Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030303a313030303a3a2f33362d3336203d3e20393435.roa
File:                     326131333a633030303a313030303a3a2f33362d3336203d3e20393435.roa (raw, json)
Hash identifier:          fQ7mKrM5fJehEJGSqagA3Un1krVzS+p9oBbsi4uAVv8=
Subject key identifier:   E6:C3:6D:E4:97:F9:77:6F:C8:9C:8D:45:61:AA:38:20:5A:B6:F5:31
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       759F1C2B1391DB7E0A01A1F1A73CC06BF9C22C86
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030303a313030303a3a2f33362d3336203d3e20393435.roa
Signing time:             Mon 10 Apr 2023 03:31:23 +0000
ROA not before:           Mon 10 Apr 2023 03:26:23 +0000
ROA not after:            Mon 08 Apr 2024 03:31:23 +0000
asID:                     945
IP address blocks:        2a13:c000:1000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9f:1c:2b:13:91:db:7e:0a:01:a1:f1:a7:3c:c0:6b:f9:c2:2c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Apr 10 03:26:23 2023 GMT
            Not After : Apr  8 03:31:23 2024 GMT
        Subject: CN=E6C36DE497F9776FC89C8D4561AA38205AB6F531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:51:e3:4c:40:3b:85:33:3e:6e:01:d4:95:86:
                    c1:c7:e2:d5:37:85:6d:45:09:8d:a0:f2:01:0b:5d:
                    cb:16:c3:46:39:06:f5:d0:94:86:cb:8b:f9:e9:ac:
                    10:05:78:ed:89:15:90:4b:92:2e:81:c5:7a:2f:b3:
                    be:08:04:49:72:a1:93:fc:79:84:91:25:95:78:4b:
                    f4:21:65:76:27:86:9e:e5:77:9d:0e:d3:27:a0:25:
                    61:4c:25:29:0c:91:57:0f:73:ed:50:95:31:ec:b3:
                    c8:e4:67:bb:e4:29:91:b7:16:f5:25:46:f2:0b:fd:
                    cd:9d:8d:c5:50:5b:9c:27:17:d1:35:f1:7c:7c:ca:
                    fc:69:0b:08:9e:a5:72:78:e9:a1:2d:72:4b:c8:bb:
                    ae:2b:01:8d:7e:56:1f:bf:6c:a3:d1:40:fb:99:44:
                    e7:61:dd:73:33:4d:f2:5f:58:21:07:30:3f:3d:c7:
                    da:88:b0:c2:df:79:14:bd:4b:70:0e:91:37:37:fa:
                    8f:1e:76:eb:29:5e:26:16:1a:35:a9:64:43:f6:da:
                    e8:6c:70:72:74:7f:8a:15:40:d0:fd:06:4f:f7:fb:
                    3f:09:28:cc:f1:d5:65:02:4d:11:be:ab:50:91:7a:
                    f6:57:7e:01:0f:e2:90:3c:54:23:49:61:13:3b:8e:
                    fb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C3:6D:E4:97:F9:77:6F:C8:9C:8D:45:61:AA:38:20:5A:B6:F5:31
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030303a313030303a3a2f33362d3336203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c000:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4d:32:db:e7:fe:65:c1:cb:9a:f4:de:01:e6:c3:95:23:a5:c3:
         d9:d9:e2:1e:4c:d5:66:5e:57:68:38:55:25:1b:15:e4:2a:dc:
         8b:21:40:cb:29:57:df:95:6f:de:fb:d4:37:eb:90:98:74:81:
         3f:6a:8e:c4:c4:c3:db:1b:e6:81:60:0a:76:77:f6:9c:00:aa:
         77:15:16:13:0a:75:94:f9:d7:6b:f4:12:73:97:a3:b5:75:ce:
         94:2d:56:89:93:e5:0d:38:3c:76:79:ad:a6:79:4a:6b:a4:77:
         d3:ec:a5:f9:78:3a:ad:76:6e:99:ec:46:88:93:32:ae:27:a2:
         d3:c6:fc:9b:d7:85:5e:c9:9d:06:35:5d:40:ed:bd:32:6e:8c:
         d2:52:0a:cb:75:77:6d:6f:c4:de:e6:e8:b9:bd:d5:cd:21:9a:
         87:1a:f8:f2:1d:33:2b:95:7e:d5:ac:94:15:ce:54:51:9f:4d:
         07:cc:9b:14:d7:d3:19:a1:ca:c8:0d:4f:3c:da:0b:85:55:7a:
         39:88:34:fb:b9:a4:d9:b1:43:e4:4e:f8:18:53:ea:05:d6:fc:
         1d:bb:4c:ce:e2:b8:9e:c9:94:82:b6:fb:e6:92:6c:b7:b1:bb:
         12:60:96:fd:c1:52:0f:09:19:5c:54:6b:2c:cc:a1:9f:88:9c:
         c5:e3:3e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----