Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Cube/3/326130363a613030353a323038303a3a2f34382d3438203d3e20323038363930.roa
File:                     326130363a613030353a323038303a3a2f34382d3438203d3e20323038363930.roa (raw, json)
Hash identifier:          jyceIBSw5YQM/qIJKKmJp/FiBxNL5huvkdJPxr1QvLA=
Subject key identifier:   F1:7D:52:07:1E:21:06:D8:D4:22:F1:6D:6A:C4:0D:A1:5F:1C:1D:19
Certificate issuer:       /CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
Certificate serial:       70F1FB0B6409FECDE020357868DB9F32EA451D8D
Authority key identifier: B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer
Subject info access:      rsync://rpki.co/repo/Cube/3/326130363a613030353a323038303a3a2f34382d3438203d3e20323038363930.roa
Signing time:             Thu 27 Apr 2023 12:52:22 +0000
ROA not before:           Thu 27 Apr 2023 12:47:22 +0000
ROA not after:            Thu 25 Apr 2024 12:52:22 +0000
asID:                     208690
IP address blocks:        2a06:a005:2080::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f1:fb:0b:64:09:fe:cd:e0:20:35:78:68:db:9f:32:ea:45:1d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
        Validity
            Not Before: Apr 27 12:47:22 2023 GMT
            Not After : Apr 25 12:52:22 2024 GMT
        Subject: CN=F17D52071E2106D8D422F16D6AC40DA15F1C1D19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2d:31:50:5e:ec:77:55:be:28:0a:64:c5:da:
                    78:93:95:b3:df:78:d3:98:fd:9c:b2:e9:f2:38:c9:
                    f2:fe:50:8d:a1:66:7b:21:e4:3b:a2:aa:2c:04:5e:
                    90:83:2e:d7:58:2f:d7:cb:14:0c:81:2d:51:d3:d2:
                    86:6d:58:70:6c:8c:8c:8a:5c:6b:35:9a:8b:9a:4c:
                    09:5d:3b:59:42:56:a2:db:90:21:91:eb:9e:6c:24:
                    b2:62:66:31:a4:5f:8b:c8:9e:74:68:b2:4c:2b:8d:
                    1f:dd:0a:6d:00:1a:d6:a4:fc:55:94:a1:6e:f1:fd:
                    24:30:3a:d4:cb:68:27:b8:db:d2:ec:07:7b:99:92:
                    e1:7e:81:c6:6f:a0:61:ef:a4:a7:f4:88:03:7d:16:
                    97:61:ca:14:4b:2c:fc:65:82:e0:65:9c:36:91:81:
                    9c:13:42:31:64:dd:cb:e6:b9:73:a2:59:a9:94:ef:
                    05:b7:80:16:77:a0:d9:f2:63:6f:ba:48:4d:c3:49:
                    17:9b:7f:e9:26:57:6d:1e:4b:3f:48:79:86:d0:95:
                    a5:4e:7b:14:ee:23:cd:2b:35:69:88:2b:02:f6:6b:
                    a7:96:88:8a:12:1b:42:af:fb:2a:c4:dd:40:e5:8e:
                    2f:1e:51:68:00:38:a7:4d:a6:f2:92:9f:df:18:a3:
                    ca:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7D:52:07:1E:21:06:D8:D4:22:F1:6D:6A:C4:0D:A1:5F:1C:1D:19
            X509v3 Authority Key Identifier:
                keyid:B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Cube/3/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Cube/3/326130363a613030353a323038303a3a2f34382d3438203d3e20323038363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2080::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:09:d7:cd:90:26:63:8f:34:2d:c8:36:a2:34:c8:4b:d8:f3:
         ba:ac:35:ae:c2:d7:03:41:83:c7:f8:52:cb:4a:77:6d:54:b8:
         95:ad:d1:f8:00:67:0c:97:37:8a:e2:51:6f:f9:85:bd:14:d6:
         6d:cd:5b:8c:67:af:b7:f0:85:1e:2d:37:e5:2f:fe:3c:78:75:
         d4:e7:85:f9:8f:62:24:78:14:8d:ab:15:59:79:21:20:fe:4c:
         50:d3:7d:bd:d6:4b:61:00:c0:83:a1:3c:16:76:54:17:f6:bb:
         b7:1d:54:3f:fb:1d:f6:d2:a1:3d:ab:fc:10:95:29:bf:04:bc:
         bb:63:b0:c1:dc:e4:50:b4:cc:1f:97:f7:e2:54:1a:52:7e:12:
         fb:33:72:e7:72:fa:4f:a2:3e:79:3f:2f:ff:dc:06:96:69:66:
         eb:7b:67:4e:2c:cd:9a:5d:51:76:bb:f7:d8:f4:7e:8e:0c:8e:
         e7:27:7f:af:56:cb:cd:fc:58:2a:c9:84:3d:4e:7a:7f:4b:10:
         12:cf:9a:38:83:e3:2f:c6:76:20:d7:91:9b:96:c4:b0:ba:03:
         27:bd:0c:43:cb:4c:c1:8c:c7:b2:c0:69:13:2c:2d:c5:0e:65:
         cf:a0:15:76:57:08:33:3d:3e:4c:18:a2:12:e0:1e:0c:c7:38:
         e7:57:bc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:30 2023 by rpki-client on console-fra.rpki-client.org