Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Cube/1/326131323a646434373a666130303a3a2f34302d3430203d3e20323038363930.roa
File:                     326131323a646434373a666130303a3a2f34302d3430203d3e20323038363930.roa (raw, json)
Hash identifier:          Wb9JB6IUnPVXFcCkwqj4t+fKOT3hJbziW9uw8JvC1/8=
Subject key identifier:   22:B0:B5:BE:6B:A8:D4:7A:1B:B5:51:5B:C8:A4:88:88:93:43:5A:60
Certificate issuer:       /CN=0B9793DB5D4383D5EB9329D4AFB5656B34D22D92
Certificate serial:       425F60DD75F775BDEF793ABEB842B2DBE5608F7F
Authority key identifier: 0B:97:93:DB:5D:43:83:D5:EB:93:29:D4:AF:B5:65:6B:34:D2:2D:92
Authority info access:    rsync://rpki.co/repo/AS945/1/0B9793DB5D4383D5EB9329D4AFB5656B34D22D92.cer
Subject info access:      rsync://rpki.co/repo/Cube/1/326131323a646434373a666130303a3a2f34302d3430203d3e20323038363930.roa
Signing time:             Thu 13 Apr 2023 10:36:54 +0000
ROA not before:           Thu 13 Apr 2023 10:31:54 +0000
ROA not after:            Thu 11 Apr 2024 10:36:54 +0000
asID:                     208690
IP address blocks:        2a12:dd47:fa00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5f:60:dd:75:f7:75:bd:ef:79:3a:be:b8:42:b2:db:e5:60:8f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B9793DB5D4383D5EB9329D4AFB5656B34D22D92
        Validity
            Not Before: Apr 13 10:31:54 2023 GMT
            Not After : Apr 11 10:36:54 2024 GMT
        Subject: CN=22B0B5BE6BA8D47A1BB5515BC8A4888893435A60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5e:4c:57:1c:79:1e:a9:29:0e:2b:50:38:8e:
                    f8:cc:d3:9e:af:f2:2b:2d:53:ed:3f:98:20:c3:19:
                    16:ca:af:d1:55:6a:65:e5:59:43:28:4e:51:44:da:
                    8f:7b:8c:f9:c0:0d:7c:29:0c:e1:c5:c6:7f:00:9a:
                    16:48:6d:a9:e7:e6:a8:b4:3f:39:db:c8:83:eb:5e:
                    54:34:54:83:21:50:fa:71:0f:3a:51:72:15:23:40:
                    0b:d3:32:d5:6f:40:aa:24:c6:8c:e6:cf:39:fa:78:
                    e4:67:c5:7a:bd:fd:1d:ee:a7:80:3b:d5:b3:6f:45:
                    00:a4:b0:bc:bb:9f:3f:a8:43:41:66:b2:a1:93:38:
                    e2:f9:12:05:82:85:a8:df:fa:bd:39:5a:32:84:fa:
                    2b:57:a3:5e:6f:a4:99:30:d4:35:5a:ac:a3:27:f7:
                    9a:8f:66:49:c0:cb:1f:fb:71:dd:8b:10:f2:b0:36:
                    43:46:8f:86:85:f8:23:6f:5e:4f:fd:1e:4d:37:43:
                    ea:44:39:1c:3c:03:02:f5:a6:40:0d:6c:10:3b:8e:
                    d8:de:3b:08:83:ee:6a:fd:3d:b6:a1:bc:c3:98:58:
                    c4:12:24:b2:db:2b:02:9b:31:c2:c8:cd:94:69:bc:
                    9e:a5:b5:18:69:ba:1f:98:15:59:b6:af:e4:06:f6:
                    ac:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B0:B5:BE:6B:A8:D4:7A:1B:B5:51:5B:C8:A4:88:88:93:43:5A:60
            X509v3 Authority Key Identifier:
