Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/8/323630363a623063303a623030623a3a2f34382d3438203d3e20393435.roa
File:                     323630363a623063303a623030623a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier:          nr2zJHug7LscVc1g4+PWlw+7HZ925wnV3SLXxnBWqeg=
Subject key identifier:   5B:8D:5C:BB:BC:E5:A5:53:7C:E9:49:C5:8C:D2:92:75:67:7A:B4:23
Certificate issuer:       /CN=381C7A4E80F50F1F7F8CE0819134F3836A8C389C
Certificate serial:       58943EE51727582696A6468CC9E6FAEA6E3E263C
Authority key identifier: 38:1C:7A:4E:80:F5:0F:1F:7F:8C:E0:81:91:34:F3:83:6A:8C:38:9C
Authority info access:    rsync://rpki.co/repo/August/4/381C7A4E80F50F1F7F8CE0819134F3836A8C389C.cer
Subject info access:      rsync://rpki.co/repo/AS945/8/323630363a623063303a623030623a3a2f34382d3438203d3e20393435.roa
Signing time:             Mon 10 Apr 2023 03:31:53 +0000
ROA not before:           Mon 10 Apr 2023 03:26:53 +0000
ROA not after:            Mon 08 Apr 2024 03:31:53 +0000
asID:                     945
IP address blocks:        2606:b0c0:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:94:3e:e5:17:27:58:26:96:a6:46:8c:c9:e6:fa:ea:6e:3e:26:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=381C7A4E80F50F1F7F8CE0819134F3836A8C389C
        Validity
            Not Before: Apr 10 03:26:53 2023 GMT
            Not After : Apr  8 03:31:53 2024 GMT
        Subject: CN=5B8D5CBBBCE5A5537CE949C58CD29275677AB423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:27:8c:a4:7b:c0:02:01:17:32:5a:56:eb:a8:
                    ec:6f:fb:bf:0f:c2:8f:d3:e2:38:02:0d:3a:32:19:
                    3b:fd:cc:ec:c5:a2:57:94:fb:bc:19:6a:e1:09:08:
                    da:40:aa:e3:bd:0c:8b:c2:29:1c:b1:09:9b:17:00:
                    b2:70:f4:e7:65:dd:e1:e0:bb:a6:f3:72:82:27:e6:
                    8b:49:4b:f9:06:d5:6f:ff:92:9a:0d:29:05:6b:e0:
                    f6:b3:ec:d9:8e:c2:94:f7:9d:fa:8a:7e:52:ee:44:
                    07:a7:cb:33:8c:c5:bb:eb:5a:4f:3a:fb:9a:d9:78:
                    ff:8c:de:60:46:ee:37:8b:41:fc:13:fa:0c:59:70:
                    87:b2:07:17:43:fe:c1:a3:61:f2:ea:38:2b:dd:cb:
                    83:48:03:92:f4:8c:16:d5:25:2b:e0:2f:85:49:e2:
                    08:b0:e6:08:c2:ee:67:a6:a3:12:d8:05:e0:73:37:
                    fe:ca:30:4c:4d:0b:16:c4:e3:bb:cc:2e:0b:1f:14:
                    38:dc:59:38:6e:dd:3b:96:bb:c1:be:08:92:4c:57:
                    74:f2:44:75:61:70:49:d5:a8:fd:92:df:bc:59:f5:
                    3f:34:04:c9:7e:34:2f:59:e3:c0:1f:3d:a3:64:85:
                    da:5e:34:b3:1d:14:4f:fb:f1:2f:34:26:0e:bd:fe:
                    d3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8D:5C:BB:BC:E5:A5:53:7C:E9:49:C5:8C:D2:92:75:67:7A:B4:23
            X509v3 Authority Key Identifier:
                keyid:38:1C:7A:4E:80:F5:0F:1F:7F:8C:E0:81:91:34:F3:83:6A:8C:38:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/8/381C7A4E80F50F1F7F8CE0819134F3836A8C389C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/4/381C7A4E80F50F1F7F8CE0819134F3836A8C389C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/8/323630363a623063303a623030623a3a2f34382d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b0c0:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:e3:dd:df:0c:e0:9c:82:64:d5:45:b3:e8:87:68:18:32:9b:
         b8:41:58:39:6c:4a:b5:59:cc:4a:42:94:b5:06:56:38:c8:1f:
         a7:d3:06:8e:2f:01:2f:3c:4e:b9:74:c1:a7:2c:c7:a4:33:a7:
         4e:32:ca:19:78:46:30:c4:01:0e:c0:89:d9:00:67:d7:86:19:
         a4:a8:19:8f:73:74:b5:05:12:f8:f8:2f:98:cc:68:75:ba:28:
         b5:ec:ce:9f:23:30:30:32:bc:da:aa:2b:9b:d5:ec:ab:3b:61:
         00:47:b0:54:83:1c:c7:1b:49:7c:b4:22:bf:5e:20:3c:0f:d9:
         e4:b3:32:57:3f:d3:ef:db:fb:0e:29:0b:6a:6d:af:7b:f5:3a:
         15:75:4d:12:3e:5a:4e:3c:34:e6:f0:b6:f3:c6:41:95:d6:34:
         14:4d:1a:b1:ab:30:2c:7e:1d:72:43:14:0b:d9:ed:7a:4a:9b:
         e8:13:c6:83:77:e8:87:9b:8c:eb:af:a6:96:d4:f3:3a:b2:32:
         d6:24:45:aa:3c:5b:3a:0e:e0:e3:b2:44:bb:72:3b:50:0f:c8:
         dd:2d:74:81:b3:ba:f4:6b:63:8b:c5:df:70:b1:0c:53:95:6e:
         46:58:40:d5:ef:ee:39:f2:0e:b5:8a:e6:19:e6:3c:fa:a1:fe:
         18:b2:d0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----