Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Cube/3/326130363a613030353a323465303a3a2f34342d3438203d3e20323038363930.roa
File:                     326130363a613030353a323465303a3a2f34342d3438203d3e20323038363930.roa (raw, json)
Hash identifier:          GO3GUCRZEfXOV8FMPWYWMtRDvRcmSRtonMcYbzimz8U=
Subject key identifier:   91:18:48:05:8F:68:12:C6:CB:46:5C:CC:18:9C:1D:AD:E9:A7:69:AE
Certificate issuer:       /CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
Certificate serial:       662A13C9CDB6A9343A354291A374C413F4D2562E
Authority key identifier: B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer
Subject info access:      rsync://rpki.co/repo/Cube/3/326130363a613030353a323465303a3a2f34342d3438203d3e20323038363930.roa
Signing time:             Thu 27 Apr 2023 14:10:39 +0000
ROA not before:           Thu 27 Apr 2023 14:05:39 +0000
ROA not after:            Thu 25 Apr 2024 14:10:39 +0000
asID:                     208690
IP address blocks:        2a06:a005:24e0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:2a:13:c9:cd:b6:a9:34:3a:35:42:91:a3:74:c4:13:f4:d2:56:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
        Validity
            Not Before: Apr 27 14:05:39 2023 GMT
            Not After : Apr 25 14:10:39 2024 GMT
        Subject: CN=911848058F6812C6CB465CCC189C1DADE9A769AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:38:2b:61:57:69:b0:07:6c:04:a9:78:53:c6:
                    93:97:76:e1:c1:6a:06:f0:ca:46:a2:a0:65:35:71:
                    15:9e:34:82:56:3b:13:e8:8d:bf:d4:8d:28:b7:a8:
                    f4:8f:e1:d9:7c:0b:a0:1b:c8:52:f1:c8:17:8e:58:
                    9e:00:b1:06:9e:b0:0b:70:21:39:5b:47:bd:5f:00:
                    c6:fb:2b:bf:70:34:b6:04:aa:b7:2f:f9:22:30:b7:
                    58:c2:50:44:ca:88:6c:82:36:7c:b2:7c:65:dd:43:
                    35:10:6b:76:2c:33:3f:37:09:ff:aa:0d:fe:06:6b:
                    c5:cb:33:d0:16:0e:90:80:27:f4:13:9f:c0:03:2b:
                    13:9c:96:fe:d8:20:da:e1:75:1b:95:2b:59:e5:46:
                    f5:65:4c:25:95:fd:35:ba:24:84:66:ae:20:25:b3:
                    1b:c6:55:1d:e0:ea:ad:7a:0b:c6:f4:8f:18:05:df:
                    d8:4c:9a:17:58:9f:4f:ee:fd:25:65:5d:7f:6d:ee:
                    d7:05:79:1e:3a:9c:d1:b8:0d:6a:ae:ce:b1:16:16:
                    ba:0c:b9:e8:f2:4c:14:5a:2a:bb:40:ce:94:50:6f:
                    e1:87:34:b2:fd:24:94:bc:12:bb:1a:a2:f4:b6:6d:
                    82:53:ba:59:42:4b:5e:fa:90:f0:b5:70:d7:cd:18:
                    b6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:18:48:05:8F:68:12:C6:CB:46:5C:CC:18:9C:1D:AD:E9:A7:69:AE
            X509v3 Authority Key Identifier:
                keyid:B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Cube/3/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Cube/3/326130363a613030353a323465303a3a2f34342d3438203d3e20323038363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:24e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         01:6a:e2:62:77:3f:96:3a:04:41:c8:18:8b:62:91:53:3c:ef:
         d3:91:15:59:2f:d3:1d:46:7a:9b:b1:75:d8:3a:f2:23:ef:a6:
         ab:5b:68:cc:00:6c:15:a6:3d:0d:59:0e:4b:3e:43:74:78:f7:
         f8:cb:ec:91:b5:20:b6:21:d0:d2:ac:8e:79:be:c0:c0:9a:fd:
         56:81:18:f9:e3:56:f3:bb:4c:d7:c6:bd:8d:71:6d:f4:c4:60:
         4b:d1:bc:72:e8:cc:0f:dd:30:d3:7e:8f:64:24:2b:4f:48:29:
         77:26:8c:77:59:ea:85:f6:15:d9:0b:62:a5:66:15:21:3a:47:
         c2:de:39:a1:6a:8d:de:04:ee:92:7f:c6:59:34:3b:26:a8:d3:
         be:9a:8b:a3:25:18:43:c5:41:cd:5e:46:78:ff:ec:ff:41:fc:
         a9:8b:9c:26:cf:32:db:cf:73:bd:9a:b6:b5:c4:32:22:f1:2b:
         39:3b:49:66:d9:fe:08:05:e5:b9:87:81:d6:fb:e6:f5:45:55:
         90:14:89:1b:c0:ad:03:00:96:e3:7f:ad:51:c6:7e:4e:ef:f7:
         ed:b1:53:b2:58:f4:fb:3c:80:17:53:8f:42:13:ee:91:b4:cb:
         e7:9d:e8:04:45:c1:06:8d:01:19:57:d4:95:34:8e:14:11:70:
         4d:5a:8d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:30 2023 by rpki-client on console-fra.rpki-client.org