B71E0C5C02CEA5160E8C04383930D4D6DFF
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access:    rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access:      rsync://rpki.co/repo/AS945/2/323630323a666332333a3136303a3a2f34342d3438203d3e20313531303632.roa
Signing time:             Mon 10 Apr 2023 03:31:29 +0000
ROA not before:           Mon 10 Apr 2023 03:26:29 +0000
ROA not after:            Mon 08 Apr 2024 03:31:29 +0000
asID:                     151062
IP address blocks:        2602:fc23:160::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:72:3b:71:e0:c5:c0:2c:ea:51:60:e8:c0:43:83:93:0d:4d:6d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
        Validity
            Not Before: Apr 10 03:26:29 2023 GMT
            Not After : Apr  8 03:31:29 2024 GMT
        Subject: CN=C581CE64D1AE285682B656D3BD428E5A3B152C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0f:04:09:dc:0d:4c:57:94:80:b2:9d:8b:d3:
                    44:c3:9d:b0:27:79:95:f6:c9:a9:3f:2d:40:99:29:
                    66:1f:4b:85:be:3a:28:e9:30:29:5b:ea:63:b5:18:
                    1f:0f:6b:78:45:f1:fd:1d:9d:d7:91:64:54:8d:bd:
                    26:64:13:54:7e:f5:62:48:d1:ab:24:55:a5:33:a0:
                    9e:b3:cf:cd:ff:b0:1d:88:e6:8e:f2:ce:37:6b:77:
                    05:08:e4:39:b6:09:48:a2:a2:05:c7:15:59:d7:1d:
                    dd:51:5e:8a:30:ef:af:b2:c7:5a:f1:89:51:b9:42:
                    3f:0c:26:d2:cb:e6:26:97:22:d1:5f:c9:2f:2b:20:
                    d0:14:31:8d:1d:51:54:6b:07:25:75:47:9c:33:0a:
                    18:7c:07:71:7b:fd:cf:96:2f:34:15:02:f3:52:cc:
                    a0:56:79:ea:58:26:13:e9:dc:e2:1d:3f:6b:2c:2f:
                    97:86:ed:22:b6:ed:c1:32:30:ca:f0:fd:c5:fe:9d:
                    b8:5b:ca:65:f0:70:75:c0:85:82:48:3f:c4:5c:1a:
                    d1:aa:0c:4d:c7:0b:62:13:25:7e:0b:39:31:cd:d6:
                    72:bd:a2:e7:6f:6b:4a:1c:0b:95:65:39:c8:04:f6:
                    cd:d4:94:9d:c0:dd:be:80:f9:04:54:12:a7:fe:27:
                    a7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:81:CE:64:D1:AE:28:56:82:B6:56:D3:BD:42:8E:5A:3B:15:2C:7B
            X509v3 Authority Key Identifier:
                keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/2/323630323a666332333a3136303a3a2f34342d3438203d3e20313531303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:160::/44

    Signature Algorithm: sha256WithRSAEncryption
         45:c2:54:fd:a9:1e:b2:c3:53:ad:a9:21:48:c4:76:cb:65:fa:
         6a:a4:bb:5d:78:d8:ab:84:7e:6c:8b:0d:5f:08:ce:14:ab:a8:
         c2:45:49:a8:fd:d1:92:03:97:29:4f:e7:02:0e:05:8b:75:f2:
         26:04:bb:46:ff:d8:49:0f:e1:95:97:17:c0:d0:74:17:ad:cf:
         b0:68:67:e8:ce:39:0e:4a:0d:b2:fd:47:aa:2e:96:96:4d:29:
         08:91:01:3f:23:1b:76:42:af:ca:40:3f:f9:96:0a:0c:b0:48:
         cf:bf:b3:c0:78:01:5c:ac:65:f5:ae:94:76:52:82:8c:50:1f:
         ab:03:bd:c2:6d:7f:61:04:de:4e:a0:3e:b2:6e:29:b3:cc:40:
         37:07:7e:ea:29:21:6f:bb:03:3f:83:9f:58:56:7c:e6:29:74:
         cc:1d:e9:b3:65:de:eb:55:34:b4:c9:ea:6e:a3:7e:ee:ab:3f:
         c9:0a:ca:dd:69:9a:20:9c:cc:c6:b0:36:7c:cb:ef:e0:5f:c8:
         d5:fb:47:c6:a9:ea:37:6a:4d:24:d1:59:5f:5d:ab:9f:f4:12:
         9f:ce:e7:ed:37:c1:c8:a5:76:3d:a9:52:e4:08:e2:7c:df:41:
         af:d2:cd:14:5c:68:a1:b6:55:fe:40:9f:2a:a6:5d:36:f1:f7:
         75:ca:cb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----