Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Cube/3/326130363a613030353a323035303a3a2f34342d3434203d3e20313531303632.roa
File:                     326130363a613030353a323035303a3a2f34342d3434203d3e20313531303632.roa (raw, json)
Hash identifier:          HwlZCPMxTgJZcjfxT+HdlEeLmTlMAxxj75r08UWevV4=
Subject key identifier:   9D:FF:66:16:F4:CB:2E:28:49:9E:AC:67:F9:30:BC:21:EB:AE:95:B0
Certificate issuer:       /CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
Certificate serial:       7235501B396094FDB47328A7DB4C922B8CE1ABEE
Authority key identifier: B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer
Subject info access:      rsync://rpki.co/repo/Cube/3/326130363a613030353a323035303a3a2f34342d3434203d3e20313531303632.roa
Signing time:             Fri 14 Apr 2023 01:38:58 +0000
ROA not before:           Fri 14 Apr 2023 01:33:58 +0000
ROA not after:            Fri 12 Apr 2024 01:38:58 +0000
asID:                     151062
IP address blocks:        2a06:a005:2050::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:35:50:1b:39:60:94:fd:b4:73:28:a7:db:4c:92:2b:8c:e1:ab:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
        Validity
            Not Before: Apr 14 01:33:58 2023 GMT
            Not After : Apr 12 01:38:58 2024 GMT
        Subject: CN=9DFF6616F4CB2E28499EAC67F930BC21EBAE95B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:05:d3:7a:01:a0:89:35:67:61:47:b3:29:64:
                    b5:06:8c:88:14:2d:81:51:01:4d:bc:2f:4d:04:60:
                    e7:c8:55:de:9f:26:80:19:7b:e0:3a:1a:ee:04:e9:
                    a9:aa:ca:6e:48:78:18:7d:95:75:22:25:5d:21:b2:
                    d3:d1:e1:2d:83:94:ca:91:a9:3d:fa:8c:25:b0:37:
                    97:11:e8:4c:eb:cd:2c:31:9e:0d:7c:e3:75:6c:34:
                    ee:2b:c4:a2:ae:27:da:c8:a6:a9:e6:80:4c:fa:05:
                    25:08:9b:d1:4f:97:60:9e:38:99:d0:f9:e7:40:da:
                    d6:d3:94:8c:39:8a:f2:02:fc:25:16:ba:46:ef:9d:
                    27:32:de:dd:2e:23:e3:25:19:79:02:97:48:2c:29:
                    e8:60:c7:9b:25:4a:34:c9:e7:35:00:2b:8a:ea:df:
                    19:eb:58:22:0c:cb:05:80:91:cc:92:eb:e5:bf:c5:
                    ac:fe:bb:33:57:d7:07:c4:8d:3c:80:f1:07:0d:0a:
                    0e:bf:35:58:3a:08:ad:10:08:53:00:db:4d:05:37:
                    ba:7f:b1:68:db:48:ca:5a:4c:13:76:5f:7a:de:b3:
                    69:12:a0:e9:61:db:d5:c8:b3:67:10:3d:e5:0b:02:
                    31:70:0b:73:a7:49:b2:69:fe:1d:ee:01:6e:04:1a:
                    d2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FF:66:16:F4:CB:2E:28:49:9E:AC:67:F9:30:BC:21:EB:AE:95:B0
            X509v3 Authority Key Identifier:
                keyid:B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Cube/3/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Cube/3/326130363a613030353a323035303a3a2f34342d3434203d3e20313531303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2050::/44

    Signature Algorithm: sha256WithRSAEncryption
         6b:bb:49:4a:1f:67:a0:34:ee:f8:f4:e5:0a:02:de:aa:30:92:
         e8:a3:0e:af:60:6a:fc:ea:d0:21:4e:24:a4:e5:55:5d:d7:1f:
         7a:f4:52:7c:cc:ce:e5:bc:b3:c1:24:75:a1:e3:39:a5:a4:ca:
         89:62:93:86:d8:72:f0:c9:ee:6c:42:22:fe:41:45:eb:83:6b:
         09:e6:b5:16:30:4e:71:a4:e2:eb:13:b6:bf:a1:78:38:f1:f0:
         e8:97:31:33:f3:da:cc:86:a2:dc:12:22:7a:39:c2:02:7f:a6:
         5b:19:44:f2:d4:88:8a:e0:f2:88:39:5f:0b:b7:1b:ba:f1:df:
         98:b3:f6:8c:93:0b:8f:d7:ff:90:67:a6:5d:c4:f4:3a:24:68:
         27:d7:ec:f4:04:50:e4:01:96:75:5e:83:f2:a3:ff:84:30:b7:
         9d:1b:e2:2d:da:53:69:06:6b:75:60:4e:73:ab:96:1b:9d:99:
         bf:dc:b6:ef:18:e0:a7:42:f4:96:cb:50:37:ac:ef:2a:bd:c5:
         3f:0e:27:bb:67:a4:26:6c:55:32:4c:11:26:ab:53:4f:6a:db:
         e9:59:3c:47:3c:ad:ba:07:b1:24:f4:58:fc:a9:ea:51:3e:a7:
         42:46:74:4c:f3:57:46:3c:9e:07:56:88:ce:59:bb:fd:06:72:
         03:44:6f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:30 2023 by rpki-client on console-fra.rpki-client.org