Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Mlgt/2/326130353a646663373a393430303a3a2f33392d3339203d3e20323033333233.roa
File:                     326130353a646663373a393430303a3a2f33392d3339203d3e20323033333233.roa (raw, json)
Hash identifier:          uExjjLjql1MvlUHum6Objv+RZe3B5L6SVmdeEgjBY2I=
Subject key identifier:   DF:FD:0B:FF:3F:BB:1B:C6:56:38:B3:97:5A:EF:E6:B8:42:28:7C:8F
Certificate issuer:       /CN=3E0073E2C5B2A8D67388F2699EAE646AB0043B13
Certificate serial:       129CD95A212A9F28B1391413152E2FCAE3C2E258
Authority key identifier: 3E:00:73:E2:C5:B2:A8:D6:73:88:F2:69:9E:AE:64:6A:B0:04:3B:13
Authority info access:    rsync://rpki.co/repo/AS205432/0/3E0073E2C5B2A8D67388F2699EAE646AB0043B13.cer
Subject info access:      rsync://rpki.co/repo/Mlgt/2/326130353a646663373a393430303a3a2f33392d3339203d3e20323033333233.roa
Signing time:             Sat 22 Apr 2023 11:25:03 +0000
ROA not before:           Sat 22 Apr 2023 11:20:03 +0000
ROA not after:            Sat 20 Apr 2024 11:25:03 +0000
asID:                     203323
IP address blocks:        2a05:dfc7:9400::/39 maxlen: 39

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:9c:d9:5a:21:2a:9f:28:b1:39:14:13:15:2e:2f:ca:e3:c2:e2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0073E2C5B2A8D67388F2699EAE646AB0043B13
        Validity
            Not Before: Apr 22 11:20:03 2023 GMT
            Not After : Apr 20 11:25:03 2024 GMT
        Subject: CN=DFFD0BFF3FBB1BC65638B3975AEFE6B842287C8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0a:37:dd:5c:d1:15:1e:69:d9:57:82:7b:47:
                    8f:31:d7:9a:f3:bb:7f:d3:a6:1d:fd:c6:fe:5e:06:
                    ac:94:48:e0:f2:c5:a2:19:39:a6:52:dc:b8:93:bd:
                    52:0d:e0:d6:16:da:b5:d0:41:21:30:fe:d9:f5:dc:
                    77:3c:d1:2f:a4:b3:6f:ce:13:e2:53:5f:d3:31:91:
                    d2:37:0c:6a:ba:73:35:91:e0:04:d9:81:aa:4c:4e:
                    9a:2e:51:9a:67:ea:a7:26:3f:0f:56:8f:8d:21:28:
                    3b:93:86:b9:03:73:78:68:da:a9:be:e1:ba:78:fe:
                    8f:dd:a9:d3:39:86:1e:bf:59:e0:f8:be:85:25:cd:
                    d2:83:b6:b0:e3:4d:4d:bf:34:e6:44:1f:5c:b9:33:
                    e5:d7:12:4d:b2:2f:b1:90:3e:ca:cc:e0:c8:97:4d:
                    8b:c9:5c:86:73:f5:77:61:24:58:4a:de:53:dd:96:
                    ad:2f:86:5d:ea:3d:3f:00:e8:29:fa:d4:c1:87:92:
                    60:2d:66:14:1a:45:3b:60:8c:5c:ee:d3:8c:ff:e9:
                    d9:3f:af:69:53:47:a2:eb:2b:5c:7d:55:10:86:19:
                    3d:83:b4:69:91:76:5a:5d:a3:f5:55:99:73:cb:87:
                    b5:cd:9d:bf:06:58:86:dc:12:66:c5:18:83:4a:dc:
                    a9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FD:0B:FF:3F:BB:1B:C6:56:38:B3:97:5A:EF:E6:B8:42:28:7C:8F
            X509v3 Authority Key Identifier:
                keyid:3E:00:73:E2:C5:B2:A8:D6:73:88:F2:69:9E:AE:64:6A:B0:04:3B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Mlgt/2/3E0073E2C5B2A8D67388F2699EAE646AB0043B13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/3E0073E2C5B2A8D67388F2699EAE646AB0043B13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Mlgt/2/326130353a646663373a393430303a3a2f33392d3339203d3e20323033333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:9400::/39

    Signature Algorithm: sha256WithRSAEncryption
         6f:b6:a2:64:e0:4b:82:e4:af:1f:8b:2f:84:43:6b:45:d3:19:
         38:00:b8:2d:ec:dc:42:99:2e:3a:70:15:45:82:88:a6:fc:72:
         90:b2:52:35:f5:82:f5:1f:f6:53:ba:43:6d:f2:65:0d:02:c6:
         8c:90:13:c4:b7:a8:cf:29:37:10:18:8b:0c:3f:8d:18:26:43:
         6a:70:cf:0d:78:76:b5:dd:00:49:cf:f3:46:45:34:fd:1b:48:
         d8:b2:4d:16:05:e1:be:36:d9:c1:a9:9b:67:d3:02:c0:d2:9b:
         1c:5a:29:06:b2:10:ad:7a:56:bc:18:58:38:ef:cb:72:64:fd:
         07:6a:5d:2b:39:94:92:27:e0:c1:5f:da:4c:60:97:8f:6f:96:
         06:90:88:09:84:d9:73:fd:5e:9b:fe:f9:38:8c:d1:9d:fd:91:
         49:b4:c1:cb:1b:cd:7a:12:08:aa:3c:bd:be:0f:77:b3:35:62:
         8a:6b:26:7c:e4:b7:c1:e5:54:57:50:87:15:2c:2f:88:8b:fc:
         4d:65:2b:c9:c0:14:e0:70:c8:ea:4d:8b:db:04:ad:af:5e:a3:
         9b:47:c5:e0:8b:8a:ad:00:03:85:ac:72:46:fd:e1:b9:21:ac:
         a8:1a:2d:95:f9:cc:49:1f:f6:69:34:86:3d:b6:8c:6b:65:c4:
         e0:54:32:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 12 09:53:14 2023 by rpki-client on console-ams.rpki-client.org