Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Cube/3/326130363a613030353a323035303a3a2f34342d3438203d3e20313531303632.roa
File:                     326130363a613030353a323035303a3a2f34342d3438203d3e20313531303632.roa (raw, json)
Hash identifier:          ytUq/MFvd7xo6lQAEU8X4anMZlCHw3eupTusxQXG9ks=
Subject key identifier:   BF:F4:D9:78:33:27:9F:11:C7:D8:CE:55:9F:70:7E:8D:95:9B:EB:09
Certificate issuer:       /CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
Certificate serial:       5F0C8D494122D4FCBA45DDCA63582ACC17DD71E2
Authority key identifier: B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer
Subject info access:      rsync://rpki.co/repo/Cube/3/326130363a613030353a323035303a3a2f34342d3438203d3e20313531303632.roa
Signing time:             Thu 27 Apr 2023 14:08:05 +0000
ROA not before:           Thu 27 Apr 2023 14:03:05 +0000
ROA not after:            Thu 25 Apr 2024 14:08:05 +0000
asID:                     151062
IP address blocks:        2a06:a005:2050::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0c:8d:49:41:22:d4:fc:ba:45:dd:ca:63:58:2a:cc:17:dd:71:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
        Validity
            Not Before: Apr 27 14:03:05 2023 GMT
            Not After : Apr 25 14:08:05 2024 GMT
        Subject: CN=BFF4D97833279F11C7D8CE559F707E8D959BEB09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:15:46:ae:b3:aa:d6:aa:79:49:ab:18:73:52:
                    20:14:4b:b0:91:18:2c:6e:eb:3a:7a:84:75:55:7f:
                    ec:c4:72:8e:ec:3d:18:e8:82:21:b9:5b:fe:d4:69:
                    c8:ad:3a:04:69:7f:28:c6:57:cc:d4:08:b6:d2:4e:
                    1f:ec:2a:90:92:60:c4:5a:b1:66:c4:9d:e4:c5:f2:
                    e4:38:3a:7c:50:fb:5f:78:8f:15:22:75:15:a9:c3:
                    c2:24:1b:94:0c:89:1a:db:7e:80:3b:1f:71:ba:e9:
                    44:36:24:f5:bd:eb:1d:9b:37:03:b5:9a:bd:20:0e:
                    90:62:2e:3c:f7:d3:20:45:6c:80:20:47:e8:a2:85:
                    80:ea:f1:d8:3a:9d:c0:78:b0:d9:4c:46:17:32:3a:
                    83:17:a8:44:78:68:8e:50:3a:92:25:1f:fd:5d:ce:
                    2c:61:ac:5e:83:20:fa:a5:fd:75:2e:a6:bc:3d:61:
                    4a:95:34:1f:9f:5e:fb:99:25:97:c5:56:56:f0:74:
                    cf:a0:df:8b:f7:cd:51:b1:fc:68:b2:47:3a:2b:66:
                    f3:42:07:72:ce:b6:7f:c4:45:1c:90:b2:6b:7b:f8:
                    e7:5b:26:a7:dc:91:a5:35:03:71:8a:10:4f:65:21:
                    84:82:8e:f8:2a:37:e2:1d:d4:77:fc:77:b9:a6:01:
                    b0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F4:D9:78:33:27:9F:11:C7:D8:CE:55:9F:70:7E:8D:95:9B:EB:09
            X509v3 Authority Key Identifier:
                keyid:B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Cube/3/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Cube/3/326130363a613030353a323035303a3a2f34342d3438203d3e20313531303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2050::/44

    Signature Algorithm: sha256WithRSAEncryption
         34:74:6c:12:28:a9:70:3b:fe:ac:91:31:4c:ef:f3:aa:93:6a:
         83:6b:05:e8:30:ea:59:df:b7:b1:da:c7:d6:8a:3d:87:29:13:
         0f:29:c3:da:c5:96:2c:96:a3:5b:59:dc:5d:83:da:86:db:2e:
         c7:e7:c3:58:7a:ca:4e:ea:15:da:0a:a5:bc:a7:7f:7e:21:0c:
         12:46:36:6f:e8:54:49:c7:55:f1:d7:e0:92:a5:39:e8:5a:e5:
         8e:30:6c:03:e8:ef:b9:6e:30:33:2a:48:30:e6:97:a2:f1:19:
         a5:75:a0:54:14:7e:2f:dc:96:7f:bb:87:80:48:a4:37:ef:d0:
         bb:a6:52:ea:af:cc:1a:66:d9:09:84:6c:cb:17:04:cc:a9:18:
         b5:8b:20:d1:8c:00:d8:46:55:9b:51:e8:8c:23:ec:67:6d:64:
         f1:c7:a0:5e:31:c6:5f:62:d7:a2:de:e6:97:40:12:bc:41:74:
         29:5f:7c:c5:32:35:ed:e4:58:7e:ba:99:12:8a:f3:eb:0b:57:
         83:73:c0:c7:99:a7:3b:8f:dc:7e:a3:57:89:69:d7:3c:b3:ec:
         11:43:7d:f6:9c:24:7b:e5:84:05:4b:6e:0e:60:29:cf:99:f7:
         75:87:4f:eb:8b:81:e6:c7:e9:ce:f4:26:31:ac:19:78:a1:92:
         bb:68:d3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:30 2023 by rpki-client on console-fra.rpki-client.org