Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Cube/3/326130363a613030353a323037303a3a2f34342d3438203d3e2030.roa
File:                     326130363a613030353a323037303a3a2f34342d3438203d3e2030.roa (raw, json)
Hash identifier:          nkEK4tF/RRpVldkrnE8eT7YlJy8U9w+ZtVBnReAidLU=
Subject key identifier:   03:5D:C9:8B:23:0D:AF:CF:85:BD:99:AA:44:01:1E:E9:80:DF:DF:22
Certificate issuer:       /CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
Certificate serial:       147F9225E8589F75076B7195226307902E6B5EE7
Authority key identifier: B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer
Subject info access:      rsync://rpki.co/repo/Cube/3/326130363a613030353a323037303a3a2f34342d3438203d3e2030.roa
Signing time:             Thu 10 Aug 2023 19:25:44 +0000
ROA not before:           Thu 10 Aug 2023 19:20:44 +0000
ROA not after:            Thu 08 Aug 2024 19:25:44 +0000
asID:                     0
IP address blocks:        2a06:a005:2070::/44 maxlen: 48

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 13:28:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7f:92:25:e8:58:9f:75:07:6b:71:95:22:63:07:90:2e:6b:5e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
        Validity
            Not Before: Aug 10 19:20:44 2023 GMT
            Not After : Aug  8 19:25:44 2024 GMT
        Subject: CN=035DC98B230DAFCF85BD99AA44011EE980DFDF22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:2d:6c:50:bc:f5:2e:e0:7f:f2:9c:8c:05:
                    f6:02:a8:fd:86:e9:b1:4f:02:1c:ba:27:2c:e7:b1:
                    b4:20:a3:2e:53:19:8e:f7:d8:57:36:79:f3:0c:c5:
                    d4:06:f9:e6:6c:13:a0:11:4d:3e:0b:82:c2:ed:02:
                    7a:b9:94:98:9f:43:e3:73:8b:41:1e:73:1f:b8:6b:
                    7e:57:3a:7d:62:d5:f6:45:b3:11:ce:b4:7f:e8:a7:
                    c2:d4:8b:ee:dd:25:29:c5:2b:23:dd:4a:ff:7a:62:
                    62:e7:f9:f7:3e:16:f5:19:00:d0:f5:51:ea:73:d7:
                    2c:ec:8e:b8:4d:fb:f0:69:ac:66:01:60:79:6e:b8:
                    9f:4e:8b:7d:27:b7:d7:fa:52:4c:6f:49:49:3a:c9:
                    88:c7:c5:d4:59:58:a9:f7:47:3d:ee:b6:a0:38:6e:
                    47:ec:78:5d:39:fe:87:72:17:d5:5b:cd:8a:85:f7:
                    d9:e9:d0:3f:68:4a:82:56:4e:bf:fe:ae:3b:7b:12:
                    d7:ee:01:63:64:59:58:54:cb:ca:eb:63:9e:d6:68:
                    9e:63:cb:8f:73:0f:fc:50:e6:16:65:b1:79:4b:e7:
                    4d:2a:dd:f3:e2:6e:0c:30:d9:01:a3:54:0d:20:fc:
                    a2:3a:a3:75:97:2a:6f:b4:31:f3:b8:dd:12:a3:9d:
                    9d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5D:C9:8B:23:0D:AF:CF:85:BD:99:AA:44:01:1E:E9:80:DF:DF:22
            X509v3 Authority Key Identifier:
                keyid:B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Cube/3/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Cube/3/326130363a613030353a323037303a3a2f34342d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2070::/44

    Signature Algorithm: sha256WithRSAEncryption
         67:25:7a:0a:50:fc:e8:cd:f3:eb:00:07:b0:d0:d0:8b:91:93:
         95:33:5f:51:2c:d9:c4:35:80:3c:e0:6f:72:ee:79:a2:e5:58:
         99:f3:8a:72:88:ca:7c:62:5c:96:ae:62:78:eb:8a:c3:05:ed:
         2f:22:8e:1f:c1:d0:af:65:b9:96:b0:21:68:eb:c9:43:b1:86:
         97:f6:d7:0d:40:aa:ed:b4:85:ec:f5:ba:d2:9a:7c:58:e0:a2:
         7f:7c:90:ba:f3:0e:20:f7:13:f4:d9:a2:fb:76:77:83:c2:51:
         73:2f:c2:55:55:db:6b:59:f1:5d:65:00:6e:3e:f7:df:3d:fc:
         68:bc:53:09:ab:a7:fa:6f:53:a5:ca:6d:e5:1a:13:3f:bc:58:
         7c:1f:29:18:13:35:5f:8f:7e:84:2e:4c:17:76:24:c9:6c:53:
         d7:41:61:44:17:64:f2:ef:ba:6b:fe:d5:58:ca:33:de:4a:bd:
         d0:9f:c9:b0:da:9f:df:7e:27:67:51:bf:16:75:33:e3:64:18:
         35:b4:e2:9a:1a:0c:12:be:c8:49:7c:6f:fd:dd:a3:4d:d0:91:
         96:5e:08:27:a1:dd:db:61:b0:80:33:ba:b5:4b:87:30:7b:c9:
         ce:a5:5c:c8:cb:a7:69:9b:d2:78:64:7d:60:73:81:43:f4:3b:
         0e:63:fd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----