Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/3/3231362e3134362e32382e302f32332d3233203d3e2031303132.roa
File:                     3231362e3134362e32382e302f32332d3233203d3e2031303132.roa (raw, json)
Hash identifier:          qWurMRGp8YKgoIFN+t0D/hGPMYTExkzMVqD4U1rjEg0=
Subject key identifier:   F8:1E:2E:01:6E:8A:D6:74:F4:1B:87:E2:A8:8A:28:C1:5A:B8:BE:05
Certificate issuer:       /CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Certificate serial:       0EB5CE37F81D0445D36CA6BAA5BBACF4DDD3BF55
Authority key identifier: D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
Authority info access:    rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject info access:      rsync://rpki.co/repo/AS945/3/3231362e3134362e32382e302f32332d3233203d3e2031303132.roa
Signing time:             Thu 06 Jul 2023 07:31:35 +0000
ROA not before:           Thu 06 Jul 2023 07:26:35 +0000
ROA not after:            Thu 04 Jul 2024 07:31:35 +0000
asID:                     1012
IP address blocks:        216.146.28.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b5:ce:37:f8:1d:04:45:d3:6c:a6:ba:a5:bb:ac:f4:dd:d3:bf:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
        Validity
            Not Before: Jul  6 07:26:35 2023 GMT
            Not After : Jul  4 07:31:35 2024 GMT
        Subject: CN=F81E2E016E8AD674F41B87E2A88A28C15AB8BE05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:74:b2:b0:21:cf:9f:a5:26:0b:6a:02:36:21:
                    47:e0:61:e4:d2:2c:80:d6:b6:db:99:0c:7a:25:4b:
                    ca:71:b1:d1:4d:b5:cd:8c:3f:22:fb:23:c6:a5:fd:
                    f7:15:a4:06:f3:ea:29:b1:c5:bd:7d:c6:9c:bc:2a:
                    23:47:5b:73:ef:df:39:a5:24:8d:44:6d:a6:07:3e:
                    2f:4b:9f:7c:4b:f1:15:71:70:c3:49:59:9b:90:97:
                    ce:86:24:2d:e8:53:52:65:2e:bf:c7:44:cd:c0:39:
                    b7:9d:a7:06:71:f6:40:46:83:4c:8a:90:a3:7b:aa:
                    ff:98:72:b1:89:52:1c:63:25:28:5b:0d:c3:00:8a:
                    e7:3d:a2:27:34:7d:a9:aa:9a:40:ec:b9:62:47:df:
                    8f:2d:32:f7:58:39:76:da:60:84:1e:05:8e:1b:8b:
                    b0:d6:8b:b9:67:f0:21:2a:dd:54:a1:03:fc:69:42:
                    5f:4a:fa:40:ae:99:ea:5c:24:02:5a:f4:59:c0:9e:
                    bc:0d:4a:fb:14:4c:47:20:17:dd:dd:20:b1:f4:07:
                    40:14:25:37:b1:f3:73:dc:ad:1f:ea:80:97:27:99:
                    1c:5e:85:99:4c:1e:d0:ec:c6:2a:4c:c5:f5:ca:94:
                    4d:f7:cb:5f:d2:ab:c6:0a:bb:3d:25:b0:dd:82:aa:
                    ca:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1E:2E:01:6E:8A:D6:74:F4:1B:87:E2:A8:8A:28:C1:5A:B8:BE:05
            X509v3 Authority Key Identifier:
                keyid:D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/3/3231362e3134362e32382e302f32332d3233203d3e2031303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:42:46:53:ba:ba:f2:32:5c:19:2a:27:2b:bc:69:f9:24:fa:
         81:30:6a:64:de:e9:d7:d9:29:6e:a1:8a:f3:67:0a:e5:a0:4a:
         d1:c2:2e:92:eb:9c:07:5f:74:22:32:6a:d4:93:22:54:d5:db:
         f0:cf:23:e6:c6:43:94:ef:da:4b:73:17:bd:83:1e:b7:cd:37:
         66:89:36:b3:1e:ca:9c:bd:57:a4:46:e1:85:2f:82:d1:67:3b:
         5f:d5:07:9d:4f:67:49:93:6b:26:29:ea:97:53:9d:15:90:c8:
         a2:74:78:c0:32:05:49:4a:e6:4b:c9:70:ba:c9:06:29:3c:04:
         84:f6:10:9e:20:a1:2f:23:41:aa:09:9f:d8:96:2f:82:32:e7:
         d4:c7:a3:05:a2:b5:8b:b5:a8:66:24:7f:0d:f7:f2:fc:8e:b8:
         f1:32:7f:5c:3e:b7:6f:86:11:fe:2d:77:2c:fd:8e:22:f9:fc:
         86:27:f9:bb:ad:ee:26:f0:7f:42:88:70:9f:b6:9c:ae:aa:db:
         e4:73:b6:73:39:3b:c9:e2:94:1e:ed:bc:4a:de:40:43:f7:fe:
         c0:97:e6:04:36:6e:5a:e4:58:88:9b:67:38:a9:31:60:62:84:
         85:98:42:9e:96:27:77:d6:46:cb:64:1b:7c:ca:bd:06:5c:9d:
         14:60:c1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 16:26:40 2023 by rpki-client on console-ams.rpki-client.org