Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030303a3a2f33362d3336203d3e20393435.roa
File:                     326131333a633030303a3a2f33362d3336203d3e20393435.roa (raw, json)
Hash identifier:          GLdAPtUlrobRpDwCJqLWmnYkclnMPztyW5Jw/S7BIx8=
Subject key identifier:   BB:88:17:7A:BD:A9:A5:41:70:16:4B:3F:B9:1E:E9:F2:57:35:FB:94
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       73C29D8D1D2F23EFC8629EA242F49CB1BA98B153
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030303a3a2f33362d3336203d3e20393435.roa
Signing time:             Mon 01 May 2023 17:31:32 +0000
ROA not before:           Mon 01 May 2023 17:26:32 +0000
ROA not after:            Mon 29 Apr 2024 17:31:32 +0000
asID:                     945
IP address blocks:        2a13:c000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c2:9d:8d:1d:2f:23:ef:c8:62:9e:a2:42:f4:9c:b1:ba:98:b1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: May  1 17:26:32 2023 GMT
            Not After : Apr 29 17:31:32 2024 GMT
        Subject: CN=BB88177ABDA9A54170164B3FB91EE9F25735FB94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:19:d3:93:29:05:e7:9f:62:f5:5b:31:e7:f0:
                    2c:e7:c7:31:39:48:12:a9:43:bb:8b:05:d2:59:9b:
                    33:79:83:09:be:7b:cc:12:00:e7:c9:55:6c:4b:18:
                    c3:e7:4a:c0:70:69:79:d4:f6:6b:18:5f:6d:24:9b:
                    d8:d2:f5:7d:49:9f:76:a8:0e:17:92:84:f9:2d:a3:
                    2d:c2:3a:2e:df:f8:72:a7:a5:06:8a:01:51:8f:fe:
                    c2:a0:96:4f:1f:bd:f8:88:42:5f:4f:45:82:8b:d5:
                    d5:c9:da:c8:2e:1f:2a:ff:6e:49:81:26:9b:bd:83:
                    8e:ae:ff:50:48:3a:78:04:31:24:d3:5e:3c:51:56:
                    5e:89:d7:4d:86:3a:b2:8b:a1:cf:1e:4a:39:84:0a:
                    15:d2:80:ff:5d:4b:0f:3c:86:2e:34:59:ed:45:83:
                    5e:21:d9:04:47:30:98:ec:1d:69:6e:a1:85:2b:f5:
                    9b:03:82:71:88:97:7f:da:10:6f:68:f4:cd:66:a4:
                    47:89:10:fd:f3:a7:8d:33:f3:59:87:7d:59:d4:f5:
                    6f:77:43:ef:19:57:7f:f2:44:8e:77:89:95:d0:72:
                    2b:90:bc:56:62:1d:12:49:14:86:ab:17:f7:79:4a:
                    87:61:59:c1:08:49:dc:7e:82:cb:71:e6:01:bc:4a:
                    2a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:88:17:7A:BD:A9:A5:41:70:16:4B:3F:B9:1E:E9:F2:57:35:FB:94
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030303a3a2f33362d3336203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         97:4d:79:bd:e2:03:7e:2c:bb:cd:6a:96:f8:eb:74:61:a7:78:
         41:23:08:00:1e:8b:79:9c:5a:cf:47:27:db:60:50:96:73:b9:
         30:12:79:21:25:64:f1:87:7c:90:b3:6d:be:8a:27:5a:63:1b:
         41:e7:7a:39:d4:c6:e7:a1:cf:6e:03:06:12:8c:20:73:0c:38:
         ea:6b:6b:cd:88:71:46:f6:96:59:dd:c2:00:ca:94:78:07:6d:
         54:ad:fb:29:f8:7f:08:60:c0:e1:95:93:93:f9:55:11:c2:2b:
         c2:6e:f3:0c:b4:dc:db:2d:b4:55:30:27:23:60:a9:38:7d:45:
         c8:42:17:ce:10:75:ba:8a:88:f1:08:28:34:06:ec:8d:76:40:
         59:a2:d8:0c:f5:5a:fe:bd:3b:cb:cb:be:8d:56:ab:ad:1f:ea:
         3c:2a:d7:33:c5:ac:e5:47:14:58:09:23:9d:01:32:84:7c:51:
         2a:47:74:aa:2e:9b:58:ca:2d:8c:91:45:ff:87:c8:97:94:19:
         e2:fc:b1:f4:45:6d:a2:9d:c6:02:06:f8:98:30:71:a7:b3:f0:
         46:ff:58:93:6a:ad:31:d0:e2:1e:c9:35:04:9d:b1:60:4c:c4:
         92:3b:1c:d0:ae:34:75:c8:1f:45:11:72:10:24:40:cc:64:ea:
         4c:12:00:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----