Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Cube/3/326130363a613030353a323037303a3a2f34342d3434203d3e20323038363930.roa
File:                     326130363a613030353a323037303a3a2f34342d3434203d3e20323038363930.roa (raw, json)
Hash identifier:          Ysa/C2N3c4OSvd4Ymr6zeHs1MBDxaBt21s2w4rRPJTk=
Subject key identifier:   01:A6:C4:58:A2:35:61:99:7C:32:FB:1A:B3:32:36:3D:2C:04:4B:01
Certificate issuer:       /CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
Certificate serial:       7CF7B3BDD58DEA536EC0C7650F09C5E8487F45D4
Authority key identifier: B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer
Subject info access:      rsync://rpki.co/repo/Cube/3/326130363a613030353a323037303a3a2f34342d3434203d3e20323038363930.roa
Signing time:             Fri 14 Apr 2023 01:21:18 +0000
ROA not before:           Fri 14 Apr 2023 01:16:18 +0000
ROA not after:            Fri 12 Apr 2024 01:21:18 +0000
asID:                     208690
IP address blocks:        2a06:a005:2070::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f7:b3:bd:d5:8d:ea:53:6e:c0:c7:65:0f:09:c5:e8:48:7f:45:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
        Validity
            Not Before: Apr 14 01:16:18 2023 GMT
            Not After : Apr 12 01:21:18 2024 GMT
        Subject: CN=01A6C458A23561997C32FB1AB332363D2C044B01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3f:aa:6e:cd:5f:e7:6a:74:ec:cd:74:59:9c:
                    22:e9:f3:2b:0a:77:14:28:9b:7d:d1:5e:6e:0c:eb:
                    3d:f1:79:e9:79:e0:e7:8f:e1:05:d7:cf:46:cd:bc:
                    28:37:29:51:25:45:b1:f6:bb:5e:83:4c:c5:c3:77:
                    f1:3e:2c:0b:0a:48:be:3a:7a:5d:8a:51:ee:fa:d7:
                    2c:cd:0b:08:f0:cb:77:44:44:ee:7d:89:be:eb:3f:
                    31:3e:68:32:6d:c1:aa:0a:f7:f6:ab:59:eb:0f:ba:
                    b7:fa:67:f3:1e:2e:86:a9:e1:32:e7:9a:88:34:08:
                    ca:f1:bc:9d:5e:20:f1:46:54:7f:b3:5b:67:ac:9b:
                    ac:f1:62:d1:85:71:fc:5d:91:6c:73:10:03:5a:c9:
                    08:76:9a:90:dd:88:e2:d9:db:93:40:d5:ff:f2:49:
                    cc:a4:df:23:99:b2:a7:ff:ae:90:38:05:4a:dc:75:
                    b7:24:d0:7f:f1:b3:1c:b3:e0:14:ba:f5:47:bb:88:
                    5e:b4:96:6f:3a:8b:8b:5f:29:55:21:f4:30:f2:8e:
                    4b:0f:b9:cc:8b:71:b2:76:84:f1:00:98:fb:f8:c7:
                    8f:d0:f0:74:b0:24:26:77:87:af:da:92:76:a3:15:
                    22:dd:34:f0:b4:88:26:65:fd:3d:1a:f7:ba:58:ab:
                    49:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A6:C4:58:A2:35:61:99:7C:32:FB:1A:B3:32:36:3D:2C:04:4B:01
            X509v3 Authority Key Identifier:
                keyid:B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Cube/3/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Cube/3/326130363a613030353a323037303a3a2f34342d3434203d3e20323038363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2070::/44

    Signature Algorithm: sha256WithRSAEncryption
         91:c0:c6:ad:fa:d2:00:19:5f:0a:1c:ec:c4:46:fb:d2:25:a2:
         50:44:7e:98:79:3d:33:ed:6b:86:33:cb:05:ed:0b:9f:60:a9:
         26:fb:bf:50:53:75:20:df:ff:59:fe:18:f6:38:01:44:c2:a5:
         1a:7e:12:f3:53:76:97:1b:ca:90:15:b6:86:a1:00:77:41:35:
         b9:6b:44:b3:7b:79:cd:6f:83:fd:cf:89:16:e0:fb:73:6b:32:
         97:72:74:3a:93:50:0b:4e:0e:9e:28:db:78:bc:a5:ef:6b:3e:
         1f:c2:96:80:57:2b:bd:7a:d7:8b:5f:0b:ca:e5:33:68:49:97:
         44:52:2c:1e:12:54:34:d9:ae:6e:80:e1:48:0f:19:85:e5:07:
         e0:35:51:26:a5:96:df:3e:75:b2:5f:e3:a7:d6:f0:f1:6a:9b:
         be:5c:34:79:45:13:9f:ea:cd:69:50:10:7c:a4:8f:d2:f4:d5:
         2e:8c:e7:13:7f:5d:86:0c:76:68:73:f1:ff:2d:1a:18:5d:c1:
         a6:a6:24:b8:41:dc:f5:eb:82:69:6a:f2:23:66:42:ba:4f:d8:
         d4:cc:eb:c5:b4:be:18:5b:07:73:37:33:4b:27:a2:57:13:94:
         e7:52:24:5c:1a:22:f9:9c:24:be:89:d3:2a:2c:39:39:1b:bd:
         b5:0c:f4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:25 2023 by rpki-client on console-ams.rpki-client.org