Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030343a3a2f33312d3331203d3e20393435.roa
File:                     326131333a633030343a3a2f33312d3331203d3e20393435.roa (raw, json)
Hash identifier:          ZrfAmCOrXBZkftr7JtIxs1DCiH7zIa0oVecFua10HEo=
Subject key identifier:   A2:74:7C:08:35:00:DE:A6:EF:C9:BC:E7:EF:90:47:11:B4:61:0D:BF
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       2E02E0B0DEF6CAFA2323E6F38AF70B7DC4A46441
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030343a3a2f33312d3331203d3e20393435.roa
Signing time:             Mon 10 Apr 2023 03:31:20 +0000
ROA not before:           Mon 10 Apr 2023 03:26:20 +0000
ROA not after:            Mon 08 Apr 2024 03:31:20 +0000
asID:                     945
IP address blocks:        2a13:c004::/31 maxlen: 31

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:02:e0:b0:de:f6:ca:fa:23:23:e6:f3:8a:f7:0b:7d:c4:a4:64:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Apr 10 03:26:20 2023 GMT
            Not After : Apr  8 03:31:20 2024 GMT
        Subject: CN=A2747C083500DEA6EFC9BCE7EF904711B4610DBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:78:db:6f:8a:16:44:c1:43:ee:9d:78:60:c3:
                    d4:06:d8:09:b8:aa:2e:1a:c9:6f:24:af:2f:06:f8:
                    87:13:5f:16:23:ad:b1:33:a2:ab:e7:98:17:b4:07:
                    e9:aa:06:07:bb:e0:cb:2f:d0:4a:39:88:b5:14:84:
                    38:a5:db:01:90:b1:c7:ae:2e:97:5c:d7:fd:88:0a:
                    2a:b4:32:06:c6:da:26:2a:fd:79:90:48:47:ae:4e:
                    ce:e4:b5:23:15:e2:7f:75:8e:cc:1c:ae:72:a3:97:
                    03:45:98:43:e3:cd:a7:3a:d4:0e:23:40:c4:35:30:
                    44:7c:7f:8a:95:0e:93:48:db:5b:43:58:d3:e6:ba:
                    e2:6a:f2:44:d5:84:94:2c:72:5b:fa:fd:85:95:f8:
                    3d:c3:f6:ed:0b:c8:d2:54:55:55:23:4d:dc:7c:bd:
                    01:e4:0c:89:69:90:89:e9:b4:9e:2f:48:61:27:66:
                    25:d8:e7:3e:a7:3d:06:34:1a:e5:8a:b4:9a:ad:f3:
                    2f:de:ce:84:83:ab:0a:d5:d7:a5:e8:6c:b9:25:ab:
                    3a:7e:2f:f4:b5:52:9c:54:da:21:3d:0a:0a:da:d5:
                    64:2b:70:85:6d:45:3c:ee:be:0f:18:62:5f:46:fd:
                    ee:d5:4d:57:80:45:93:98:3e:45:a1:62:46:af:65:
                    d8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:74:7C:08:35:00:DE:A6:EF:C9:BC:E7:EF:90:47:11:B4:61:0D:BF
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030343a3a2f33312d3331203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c004::/31

    Signature Algorithm: sha256WithRSAEncryption
         59:65:5e:bb:74:08:c5:5a:d5:9f:3b:05:9e:19:87:36:fc:ee:
         ed:86:6f:3f:06:42:7b:68:9e:03:76:37:bd:6d:8e:f8:33:af:
         fd:fc:6e:fb:44:4b:39:0c:df:3a:ad:f8:ec:1a:b0:ed:46:25:
         91:19:ba:26:68:eb:d6:7b:2b:3c:f3:59:b6:e8:f9:5a:1c:89:
         20:7e:04:ce:a2:e2:ce:fc:40:2f:5c:61:1b:f2:54:63:c0:1e:
         d4:08:08:27:46:a0:8d:65:d6:4d:ca:fc:0f:e4:f9:75:25:7a:
         3e:12:de:5f:d5:4d:14:4e:16:ea:25:84:c3:bc:06:5d:2f:b9:
         5b:8f:c5:d0:51:8a:55:b4:ac:b3:9a:fb:65:47:07:b3:71:f6:
         7f:b6:ae:4a:c7:0b:05:66:8b:f3:10:5e:36:66:89:dd:ee:5a:
         89:7f:6e:ed:e3:f2:a7:92:c4:cc:dd:e7:35:cd:57:41:9b:8a:
         b7:27:9c:f5:20:aa:f4:91:ff:f6:73:ba:a6:eb:8c:b3:69:b7:
         17:07:3d:37:20:fe:28:84:99:8e:3f:db:4f:d3:9c:3f:74:02:
         4e:aa:26:b0:a9:3b:88:4a:d4:78:28:7c:0c:13:14:ca:18:37:
         fa:0e:76:50:47:06:1a:55:a9:6f:26:c9:03:58:35:1e:91:95:
         61:a1:24:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----