                keyid:0B:97:93:DB:5D:43:83:D5:EB:93:29:D4:AF:B5:65:6B:34:D2:2D:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Cube/1/0B9793DB5D4383D5EB9329D4AFB5656B34D22D92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/0B9793DB5D4383D5EB9329D4AFB5656B34D22D92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Cube/1/326131323a646434373a666130303a3a2f34302d3430203d3e20323038363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         52:a1:f6:76:28:ce:7e:7d:da:cb:0f:b4:94:d3:d3:c0:42:20:
         03:ac:84:2b:e2:5c:3e:80:da:48:aa:4d:fe:a0:cb:52:27:57:
         44:a5:dd:d6:13:bf:67:cd:5b:5a:d8:d6:8a:e4:cd:90:28:35:
         05:8a:78:f0:aa:8c:e7:1b:93:46:64:45:a6:9b:1b:24:1e:1b:
         d7:ad:8a:8f:75:d3:18:a6:7b:b5:9d:a6:1c:53:dc:4e:2f:3f:
         8e:e8:ca:4a:a2:31:d5:e0:3f:90:fa:ed:fb:cb:7b:5b:6b:26:
         c3:66:73:32:7b:f0:bb:54:f0:ce:75:69:66:20:6b:7a:c2:f2:
         3c:4a:7c:e5:5d:09:55:60:26:18:2c:b2:db:d6:58:4a:48:de:
         5a:51:dc:40:17:c3:6e:d7:93:98:fd:ec:e4:c7:41:65:05:9b:
         2e:38:a8:14:d9:60:73:61:1f:cb:22:cd:78:ca:30:bf:42:5b:
         a3:36:5a:6f:4b:61:d6:33:51:a2:dd:a4:0a:d7:d7:fc:18:aa:
         ab:60:5a:fb:ac:0f:97:5e:fb:e6:c0:69:4f:e1:fc:32:11:ca:
         be:09:c6:0b:a2:ff:06:5b:88:e6:6e:5e:ed:ba:d1:f3:88:26:
         68:b6:82:35:e2:22:3d:cd:93:aa:f1:61:29:4e:cb:6a:34:ae:
         ef:52:31:5c
-----BEGIN CERTIFICATE-----
MIIExzCCA6+gAwIBAgIUQl9g3XX3db3veTq+uEKy2+Vgj38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEI5NzkzREI1RDQzODNENUVCOTMyOUQ0QUZCNTY1NkIz
NEQyMkQ5MjAeFw0yMzA0MTMxMDMxNTRaFw0yNDA0MTExMDM2NTRaMDMxMTAvBgNV
BAMTKDIyQjBCNUJFNkJBOEQ0N0ExQkI1NTE1QkM4QTQ4ODg4OTM0MzVBNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChXkxXHHkeqSkOK1A4jvjM056v
8istU+0/mCDDGRbKr9FVamXlWUMoTlFE2o97jPnADXwpDOHFxn8AmhZIbann5qi0
PznbyIPrXlQ0VIMhUPpxDzpRchUjQAvTMtVvQKokxozmzzn6eORnxXq9/R3up4A7
1bNvRQCksLy7nz+oQ0FmsqGTOOL5EgWChajf+r05WjKE+itXo15vpJkw1DVarKMn
95qPZknAyx/7cd2LEPKwNkNGj4aF+CNvXk/9Hk03Q+pEORw8AwL1pkANbBA7jtje
OwiD7mr9PbahvMOYWMQSJLLbKwKbMcLIzZRpvJ6ltRhpuh+YFVm2r+QG9qzDAgMB
AAGjggHRMIIBzTAdBgNVHQ4EFgQUIrC1vmuo1HobtVFbyKSIiJNDWmAwHwYDVR0j
BBgwFoAUC5eT211Dg9XrkynUr7VlazTSLZIwDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0N1YmUvMS8wQjk3OTNE
QjVENDM4M0Q1RUI5MzI5RDRBRkI1NjU2QjM0RDIyRDkyLmNybDBlBggrBgEFBQcB
AQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEv
MEI5NzkzREI1RDQzODNENUVCOTMyOUQ0QUZCNTY1NkIzNEQyMkQ5Mi5jZXIwfAYI
KwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzovL3Jwa2kuY28vcmVwby9D
dWJlLzEvMzI2MTMxMzIzYTY0NjQzNDM3M2E2NjYxMzAzMDNhM2EyZjM0MzAyZDM0
MzAyMDNkM2UyMDMyMzAzODM2MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoS3Uf6MA0GCSqGSIb3
DQEBCwUAA4IBAQBSofZ2KM5+fdrLD7SU09PAQiADrIQr4lw+gNpIqk3+oMtSJ1dE
pd3WE79nzVta2NaK5M2QKDUFinjwqoznG5NGZEWmmxskHhvXrYqPddMYpnu1naYc
U9xOLz+O6MpKojHV4D+Q+u37y3tbaybDZnMye/C7VPDOdWlmIGt6wvI8SnzlXQlV
YCYYLLLb1lhKSN5aUdxAF8Nu15OY/ezkx0FlBZsuOKgU2WBzYR/LIs14yjC/Qluj
NlpvS2HWM1Gi3aQK19f8GKqrYFr7rA+XXvvmwGlP4fwyEcq+CcYLov8GW4jmbl7t
utHziCZotoI14iI9zZOq8WEpTstqNK7vUjFc
-----END CERTIFICATE-----