Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/8/323630363a623063303a3a2f33362d3336203d3e20393435.roa
File:                     323630363a623063303a3a2f33362d3336203d3e20393435.roa (raw, json)
Hash identifier:          ng9v10wR4iay9nfiOFX3g3tL2vGNa1ad0oLL9H1m/vo=
Subject key identifier:   1B:AD:E0:E4:C3:41:E3:FA:3D:72:3A:41:06:3A:E3:8D:E4:1E:EC:F0
Certificate issuer:       /CN=381C7A4E80F50F1F7F8CE0819134F3836A8C389C
Certificate serial:       6D7370C6A7393EA1B1802A4D92DD509C31060F62
Authority key identifier: 38:1C:7A:4E:80:F5:0F:1F:7F:8C:E0:81:91:34:F3:83:6A:8C:38:9C
Authority info access:    rsync://rpki.co/repo/August/4/381C7A4E80F50F1F7F8CE0819134F3836A8C389C.cer
Subject info access:      rsync://rpki.co/repo/AS945/8/323630363a623063303a3a2f33362d3336203d3e20393435.roa
Signing time:             Mon 10 Apr 2023 03:31:53 +0000
ROA not before:           Mon 10 Apr 2023 03:26:53 +0000
ROA not after:            Mon 08 Apr 2024 03:31:53 +0000
asID:                     945
IP address blocks:        2606:b0c0::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:73:70:c6:a7:39:3e:a1:b1:80:2a:4d:92:dd:50:9c:31:06:0f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=381C7A4E80F50F1F7F8CE0819134F3836A8C389C
        Validity
            Not Before: Apr 10 03:26:53 2023 GMT
            Not After : Apr  8 03:31:53 2024 GMT
        Subject: CN=1BADE0E4C341E3FA3D723A41063AE38DE41EECF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a3:5b:fc:0c:59:86:ba:9a:d5:73:ae:ee:00:
                    ba:70:98:66:ed:92:37:c7:21:fd:c8:9d:b4:f9:b4:
                    b8:ed:61:25:5b:e5:20:21:71:b8:49:3e:b9:24:6c:
                    74:ed:db:b7:77:9d:4a:d7:22:ec:f4:02:21:3a:9d:
                    e6:20:64:5f:bd:24:cd:fd:70:fe:67:aa:76:3a:96:
                    ed:53:4e:ee:a3:72:23:8a:4a:5a:2f:b6:78:03:57:
                    82:c5:2c:3e:2e:9a:3f:2f:1a:af:a9:63:19:1a:d4:
                    a2:0a:56:57:07:50:02:fe:61:cc:b8:ae:77:7f:4f:
                    27:62:1f:d4:99:95:f1:03:8a:1b:5c:69:4d:32:1d:
                    d6:d8:3c:4d:ab:ff:dd:bc:2c:24:96:60:26:82:53:
                    cb:4e:01:f8:0d:75:aa:23:20:1b:08:12:16:1a:da:
                    77:6e:28:90:03:87:5c:cd:ea:ea:4f:c7:b7:a2:9a:
                    50:e6:6f:93:9c:6d:ce:e6:9b:d7:89:ff:23:e3:0a:
                    3a:65:c1:4c:3b:bd:cc:51:15:e7:7a:3e:f1:c7:97:
                    a4:ad:6b:1d:3c:7f:05:f9:c2:fb:3d:98:cb:a8:7a:
                    c5:06:ea:39:cd:d2:d6:32:26:eb:03:ae:f5:21:f6:
                    d8:15:5b:a5:1e:fc:75:96:52:25:b4:bd:41:79:a0:
                    fe:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AD:E0:E4:C3:41:E3:FA:3D:72:3A:41:06:3A:E3:8D:E4:1E:EC:F0
            X509v3 Authority Key Identifier:
                keyid:38:1C:7A:4E:80:F5:0F:1F:7F:8C:E0:81:91:34:F3:83:6A:8C:38:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/8/381C7A4E80F50F1F7F8CE0819134F3836A8C389C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/4/381C7A4E80F50F1F7F8CE0819134F3836A8C389C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/8/323630363a623063303a3a2f33362d3336203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b0c0::/36

    Signature Algorithm: sha256WithRSAEncryption
         8a:f2:43:df:3a:93:a4:58:87:e6:92:48:b4:52:9d:2a:9b:fd:
         36:d0:ba:51:e1:41:d3:a9:19:9b:10:c5:80:65:0b:bd:cd:b9:
         72:85:01:47:71:41:7c:45:e0:a6:20:15:0f:d5:48:5a:a7:9d:
         d3:d0:e0:60:25:5b:13:e3:95:a4:4b:40:31:d4:7c:45:6b:5f:
         ad:6e:a2:f1:dd:81:91:cb:1a:43:2c:b6:92:96:76:a9:5e:72:
         24:c2:ff:08:ce:30:9c:0b:99:7e:a2:5f:d9:e4:8b:6c:7a:89:
         a7:bf:49:ba:87:d6:20:2c:be:62:2e:20:fe:04:30:e9:11:40:
         ed:3f:ef:eb:67:b5:05:d7:c1:7e:fc:34:f1:dd:56:6e:25:db:
         fb:52:68:75:05:b1:fe:a7:cf:8c:54:8c:fb:23:91:ad:45:fd:
         dd:da:15:54:75:c4:81:07:03:c8:e3:b8:ac:7c:67:af:fc:42:
         a6:e8:8b:84:27:a3:a1:ea:3b:e6:84:ba:43:98:80:f5:28:6d:
         65:8b:01:37:13:e7:1b:72:75:2a:32:e4:c3:02:7f:49:17:b1:
         e8:d6:c9:65:cd:f9:89:58:b6:b4:f8:8d:18:63:50:57:2a:95:
         59:f0:81:f4:24:1d:53:09:94:97:00:c5:5d:38:95:ac:48:54:
         37:d3:f3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----