Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/3/3231362e3134362e32382e302f32322d3232203d3e20393435.roa
File:                     3231362e3134362e32382e302f32322d3232203d3e20393435.roa (raw, json)
Hash identifier:          rhgYEDbA5rZP++E+IBqgQrXG3aYs4RWJvJH9B2I75D8=
Subject key identifier:   41:35:18:84:C5:38:7A:D8:36:17:70:CF:2F:81:28:53:4C:93:65:16
Certificate issuer:       /CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Certificate serial:       39FA4F68E4C23CB450EAEC39E6F81FD3B3F21A2E
Authority key identifier: D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
Authority info access:    rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject info access:      rsync://rpki.co/repo/AS945/3/3231362e3134362e32382e302f32322d3232203d3e20393435.roa
Signing time:             Mon 14 Aug 2023 03:18:25 +0000
ROA not before:           Mon 14 Aug 2023 03:13:25 +0000
ROA not after:            Mon 12 Aug 2024 03:18:25 +0000
asID:                     945
IP address blocks:        216.146.28.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:fa:4f:68:e4:c2:3c:b4:50:ea:ec:39:e6:f8:1f:d3:b3:f2:1a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
        Validity
            Not Before: Aug 14 03:13:25 2023 GMT
            Not After : Aug 12 03:18:25 2024 GMT
        Subject: CN=41351884C5387AD8361770CF2F8128534C936516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3f:bb:b1:ba:a4:1c:62:79:93:31:02:63:4a:
                    6e:ff:77:04:69:73:ab:3a:0b:eb:0d:53:d8:80:d6:
                    6d:79:e0:af:37:c1:fd:14:56:21:6e:ec:36:5d:01:
                    18:2e:57:00:41:66:72:0e:3e:75:db:7c:ee:06:e2:
                    f8:63:bf:20:43:15:25:05:de:f1:f3:c5:e8:83:be:
                    1e:aa:61:da:5a:67:e1:c2:f1:65:9b:18:87:67:b6:
                    4b:14:db:35:19:80:7d:75:6e:ff:5e:07:57:16:60:
                    b2:41:51:23:40:ee:e5:d3:47:4a:c0:af:55:38:bc:
                    bc:35:0c:32:c9:44:64:c6:99:92:3a:db:88:a6:fb:
                    d6:bb:89:39:df:0e:fe:65:72:fb:7c:e8:24:ba:6c:
                    57:a2:0b:57:7e:25:ac:8d:29:f2:0b:8a:74:17:3c:
                    0a:11:52:b5:d0:ec:45:71:2f:59:5e:e7:98:96:61:
                    47:8a:43:00:af:ce:c9:a5:db:f1:e5:4c:3a:78:62:
                    77:ce:d6:6b:49:8f:65:44:54:f6:de:55:37:2f:ac:
                    0d:6c:89:e1:f8:f8:92:52:e9:b2:65:32:c9:56:c0:
                    11:29:04:78:84:34:fa:9a:88:3d:97:01:4e:e3:f1:
                    64:58:be:b3:72:12:e6:a2:8f:6e:2a:af:14:97:d0:
                    81:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:35:18:84:C5:38:7A:D8:36:17:70:CF:2F:81:28:53:4C:93:65:16
            X509v3 Authority Key Identifier:
                keyid:D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/3/3231362e3134362e32382e302f32322d3232203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:1f:d9:3d:eb:2b:c5:55:8a:51:30:d2:0c:2a:a1:7a:93:90:
         6a:44:ec:ad:7a:85:e6:3f:41:ac:34:d6:ba:e9:7b:3d:74:61:
         1c:88:d8:3c:12:61:66:fa:0a:24:50:21:07:91:98:6b:2b:a3:
         8c:70:94:9c:e7:07:20:36:dc:6d:b2:bb:9f:0a:64:00:20:5d:
         ca:f4:66:de:64:17:b6:55:4d:1f:fd:02:82:a1:c3:c9:4f:d7:
         00:c1:a0:1b:6f:50:15:d8:7b:5f:c3:cb:9e:92:56:a4:96:85:
         14:eb:32:99:be:3c:ea:dc:9d:45:a9:8e:6d:ad:cd:ff:f5:70:
         e3:0c:aa:98:7f:42:de:79:6d:1e:d4:20:d6:a9:20:c3:92:43:
         ea:6c:68:90:09:28:8b:a8:ee:6a:32:dd:b5:bd:9a:c3:f0:f6:
         67:22:9b:2a:89:67:72:12:51:85:b0:d8:d5:fc:fb:76:ba:94:
         d9:2c:82:47:a0:d6:f2:6b:35:52:bc:d7:83:f4:e7:b3:25:fa:
         99:0e:13:ce:48:3a:9f:78:55:84:42:2f:4b:41:b8:0e:ac:a6:
         5a:ef:dd:e5:dc:77:1d:5a:d3:64:3b:83:93:be:cf:9c:eb:44:
         d4:46:01:66:11:34:ae:35:04:86:18:1f:f3:ed:49:01:e3:fc:
         68:dc:2c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----