Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030323a3a2f33312d3331203d3e20393435.roa
File:                     326131333a633030323a3a2f33312d3331203d3e20393435.roa (raw, json)
Hash identifier:          kayPcn9JUKGS5uaWHvkc+DpfaLDN962qwdOmSRcbSaA=
Subject key identifier:   A1:14:F5:CF:05:ED:E7:AC:2A:20:03:AF:6F:8F:59:17:D6:65:87:C4
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       209AF8EC488069FD4EE44AA84CE9F63A987802D0
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030323a3a2f33312d3331203d3e20393435.roa
Signing time:             Mon 10 Apr 2023 03:31:19 +0000
ROA not before:           Mon 10 Apr 2023 03:26:19 +0000
ROA not after:            Mon 08 Apr 2024 03:31:19 +0000
asID:                     945
IP address blocks:        2a13:c002::/31 maxlen: 31

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9a:f8:ec:48:80:69:fd:4e:e4:4a:a8:4c:e9:f6:3a:98:78:02:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Apr 10 03:26:19 2023 GMT
            Not After : Apr  8 03:31:19 2024 GMT
        Subject: CN=A114F5CF05EDE7AC2A2003AF6F8F5917D66587C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3b:a9:8e:b5:1b:a8:31:6a:47:bb:9f:cc:1c:
                    7a:54:5b:20:92:a3:74:c2:5d:59:27:55:ea:dd:d3:
                    4a:f9:06:63:58:4b:29:2c:00:18:92:7c:26:02:1b:
                    ce:8e:90:0d:5d:40:d3:70:b0:cd:41:a7:5c:49:4d:
                    57:ff:d7:81:17:54:ed:2d:9e:e6:51:b3:2b:06:4e:
                    fa:a2:a4:27:36:ff:04:73:24:84:a0:29:4d:c4:26:
                    63:9f:b2:72:85:f3:5e:ef:08:fb:5e:64:e4:36:be:
                    53:07:18:30:84:aa:3c:6f:d0:26:08:96:53:2e:db:
                    55:13:4c:2f:b2:51:86:18:39:8d:ff:84:e3:a4:95:
                    b7:ec:96:ac:fd:0d:10:1b:7c:29:c3:7a:5c:dc:b7:
                    94:3d:af:ca:81:7f:9f:4f:03:b2:01:f3:0c:3f:a4:
                    e5:b1:e2:dd:23:0b:40:96:a3:fb:89:8a:75:8d:f1:
                    48:b5:3e:61:b5:63:97:da:cc:0a:a7:09:4c:4e:85:
                    d2:88:e0:5d:bb:97:b3:c2:59:83:d1:59:b1:af:4d:
                    9a:38:4f:d6:27:80:a8:87:11:d6:f3:43:ae:c2:a2:
                    0f:5f:69:0c:8a:8a:63:fb:fc:57:2b:fa:74:17:9c:
                    4a:0e:e1:08:45:0b:dd:74:c3:ac:c3:81:89:71:7b:
                    ac:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:14:F5:CF:05:ED:E7:AC:2A:20:03:AF:6F:8F:59:17:D6:65:87:C4
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030323a3a2f33312d3331203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c002::/31

    Signature Algorithm: sha256WithRSAEncryption
