Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Cube/2/323630323a666332333a3136303a3a2f34342d3438203d3e20313531303632.roa
File:                     323630323a666332333a3136303a3a2f34342d3438203d3e20313531303632.roa (raw, json)
Hash identifier:          ibYj6Mk9lkIUGgZBfUHha4duCTBH+XniGlMyLRfo8AA=
Subject key identifier:   29:69:D0:3B:82:3E:A6:A9:D6:FB:A0:67:ED:4E:2C:E6:51:5A:73:AB
Certificate issuer:       /CN=6DD138EBB7A6BAB2C1F4E3D7167011D86AC1FCF0
Certificate serial:       377D70810E6CF90AF6986E58487AB39A10B49D59
Authority key identifier: 6D:D1:38:EB:B7:A6:BA:B2:C1:F4:E3:D7:16:70:11:D8:6A:C1:FC:F0
Authority info access:    rsync://rpki.co/repo/AS945/2/6DD138EBB7A6BAB2C1F4E3D7167011D86AC1FCF0.cer
Subject info access:      rsync://rpki.co/repo/Cube/2/323630323a666332333a3136303a3a2f34342d3438203d3e20313531303632.roa
Signing time:             Thu 27 Apr 2023 14:03:43 +0000
ROA not before:           Thu 27 Apr 2023 13:58:43 +0000
ROA not after:            Thu 25 Apr 2024 14:03:43 +0000
asID:                     151062
IP address blocks:        2602:fc23:160::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7d:70:81:0e:6c:f9:0a:f6:98:6e:58:48:7a:b3:9a:10:b4:9d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DD138EBB7A6BAB2C1F4E3D7167011D86AC1FCF0
        Validity
            Not Before: Apr 27 13:58:43 2023 GMT
            Not After : Apr 25 14:03:43 2024 GMT
        Subject: CN=2969D03B823EA6A9D6FBA067ED4E2CE6515A73AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:59:50:99:dc:fa:d1:68:6a:5d:d1:e5:93:32:
                    d1:56:56:83:2c:f4:27:2b:33:bc:f8:90:e8:a7:d3:
                    3b:76:42:6f:e0:7b:33:db:3a:cd:2b:77:db:78:8c:
                    5c:a3:99:fc:0e:2c:90:02:37:fb:78:12:b8:56:c3:
                    f5:9f:31:3c:8f:54:3a:f4:f7:15:a5:e7:6d:ea:f6:
                    99:17:f6:c0:57:82:c6:76:77:84:2d:f0:00:70:a8:
                    40:42:00:69:53:b4:e8:1b:65:69:66:aa:16:52:1f:
                    a1:8b:86:8d:4c:f7:dc:86:46:73:be:8d:5f:cd:3b:
                    bf:92:d9:07:6a:0d:f4:21:83:30:10:af:0d:e0:6e:
                    2d:9f:e7:28:79:80:d9:eb:92:bc:04:77:62:be:e1:
                    d4:4b:e2:3a:93:c1:e5:51:22:98:73:a8:6e:38:fb:
                    98:90:8f:57:1c:43:58:0d:04:6d:d3:5c:14:c4:b6:
                    9b:a5:af:69:75:4f:99:b0:26:ca:3b:5e:6d:7b:f8:
                    6f:e2:a1:d4:f9:22:3a:67:b2:3c:10:fa:91:20:be:
                    0a:bc:81:a0:b5:9c:68:43:9e:1b:54:d3:0f:29:9e:
                    6a:0e:cd:a3:42:1a:1c:18:35:91:e3:a3:1d:62:6d:
                    69:e1:37:a7:b6:0f:ef:d2:95:03:37:16:cc:2c:9f:
                    c7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:69:D0:3B:82:3E:A6:A9:D6:FB:A0:67:ED:4E:2C:E6:51:5A:73:AB
            X509v3 Authority Key Identifier:
