Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Cube/3/326130363a613030353a323036303a3a2f34332d3433203d3e2030.roa
File:                     326130363a613030353a323036303a3a2f34332d3433203d3e2030.roa (raw, json)
Hash identifier:          N3zqh64GsBCD2wJAgeJQRAjv6IEatvBNtuZZ3cFahto=
Subject key identifier:   6B:B3:B7:DF:21:03:E0:8F:9A:A6:94:9E:02:08:35:F2:9E:94:D9:BE
Certificate issuer:       /CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
Certificate serial:       4DB3B76AF427A4AB1D02A9BA13863D1BA6CD42C2
Authority key identifier: B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer
Subject info access:      rsync://rpki.co/repo/Cube/3/326130363a613030353a323036303a3a2f34332d3433203d3e2030.roa
Signing time:             Tue 22 Aug 2023 11:52:27 +0000
ROA not before:           Tue 22 Aug 2023 11:47:27 +0000
ROA not after:            Tue 20 Aug 2024 11:52:27 +0000
asID:                     0
IP address blocks:        2a06:a005:2060::/43 maxlen: 43

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 13:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b3:b7:6a:f4:27:a4:ab:1d:02:a9:ba:13:86:3d:1b:a6:cd:42:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
        Validity
            Not Before: Aug 22 11:47:27 2023 GMT
            Not After : Aug 20 11:52:27 2024 GMT
        Subject: CN=6BB3B7DF2103E08F9AA6949E020835F29E94D9BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:cc:ee:1d:a0:db:78:b0:1b:64:07:bb:94:f4:
                    4b:23:d6:2a:b2:0a:2a:6a:97:de:38:58:6e:61:36:
                    76:04:cb:f2:d4:f3:d7:28:2f:bf:69:30:9f:21:df:
                    5b:f2:4c:65:b6:45:3a:e5:44:12:96:b0:4c:fb:e1:
                    e8:8b:f9:64:3d:94:4f:32:c5:77:ad:f1:cd:d6:57:
                    52:15:77:0d:a0:c4:64:d8:a8:fd:b6:7c:19:c3:80:
                    79:03:bc:12:85:52:d1:13:e9:74:6a:d7:32:d8:73:
                    96:73:80:f5:f4:a8:cc:64:66:5b:71:ff:8e:c4:e6:
                    5e:b6:92:c8:98:9a:9c:59:02:55:79:0a:13:ef:3a:
                    fe:16:19:ad:d4:5b:db:99:be:ba:ef:80:4e:5c:8b:
                    83:b0:90:4f:b3:80:a2:30:29:0d:52:1e:09:18:7b:
                    a0:77:c8:b8:a9:de:45:60:81:3e:6a:ca:07:0e:5b:
                    49:57:2e:8e:1c:28:25:88:a4:92:68:94:4e:99:ac:
                    21:cf:ec:40:71:11:9b:1a:34:c0:d1:5c:cc:85:1d:
                    f8:3a:7f:5c:76:fc:db:86:37:ef:c0:20:98:d9:a1:
                    f7:d4:8f:74:b2:d3:b7:04:d8:71:e2:c4:57:f6:52:
                    c0:08:69:95:97:fc:0e:cb:b6:44:98:a2:e5:8d:2a:
                    60:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B3:B7:DF:21:03:E0:8F:9A:A6:94:9E:02:08:35:F2:9E:94:D9:BE
            X509v3 Authority Key Identifier:
                keyid:B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Cube/3/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Cube/3/326130363a613030353a323036303a3a2f34332d3433203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2060::/43

    Signature Algorithm: sha256WithRSAEncryption
         79:8c:42:80:6c:0b:a7:25:04:03:a5:f9:7a:b0:17:a2:d5:b9:
         fa:e2:46:b4:9c:1a:46:1c:8e:29:02:66:70:d0:e7:75:e5:aa:
         34:2b:16:ea:5c:f0:68:01:a2:c9:67:bf:be:05:14:67:b0:59:
         2b:d9:85:b2:18:57:75:21:c8:f6:24:1a:a3:5a:53:3a:ac:9f:
         27:5c:d3:cb:c4:15:14:b4:ba:8a:bb:cb:6a:44:89:11:95:63:
         a3:1b:fc:50:84:e3:d0:38:ab:f7:f5:2b:2d:ec:1e:e3:d0:9d:
         91:f5:40:87:e6:23:5a:2a:75:a6:1e:51:2e:b9:c0:96:92:81:
         ad:d5:a3:fa:30:19:cd:89:48:a1:ca:f5:8c:26:22:57:be:a1:
         83:2c:40:26:e6:77:b9:db:85:0b:b9:92:94:ab:74:17:70:4e:
         b0:e5:97:fb:17:46:5f:8d:45:20:db:40:e4:1d:e6:ad:f9:08:
         02:ef:21:b0:cf:03:98:bb:e2:ad:be:02:d0:17:63:ea:48:08:
         fa:dd:70:15:bf:95:bf:a4:19:62:d8:b2:eb:ba:54:c3:b9:98:
         ec:36:b3:a4:5b:37:24:bd:58:0c:f9:60:49:b4:9a:ad:c0:99:
         73:7b:59:33:3a:4d:90:a8:f8:0c:87:cd:37:95:68:ae:ca:73:
         47:41:1c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----