         58:04:39:09:94:c5:40:3b:11:e4:1e:1f:cc:39:23:3a:53:53:
         3d:37:ed:1d:b4:fb:a3:9e:e5:b6:af:5e:c3:15:dc:95:05:04:
         51:5f:eb:e7:a9:73:e5:77:53:c8:43:cb:34:be:b7:eb:05:f2:
         43:2e:28:2a:c1:cd:ae:0f:c4:51:6f:ef:97:21:5a:32:e7:37:
         41:78:ef:54:0c:c6:a6:d6:9c:c7:18:34:09:82:bd:d6:e0:6e:
         1f:60:f8:56:f6:11:6e:e8:da:32:2b:e9:20:72:c6:2c:4f:d8:
         3d:5b:12:c1:a1:d6:39:73:c8:b0:aa:c5:06:d2:d0:b7:4b:b7:
         ea:62:a9:88:38:08:ca:75:bd:97:7c:d7:a7:b1:54:e2:8b:b6:
         65:22:4a:67:8e:53:77:6d:48:d3:2a:99:13:c6:eb:51:3c:b3:
         bf:26:79:93:89:4a:96:1d:ab:28:45:3f:fd:f5:f3:84:3c:c3:
         70:fc:10:f8:8b:61:b6:b6:d6:12:1e:61:01:cf:01:e4:2a:b5:
         fe:d5:06:24:b7:cf:a7:8f:7f:72:c2:6b:3f:0f:64:4b:38:45:
         31:1f:84:ac:da:c5:61:d3:f7:29:ed:cc:c4:16:59:75:29:ef:
         25:25:d7:4d:76:35:17:f9:c4:ed:5b:2a:67:17:75:91:d5:73:
         c5:50:bf:85
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUIJr47EiAaf1O5EqoTOn2Oph4AtAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ0QTIyNEE5NTY1RjY3RTQ5MTRFNkY4QzJCM0MzNDMw
M0M5Qzg3NTAeFw0yMzA0MTAwMzI2MTlaFw0yNDA0MDgwMzMxMTlaMDMxMTAvBgNV
BAMTKEExMTRGNUNGMDVFREU3QUMyQTIwMDNBRjZGOEY1OTE3RDY2NTg3QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEO6mOtRuoMWpHu5/MHHpUWyCS
o3TCXVknVerd00r5BmNYSyksABiSfCYCG86OkA1dQNNwsM1Bp1xJTVf/14EXVO0t
nuZRsysGTvqipCc2/wRzJISgKU3EJmOfsnKF817vCPteZOQ2vlMHGDCEqjxv0CYI
llMu21UTTC+yUYYYOY3/hOOklbfslqz9DRAbfCnDelzct5Q9r8qBf59PA7IB8ww/
pOWx4t0jC0CWo/uJinWN8Ui1PmG1Y5fazAqnCUxOhdKI4F27l7PCWYPRWbGvTZo4
T9YngKiHEdbzQ67Cog9faQyKimP7/Fcr+nQXnEoO4QhFC910w6zDgYlxe6xlAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUoRT1zwXt56wqIAOvb49ZF9Zlh8QwHwYDVR0j
BBgwFoAUrUoiSpVl9n5JFOb4wrPDQwPJyHUwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzUvQUQ0QTIy
NEE5NTY1RjY3RTQ5MTRFNkY4QzJCM0MzNDMwM0M5Qzg3NS5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
MS9BRDRBMjI0QTk1NjVGNjdFNDkxNEU2RjhDMkIzQzM0MzAzQzlDODc1LmNlcjBt
BggrBgEFBQcBCwRhMF8wXQYIKwYBBQUHMAuGUXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzUvMzI2MTMxMzMzYTYzMzAzMDMyM2EzYTJmMzMzMTJkMzMzMTIwM2Qz
ZTIwMzkzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUBKhPAAjANBgkqhkiG9w0BAQsFAAOCAQEAWAQ5
CZTFQDsR5B4fzDkjOlNTPTftHbT7o57ltq9ewxXclQUEUV/r56lz5XdTyEPLNL63
6wXyQy4oKsHNrg/EUW/vlyFaMuc3QXjvVAzGptacxxg0CYK91uBuH2D4VvYRbuja
MivpIHLGLE/YPVsSwaHWOXPIsKrFBtLQt0u36mKpiDgIynW9l3zXp7FU4ou2ZSJK
Z45Td21I0yqZE8brUTyzvyZ5k4lKlh2rKEU//fXzhDzDcPwQ+IthtrbWEh5hAc8B
5Cq1/tUGJLfPp49/csJrPw9kSzhFMR+ErNrFYdP3Ke3MxBZZdSnvJSXXTXY1F/nE
7VsqZxd1kdVzxVC/hQ==
-----END CERTIFICATE-----