Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/3/32332e3133332e382e302f32342d3234203d3e203632383533.roa
File:                     32332e3133332e382e302f32342d3234203d3e203632383533.roa (raw, json)
Hash identifier:          crqsQB0PiSy6/xbjAwjijW5Rc9nAq2hTMb4RDMi/cCY=
Subject key identifier:   09:CF:7A:17:71:C0:07:5D:58:75:CC:C8:3E:4D:76:6A:15:9B:27:5A
Certificate issuer:       /CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Certificate serial:       4B7D037FCBACC924EF8CF11DF5777832E3208720
Authority key identifier: D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
Authority info access:    rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject info access:      rsync://rpki.co/repo/AS945/3/32332e3133332e382e302f32342d3234203d3e203632383533.roa
Signing time:             Mon 10 Apr 2023 03:31:30 +0000
ROA not before:           Mon 10 Apr 2023 03:26:30 +0000
ROA not after:            Mon 08 Apr 2024 03:31:30 +0000
asID:                     62853
IP address blocks:        23.133.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:7d:03:7f:cb:ac:c9:24:ef:8c:f1:1d:f5:77:78:32:e3:20:87:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
        Validity
            Not Before: Apr 10 03:26:30 2023 GMT
            Not After : Apr  8 03:31:30 2024 GMT
        Subject: CN=09CF7A1771C0075D5875CCC83E4D766A159B275A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cb:86:c9:6f:6a:ba:69:2d:68:3b:2a:43:7a:
                    0e:7e:f5:1c:3c:68:5c:ab:ff:87:17:fb:e6:7c:6e:
                    fe:fd:64:0d:da:86:d4:72:6e:8a:7f:4c:22:67:cd:
                    48:17:10:0f:8e:9e:0d:ad:c6:47:ac:21:a9:8a:ff:
                    46:15:59:3e:a9:4f:10:a6:a4:4f:82:4e:db:1a:74:
                    bd:04:89:e1:a9:fd:ea:27:08:e0:98:8c:2d:d2:87:
                    fc:c6:d3:aa:9e:15:cd:4d:e8:9e:f9:c2:aa:d5:21:
                    75:c1:e0:d7:26:ad:28:8f:91:88:d0:ca:c5:a2:df:
                    f7:7c:22:89:c3:66:7a:67:ee:7f:6c:a4:be:8d:0e:
                    f7:e6:4e:63:cc:d4:2a:90:de:cd:b3:eb:67:34:92:
                    1f:fc:9e:31:1c:fc:4b:53:cb:2d:b7:4c:ac:cf:2b:
                    9b:70:10:a7:d4:5d:6f:4e:b1:d3:f2:44:14:9d:eb:
                    83:97:02:70:e0:95:9b:dd:68:73:0c:da:ea:6d:13:
                    32:8d:65:b3:64:a3:4d:b8:64:27:0c:c2:d4:2c:72:
                    75:47:af:b8:82:85:f3:8b:17:1c:14:04:2e:4e:75:
                    f7:d1:59:c9:91:5e:a8:e0:ae:5f:38:9e:71:cd:c2:
                    09:33:d4:ef:4c:af:29:21:ec:e9:25:ea:c0:2d:db:
                    bd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CF:7A:17:71:C0:07:5D:58:75:CC:C8:3E:4D:76:6A:15:9B:27:5A
            X509v3 Authority Key Identifier:
                keyid:D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/3/32332e3133332e382e302f32342d3234203d3e203632383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:5f:21:26:cf:2d:5c:a0:e6:d1:b5:ac:26:8c:b2:a0:36:5e:
         e6:53:14:e2:51:ac:58:2f:d0:11:a5:12:31:34:ce:fe:73:9e:
         71:82:38:69:8e:92:b9:c9:08:98:bd:8a:ed:cf:f8:16:f0:b8:
         1a:fd:9d:9f:48:5e:41:6a:07:e6:2c:c5:b1:7e:c4:83:c7:30:
         aa:06:c1:bd:0c:50:5b:ad:1c:fb:32:89:14:a2:88:a0:a0:7e:
         02:16:ae:c8:95:0b:65:29:1e:e1:66:42:4c:e0:28:9f:88:bf:
         90:3d:dc:eb:49:81:10:16:72:47:7d:ca:fc:f4:a5:1f:23:c0:
         19:48:9b:9b:4a:52:e5:29:a5:5d:f9:4c:c8:2c:1a:a1:c5:2c:
         c9:36:4b:3f:07:c3:13:77:80:2b:f0:81:67:b8:80:33:66:b3:
         99:5b:f8:9c:57:1f:3b:a7:e8:ad:3c:88:cc:b4:1d:64:22:1a:
         ce:d4:41:5b:15:2a:38:ad:88:1a:60:dc:20:79:58:63:26:91:
         b0:a8:fc:5c:45:a7:73:86:5b:d2:a4:e0:a4:fc:89:a5:7d:31:
         06:9c:15:e1:ad:e7:9e:eb:d1:3a:5d:ec:75:53:90:5e:be:ce:
         f5:3a:47:8a:4a:fd:3b:f7:0c:d2:68:6c:82:2e:a5:1a:56:55:
         ff:dc:6c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----