Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Cube/3/326130363a613030353a323465303a3a2f34342d3434203d3e20323038363930.roa
File:                     326130363a613030353a323465303a3a2f34342d3434203d3e20323038363930.roa (raw, json)
Hash identifier:          Y0/AKYwDAnv6l2Bfp6MZCVYZWoSqrVVBErY127Ubs6g=
Subject key identifier:   08:59:D2:C7:12:9F:48:60:40:F7:B3:91:CD:97:B5:BF:50:D4:4C:CF
Certificate issuer:       /CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
Certificate serial:       64445A77CBF58F1249B71D077C6EFAB5D3AB8AF1
Authority key identifier: B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer
Subject info access:      rsync://rpki.co/repo/Cube/3/326130363a613030353a323465303a3a2f34342d3434203d3e20323038363930.roa
Signing time:             Fri 14 Apr 2023 01:21:18 +0000
ROA not before:           Fri 14 Apr 2023 01:16:18 +0000
ROA not after:            Fri 12 Apr 2024 01:21:18 +0000
asID:                     208690
IP address blocks:        2a06:a005:24e0::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:44:5a:77:cb:f5:8f:12:49:b7:1d:07:7c:6e:fa:b5:d3:ab:8a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
        Validity
            Not Before: Apr 14 01:16:18 2023 GMT
            Not After : Apr 12 01:21:18 2024 GMT
        Subject: CN=0859D2C7129F486040F7B391CD97B5BF50D44CCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:98:d8:8c:e6:a5:16:36:5e:d6:70:df:92:79:
                    b7:d8:dc:18:c8:33:8d:f6:47:46:d7:63:0d:ce:71:
                    58:a5:82:30:e1:65:43:46:02:bc:1b:28:64:56:e4:
                    9c:08:8f:2a:6e:bf:31:d1:ad:ff:9a:21:4a:3e:8f:
                    05:2d:a4:9f:75:41:6f:75:9d:dd:7a:7b:47:82:4f:
                    af:d9:10:e0:b5:f6:29:61:4b:0c:7f:de:94:1a:5d:
                    29:03:90:01:aa:e6:a3:7f:d8:86:fa:1e:32:33:bf:
                    bd:61:58:23:92:08:bf:a1:ba:12:b0:3d:48:bb:ee:
                    b6:b9:03:5a:5d:51:39:40:1c:a1:95:26:cb:01:8b:
                    34:38:10:ad:e0:cb:8d:ff:2c:59:61:a9:0a:e5:75:
                    4a:59:cf:07:4c:1b:2a:e4:f1:ec:09:67:ee:35:77:
                    bb:eb:4c:e2:14:c9:95:4e:ef:f3:50:90:a1:a7:45:
                    a0:ce:1b:07:73:78:51:f6:8e:d9:c4:a7:b4:55:d0:
                    18:db:b1:ac:ac:4a:97:5a:5a:4b:ea:7e:7b:50:3c:
                    29:3f:99:f4:17:f4:42:96:3a:2c:6c:f1:39:4e:0a:
                    25:b5:39:51:41:49:72:7d:99:29:93:47:62:78:67:
                    6b:10:8b:c7:32:a0:51:8a:43:54:63:43:6c:63:3c:
                    de:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:59:D2:C7:12:9F:48:60:40:F7:B3:91:CD:97:B5:BF:50:D4:4C:CF
            X509v3 Authority Key Identifier:
                keyid:B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Cube/3/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Cube/3/326130363a613030353a323465303a3a2f34342d3434203d3e20323038363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:24e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         ca:b3:39:77:16:d3:85:fa:7d:c5:f1:44:9f:d4:a4:37:86:fe:
         2a:4c:c3:4a:7f:b5:1d:9b:38:1a:33:5f:b6:b5:00:90:c1:41:
         55:d9:da:5b:08:1f:6a:13:2c:a9:d5:ca:ce:8c:8a:26:88:41:
         81:0f:39:77:6f:cc:f3:08:37:67:dc:f6:76:44:64:f3:eb:c5:
         e2:6a:ab:b5:e3:d4:77:a8:ed:2b:c2:b0:06:b6:0f:04:3e:68:
         64:8f:02:56:2b:29:3c:0c:29:46:8a:32:e7:7c:c3:ce:77:ad:
         05:fb:21:25:0a:73:e7:53:ba:a5:75:16:93:aa:c1:76:65:4a:
         68:3a:a6:df:16:62:16:d7:6d:9f:75:d0:d3:8a:b3:c4:af:0f:
         38:48:43:02:36:16:77:15:9e:96:0e:24:b0:f6:f2:0e:33:7e:
         e5:08:5e:cf:ad:9c:a1:ad:af:ba:ea:1e:94:1b:ff:f0:99:c2:
         70:c5:65:91:cb:35:3f:7b:0a:25:a2:72:0f:0a:4f:d2:ff:bb:
         fa:4f:ac:15:7a:e8:ed:3b:47:d9:74:80:40:e7:fa:3e:2f:85:
         67:c7:82:1f:48:66:c6:4e:3c:eb:29:f7:3e:31:53:9d:ff:8a:
         64:fe:c8:f1:09:68:ff:aa:d1:2f:dd:ac:a6:74:50:ad:e4:be:
         09:93:8e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:25 2023 by rpki-client on console-ams.rpki-client.org