Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/3/3231362e3134362e32382e302f32332d3233203d3e20393435.roa
File:                     3231362e3134362e32382e302f32332d3233203d3e20393435.roa (raw, json)
Hash identifier:          w1GyPK+IW603xxBCVyl155BO8otXPTKFikIwYK/OIJk=
Subject key identifier:   44:60:59:94:8B:FF:59:2F:83:44:2D:F7:21:E5:4A:6B:38:53:62:73
Certificate issuer:       /CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Certificate serial:       37F62DEC5843A0DAD38DC47727B0B38342209CDE
Authority key identifier: D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
Authority info access:    rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject info access:      rsync://rpki.co/repo/AS945/3/3231362e3134362e32382e302f32332d3233203d3e20393435.roa
Signing time:             Mon 10 Apr 2023 03:31:31 +0000
ROA not before:           Mon 10 Apr 2023 03:26:31 +0000
ROA not after:            Mon 08 Apr 2024 03:31:31 +0000
asID:                     945
IP address blocks:        216.146.28.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f6:2d:ec:58:43:a0:da:d3:8d:c4:77:27:b0:b3:83:42:20:9c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
        Validity
            Not Before: Apr 10 03:26:31 2023 GMT
            Not After : Apr  8 03:31:31 2024 GMT
        Subject: CN=446059948BFF592F83442DF721E54A6B38536273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ff:41:94:b9:b9:41:8c:00:42:68:32:6a:02:
                    f6:92:8b:ac:82:da:fc:d1:43:8c:5e:c5:3e:b7:77:
                    33:97:22:f7:c8:23:49:ef:99:fe:66:1c:64:0a:ca:
                    fd:b2:0b:f7:10:eb:cb:81:f9:bd:35:99:27:61:11:
                    88:b1:5b:6b:c0:15:83:f2:63:3c:c1:a2:a0:f6:a0:
                    97:53:17:b2:b1:16:fc:cf:19:af:12:9b:51:1e:ef:
                    98:cc:67:2b:b2:35:5e:b7:b8:5b:6f:11:c8:e5:86:
                    4d:23:cd:68:9b:e8:20:6b:a5:04:b5:33:47:f7:dd:
                    d0:02:7e:15:af:61:aa:78:ed:76:95:2e:17:4a:d0:
                    fb:73:b8:79:e2:21:a3:e6:b3:43:c3:f4:66:98:db:
                    fe:80:3a:f0:51:77:3b:d2:15:11:ab:a3:35:7f:0b:
                    0b:3b:79:44:ab:a0:1d:e0:14:92:c6:9a:dd:28:23:
                    e0:4a:03:44:c5:76:3e:00:e4:6e:89:21:bf:8a:2a:
                    f5:7f:9c:46:19:14:04:d1:b7:2d:f4:35:a9:b0:02:
                    f8:01:e6:21:ff:a9:71:5c:08:ce:54:46:99:8a:86:
                    81:be:7b:01:b4:c9:d7:4c:55:18:24:8c:4c:0f:55:
                    41:17:cb:02:5c:f5:95:27:0a:3c:bf:a2:94:48:d6:
                    af:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:60:59:94:8B:FF:59:2F:83:44:2D:F7:21:E5:4A:6B:38:53:62:73
            X509v3 Authority Key Identifier:
                keyid:D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/3/3231362e3134362e32382e302f32332d3233203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:dd:b5:a8:21:e6:61:15:f0:35:bd:ef:0b:d4:54:da:c8:64:
         6f:7f:1c:2b:f3:8d:c6:4e:0d:01:43:02:eb:63:94:ec:15:4e:
         68:05:1b:5c:d9:af:11:dc:89:19:f4:ff:51:3b:9a:43:73:0f:
         e8:d2:ad:6e:c8:4f:da:6a:af:22:63:0e:32:cb:43:b8:aa:dc:
         73:2e:3e:00:7c:ad:c9:b2:71:f6:6a:75:14:2c:c5:9d:58:07:
         c3:6e:52:4a:51:ae:4d:78:2b:0d:b2:cb:d4:8f:86:a0:fc:62:
         6f:50:8e:b3:cb:10:e1:21:1b:84:31:30:ee:9d:ec:ca:5e:73:
         8a:03:d2:75:9b:70:a4:11:d1:92:03:2e:d9:b2:81:d1:3f:03:
         01:64:6e:a2:82:c4:cf:f1:44:be:2b:ed:9b:5b:dd:f5:0b:fa:
         e6:f0:e8:f1:83:73:36:89:05:9c:a8:98:b2:e9:41:2e:c8:96:
         09:54:e2:ba:a4:bb:53:cc:bc:9d:9c:e4:43:99:07:67:d7:c8:
         ba:93:a4:25:f3:82:1f:26:1b:67:68:9f:0c:71:e6:4c:43:fc:
         b0:1d:3e:fe:94:50:df:7a:4b:2a:a9:ab:d1:df:35:b8:4c:1b:
         56:74:22:91:ab:ba:b8:54:84:0a:e7:2c:13:6f:e9:ef:25:5b:
         4a:53:62:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 16:19:36 2023 by rpki-client on console-fra.rpki-client.org