                keyid:6D:D1:38:EB:B7:A6:BA:B2:C1:F4:E3:D7:16:70:11:D8:6A:C1:FC:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Cube/2/6DD138EBB7A6BAB2C1F4E3D7167011D86AC1FCF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/2/6DD138EBB7A6BAB2C1F4E3D7167011D86AC1FCF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Cube/2/323630323a666332333a3136303a3a2f34342d3438203d3e20313531303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:160::/44

    Signature Algorithm: sha256WithRSAEncryption
         9d:f4:23:10:54:b4:a8:24:96:95:f3:9e:a9:55:37:fb:e8:39:
         a3:e0:21:f6:0b:3e:1e:92:16:a9:c1:5a:b5:ac:2e:21:a9:2c:
         fd:c5:20:a7:89:75:38:bd:cf:53:a9:b8:ea:73:78:58:84:55:
         48:86:f8:a9:38:ce:e3:64:42:86:ca:8d:ff:d8:ce:1a:6b:6b:
         0f:7f:a8:0e:fe:f8:1b:21:76:22:3b:62:9f:09:92:91:17:5f:
         4d:7e:3d:36:ca:18:6b:a0:65:4a:65:b6:0d:aa:5f:cf:4d:a4:
         2e:d2:d9:5a:8f:ba:34:d5:92:7a:cb:57:23:11:28:93:1b:a1:
         ff:20:df:0c:26:fd:79:9b:76:9b:ba:a4:79:2c:8e:56:52:e2:
         28:7e:4d:b9:0a:c4:19:8d:eb:12:ac:42:c4:fd:60:71:ef:e3:
         30:16:ee:4a:33:f7:cf:6a:d7:ff:96:6e:53:52:cd:c8:55:9e:
         62:fa:bc:5f:08:56:58:86:1b:30:b9:da:ac:40:c5:4e:bf:53:
         8b:54:49:ea:39:79:4d:24:bd:62:d6:9f:2c:10:41:be:ea:2d:
         7e:7a:c5:6c:41:aa:0b:ad:87:59:32:76:63:f1:bc:23:80:12:
         78:89:31:a7:bb:e9:d2:e7:97:99:95:33:23:40:1b:74:e6:de:
         88:db:a2:06
-----BEGIN CERTIFICATE-----
MIIExjCCA66gAwIBAgIUN31wgQ5s+Qr2mG5YSHqzmhC0nVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkREMTM4RUJCN0E2QkFCMkMxRjRFM0Q3MTY3MDExRDg2
QUMxRkNGMDAeFw0yMzA0MjcxMzU4NDNaFw0yNDA0MjUxNDAzNDNaMDMxMTAvBgNV
BAMTKDI5NjlEMDNCODIzRUE2QTlENkZCQTA2N0VENEUyQ0U2NTE1QTczQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcWVCZ3PrRaGpd0eWTMtFWVoMs
9CcrM7z4kOin0zt2Qm/gezPbOs0rd9t4jFyjmfwOLJACN/t4ErhWw/WfMTyPVDr0
9xWl523q9pkX9sBXgsZ2d4Qt8ABwqEBCAGlTtOgbZWlmqhZSH6GLho1M99yGRnO+
jV/NO7+S2QdqDfQhgzAQrw3gbi2f5yh5gNnrkrwEd2K+4dRL4jqTweVRIphzqG44
+5iQj1ccQ1gNBG3TXBTEtpulr2l1T5mwJso7Xm17+G/iodT5IjpnsjwQ+pEgvgq8
gaC1nGhDnhtU0w8pnmoOzaNCGhwYNZHjox1ibWnhN6e2D+/SlQM3Fswsn8fpAgMB
AAGjggHQMIIBzDAdBgNVHQ4EFgQUKWnQO4I+pqnW+6Bn7U4s5lFac6swHwYDVR0j
BBgwFoAUbdE467emurLB9OPXFnAR2GrB/PAwDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0N1YmUvMi82REQxMzhF
QkI3QTZCQUIyQzFGNEUzRDcxNjcwMTFEODZBQzFGQ0YwLmNybDBlBggrBgEFBQcB
AQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzIv
NkREMTM4RUJCN0E2QkFCMkMxRjRFM0Q3MTY3MDExRDg2QUMxRkNGMC5jZXIwegYI
KwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jwa2kuY28vcmVwby9D
dWJlLzIvMzIzNjMwMzIzYTY2NjMzMjMzM2EzMTM2MzAzYTNhMmYzNDM0MmQzNDM4
MjAzZDNlMjAzMTM1MzEzMDM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQmAvwjAWAwDQYJKoZIhvcN
AQELBQADggEBAJ30IxBUtKgklpXznqlVN/voOaPgIfYLPh6SFqnBWrWsLiGpLP3F
IKeJdTi9z1OpuOpzeFiEVUiG+Kk4zuNkQobKjf/Yzhpraw9/qA7++BshdiI7Yp8J
kpEXX01+PTbKGGugZUpltg2qX89NpC7S2VqPujTVknrLVyMRKJMbof8g3wwm/Xmb
dpu6pHksjlZS4ih+TbkKxBmN6xKsQsT9YHHv4zAW7koz989q1/+WblNSzchVnmL6
vF8IVliGGzC52qxAxU6/U4tUSeo5eU0kvWLWnywQQb7qLX56xWxBqguth1kydmPx
vCOAEniJMae76dLnl5mVMyNAG3Tm3ojbogY=
-----END CERTIFICATE-----