Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Cube/3/326130363a613030353a323036303a3a2f34332d3438203d3e20323038363930.roa
File:                     326130363a613030353a323036303a3a2f34332d3438203d3e20323038363930.roa (raw, json)
Hash identifier:          AThuqQk0cxNiO9WVLkANHNjlu9SHhPGvG83qoUDp110=
Subject key identifier:   DC:59:E9:7F:6C:7C:97:0B:BE:86:69:81:69:F2:8B:00:7A:A8:03:92
Certificate issuer:       /CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
Certificate serial:       1F043F63047EBDADBBB2FBCDC8B1CCB9EFAE18BC
Authority key identifier: B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer
Subject info access:      rsync://rpki.co/repo/Cube/3/326130363a613030353a323036303a3a2f34332d3438203d3e20323038363930.roa
Signing time:             Thu 27 Apr 2023 14:05:51 +0000
ROA not before:           Thu 27 Apr 2023 14:00:51 +0000
ROA not after:            Thu 25 Apr 2024 14:05:51 +0000
asID:                     208690
IP address blocks:        2a06:a005:2060::/43 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:04:3f:63:04:7e:bd:ad:bb:b2:fb:cd:c8:b1:cc:b9:ef:ae:18:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
        Validity
            Not Before: Apr 27 14:00:51 2023 GMT
            Not After : Apr 25 14:05:51 2024 GMT
        Subject: CN=DC59E97F6C7C970BBE86698169F28B007AA80392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d1:21:20:08:cf:11:0f:9a:5f:ac:5a:1d:8d:
                    55:00:27:82:27:1d:8b:6c:42:ae:e7:9f:7f:93:06:
                    ac:2d:51:6d:de:23:a9:7b:99:0a:10:6e:db:2f:8f:
                    3c:a7:83:b5:a9:91:2c:fa:9b:9b:07:b2:93:9e:64:
                    4b:59:4b:58:b5:03:c5:04:eb:dd:72:d6:bb:02:af:
                    30:d4:b2:1a:c6:09:69:1f:48:be:5a:bb:7f:8a:d8:
                    86:08:6a:fd:c0:81:e6:c0:4a:06:c0:90:b8:6b:fb:
                    3d:03:b7:19:de:3f:2a:4e:db:fc:bb:17:dc:88:5e:
                    10:58:e2:bc:da:d2:49:46:d9:84:ca:4d:0d:dc:9c:
                    e0:3d:41:ba:b5:21:2f:91:b0:3d:b8:58:1c:4d:25:
                    d7:6d:fe:28:03:11:a9:43:9a:0d:52:1c:9f:13:c3:
                    3f:85:0d:a5:4f:50:50:f3:ef:f3:84:fc:d8:bc:8d:
                    0a:d4:33:93:f5:ae:f5:80:17:59:d1:0f:01:17:7a:
                    33:09:53:db:98:cc:1b:cc:21:f8:9b:52:3b:16:cb:
                    84:6a:a7:db:18:7d:cf:3b:ad:e3:e5:7d:14:0b:eb:
                    78:80:f4:2a:95:4d:94:a1:7d:dc:86:ef:f1:33:cc:
                    56:63:6a:09:d3:4d:16:bc:0c:9a:7d:4c:5c:e8:c2:
                    d5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:59:E9:7F:6C:7C:97:0B:BE:86:69:81:69:F2:8B:00:7A:A8:03:92
            X509v3 Authority Key Identifier:
                keyid:B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Cube/3/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Cube/3/326130363a613030353a323036303a3a2f34332d3438203d3e20323038363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2060::/43

    Signature Algorithm: sha256WithRSAEncryption
         61:63:ee:72:85:f1:60:fe:5a:8a:7f:a4:85:5e:fd:81:8b:5b:
         1f:9e:70:7a:b1:9a:ac:ef:2d:e5:06:e6:df:f6:ff:3f:5b:3a:
         17:d4:6d:c8:ef:2d:e2:87:9f:2e:f7:b5:47:7a:1a:2d:5a:d5:
         80:0b:3e:34:63:54:6b:a9:a1:a2:7e:d8:cc:87:0a:45:4e:f5:
         5e:8d:96:18:b0:e9:e8:76:76:f0:22:33:10:09:63:ea:5f:d4:
         bb:3e:89:46:28:9d:95:fa:68:69:3c:e6:46:4b:a4:ad:d4:75:
         31:a9:5c:1c:c0:f0:a8:92:74:e2:d7:8c:7b:84:fd:f4:0c:cd:
         58:4d:fd:37:3d:2b:78:07:af:e5:c0:6d:a2:f6:71:27:84:ad:
         7e:e1:eb:1e:79:34:0e:fc:a3:ec:41:5a:d5:97:4b:80:58:b5:
         42:1e:ae:bd:39:bc:86:be:ed:f9:1d:9b:13:68:4b:c9:ff:3f:
         14:5d:75:da:0c:60:c9:70:57:61:11:3a:e9:6b:13:d5:11:20:
         32:7b:2a:91:62:5e:f3:be:b2:c5:2a:1f:b8:58:06:eb:bf:62:
         bf:0e:93:15:e9:00:de:34:92:ab:46:78:c0:aa:46:f8:46:49:
         2a:9f:96:b8:e4:28:6c:18:09:8b:e6:4d:33:aa:32:11:63:38:
         ad:2d:74:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----