Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Cube/3/326130363a613030353a323038303a3a2f34342d3434203d3e20323038363930.roa
File:                     326130363a613030353a323038303a3a2f34342d3434203d3e20323038363930.roa (raw, json)
Hash identifier:          fRbmLLC2vdgFbGlE5qgF8Jb5oAJUZuBCa44nMdtTESU=
Subject key identifier:   B9:FA:B8:8D:BA:3A:63:AB:12:F4:BB:EE:B0:EA:B6:27:F4:A8:E6:97
Certificate issuer:       /CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
Certificate serial:       3E3257B221E22E87EA7F438B9E820C6B3EE84BEC
Authority key identifier: B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer
Subject info access:      rsync://rpki.co/repo/Cube/3/326130363a613030353a323038303a3a2f34342d3434203d3e20323038363930.roa
Signing time:             Thu 10 Aug 2023 19:26:06 +0000
ROA not before:           Thu 10 Aug 2023 19:21:06 +0000
ROA not after:            Thu 08 Aug 2024 19:26:06 +0000
asID:                     208690
IP address blocks:        2a06:a005:2080::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:32:57:b2:21:e2:2e:87:ea:7f:43:8b:9e:82:0c:6b:3e:e8:4b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
        Validity
            Not Before: Aug 10 19:21:06 2023 GMT
            Not After : Aug  8 19:26:06 2024 GMT
        Subject: CN=B9FAB88DBA3A63AB12F4BBEEB0EAB627F4A8E697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1a:60:60:02:5b:2b:62:50:0c:53:ee:a1:5a:
                    46:03:d4:2f:19:c0:7a:b0:72:9b:e4:96:22:7a:fe:
                    81:19:b4:17:8a:b6:4e:61:ef:af:31:fb:2b:fa:61:
                    80:5a:35:bd:4d:14:d4:d6:90:4d:4d:db:b4:f3:da:
                    1c:71:49:fc:3b:01:0c:02:13:e5:15:fe:1d:d5:9e:
                    37:2a:ae:5c:1e:4a:99:33:7a:56:df:38:db:27:05:
                    cd:aa:4c:fa:10:f7:de:dc:fb:26:ae:2d:da:02:ab:
                    ac:66:77:d3:54:e9:10:ed:0d:9e:29:ba:cb:30:ea:
                    a0:e9:1b:86:f5:8c:86:8f:b2:99:9b:77:d2:94:9e:
                    8e:f2:20:fd:e8:27:59:75:42:c8:ba:1d:ae:04:57:
                    17:d6:1d:de:f3:d4:11:06:0e:f7:88:e6:a6:da:84:
                    b7:11:50:d4:7b:e0:9a:5e:78:dd:52:de:e1:0c:64:
                    d9:f2:e5:f6:9a:4f:e7:3f:53:4b:8d:cc:a5:bf:39:
                    57:22:c5:1d:f9:c6:31:b6:ba:3d:28:17:24:67:20:
                    d7:80:cd:93:0d:95:4f:4b:1e:07:19:79:bb:68:e3:
                    da:9b:dc:db:c8:c2:3e:7a:00:ff:62:d6:84:d7:8b:
                    f9:0b:63:1f:27:78:16:c2:14:29:da:31:db:40:02:
                    7d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FA:B8:8D:BA:3A:63:AB:12:F4:BB:EE:B0:EA:B6:27:F4:A8:E6:97
            X509v3 Authority Key Identifier:
                keyid:B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Cube/3/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Cube/3/326130363a613030353a323038303a3a2f34342d3434203d3e20323038363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2080::/44

    Signature Algorithm: sha256WithRSAEncryption
         bd:e3:e2:2a:e8:a2:ee:89:a0:2e:87:b3:3d:75:3f:cc:07:e5:
         d1:3e:63:4c:16:96:b7:ed:cb:dc:d8:26:35:59:2d:22:ae:6e:
         3b:d5:46:bf:37:b3:af:ba:ac:56:02:1d:f1:04:e2:bc:56:e0:
         a7:ff:b6:bc:02:83:55:25:8f:63:7e:5a:35:12:28:b5:c7:d1:
         58:ca:6a:0f:69:c8:fd:4a:b8:9b:e5:a0:f1:cf:3f:32:b3:4d:
         ad:6f:60:39:5e:92:f3:8f:31:c6:7e:d5:a0:d3:61:a9:37:1a:
         6c:b6:b1:90:eb:63:cb:3d:51:cd:79:d8:ab:60:dc:3a:1d:f2:
         87:fd:7f:d4:00:5c:a4:74:ea:11:fe:66:ea:ab:55:43:34:6e:
         21:19:96:ca:db:14:3f:a5:4e:6e:e4:3f:3f:e3:f7:01:67:8a:
         40:e1:bf:f0:57:87:28:4e:ed:95:78:96:b3:de:f4:5c:52:a0:
         83:4d:6c:28:cd:5e:ef:36:6a:81:7c:1a:a3:a7:12:31:0d:cd:
         90:ae:06:b4:50:a4:75:98:6b:d6:3a:f4:72:4b:1f:5b:3f:0b:
         44:59:4d:8a:b6:4a:5c:76:48:b5:68:d6:34:3a:19:f7:18:fd:
         55:80:30:39:b3:e6:c6:54:6a:bf:33:f9:aa:41:95:8b:9a:d6:
         11:97:8f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----