Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Mlgt/2/326130363a313238373a623230303a3a2f33392d3339203d3e20323034353038.roa
File:                     326130363a313238373a623230303a3a2f33392d3339203d3e20323034353038.roa (raw, json)
Hash identifier:          AVZK44Kewqko3s3RnZruRnJ3VWfHsHkhYeWUIQ7GVps=
Subject key identifier:   60:41:12:DA:93:C3:7B:A7:C2:70:79:D4:01:41:D7:1B:BB:EC:BD:95
Certificate issuer:       /CN=3E0073E2C5B2A8D67388F2699EAE646AB0043B13
Certificate serial:       647041DD27963F694826D054710A00AA26429234
Authority key identifier: 3E:00:73:E2:C5:B2:A8:D6:73:88:F2:69:9E:AE:64:6A:B0:04:3B:13
Authority info access:    rsync://rpki.co/repo/AS205432/0/3E0073E2C5B2A8D67388F2699EAE646AB0043B13.cer
Subject info access:      rsync://rpki.co/repo/Mlgt/2/326130363a313238373a623230303a3a2f33392d3339203d3e20323034353038.roa
Signing time:             Sat 22 Apr 2023 11:26:04 +0000
ROA not before:           Sat 22 Apr 2023 11:21:04 +0000
ROA not after:            Sat 20 Apr 2024 11:26:04 +0000
asID:                     204508
IP address blocks:        2a06:1287:b200::/39 maxlen: 39

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:70:41:dd:27:96:3f:69:48:26:d0:54:71:0a:00:aa:26:42:92:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0073E2C5B2A8D67388F2699EAE646AB0043B13
        Validity
            Not Before: Apr 22 11:21:04 2023 GMT
            Not After : Apr 20 11:26:04 2024 GMT
        Subject: CN=604112DA93C37BA7C27079D40141D71BBBECBD95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c6:48:b9:18:07:71:46:61:c1:65:82:c8:80:
                    f9:d0:75:41:cf:0b:01:32:63:ce:4b:73:a5:5a:72:
                    eb:72:23:82:54:3f:ae:bc:c8:32:6f:dc:75:c0:6b:
                    fb:b9:c9:fc:34:e7:d8:46:6d:a8:41:8c:79:b9:ec:
                    f6:2a:31:f6:d9:1d:71:ae:35:85:79:c7:5d:f9:bd:
                    1d:15:66:16:9c:99:ab:37:96:73:58:20:ae:27:42:
                    ba:58:de:18:51:a0:0d:dd:42:70:97:9b:67:88:ef:
                    bf:aa:2a:8d:88:e3:91:74:78:33:be:fe:44:0b:c6:
                    0a:7f:f6:42:ac:61:62:b9:4b:02:52:18:5a:c0:e7:
                    80:41:ff:a3:1e:e5:58:37:9a:21:31:ee:d9:d1:7a:
                    bc:a3:8d:c6:ee:4d:c9:43:38:bf:8e:d2:2a:c7:81:
                    aa:ad:6f:6e:8e:18:a6:c4:56:95:3e:f9:ad:0b:f2:
                    49:4b:69:47:b9:a6:68:52:b9:00:64:c9:02:12:1b:
                    58:b1:bd:4a:0e:27:ab:c5:a2:48:66:bf:1c:e2:35:
                    45:89:4f:39:3a:98:eb:97:2d:05:80:83:81:9d:4e:
                    82:8d:d8:e7:0c:75:96:d6:f9:3a:ef:03:b6:ee:08:
                    cd:3a:5c:4d:ec:ab:1c:43:eb:d3:66:52:6f:e5:78:
                    dd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:41:12:DA:93:C3:7B:A7:C2:70:79:D4:01:41:D7:1B:BB:EC:BD:95
            X509v3 Authority Key Identifier:
                keyid:3E:00:73:E2:C5:B2:A8:D6:73:88:F2:69:9E:AE:64:6A:B0:04:3B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Mlgt/2/3E0073E2C5B2A8D67388F2699EAE646AB0043B13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/3E0073E2C5B2A8D67388F2699EAE646AB0043B13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Mlgt/2/326130363a313238373a623230303a3a2f33392d3339203d3e20323034353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:b200::/39

    Signature Algorithm: sha256WithRSAEncryption
         3d:0a:e2:d6:37:17:8d:7a:c1:9a:52:b5:f2:4a:e1:91:10:e3:
         e5:aa:c3:bc:aa:ed:d6:47:b7:cf:cf:57:ad:6e:1c:ab:23:ce:
         a5:49:59:b7:27:f1:11:d5:84:6b:5f:29:21:c3:c0:b7:3e:bd:
         25:e6:10:b6:33:07:20:c6:4f:bf:63:26:cc:4e:b1:5f:e7:50:
         cc:f7:87:75:b8:b2:8a:8d:77:be:9e:1a:8b:5b:82:ab:87:52:
         00:07:ee:8d:14:bc:e8:66:4b:32:01:e8:81:1e:22:92:e5:ac:
         7b:1e:79:04:fc:11:f9:c2:fa:b9:01:a1:58:65:94:74:ef:04:
         b0:2a:67:57:73:fc:ab:2b:8b:1a:ed:dc:d9:a2:75:77:60:b3:
         fc:f8:5e:6e:a2:d8:df:32:29:4c:c6:cd:2c:57:ec:46:5e:0f:
         28:26:60:4c:df:70:69:e2:95:09:51:1e:d4:73:97:db:8a:e7:
         b4:8e:62:d9:2d:b6:0e:ff:3f:e2:46:2e:df:7a:77:66:4f:59:
         bd:5d:89:3c:30:af:4b:2b:db:ad:f7:ee:c6:58:5c:f8:fb:9d:
         ac:ca:87:38:4d:92:e2:b0:de:5b:b1:96:4b:3c:4e:4a:57:36:
         d5:7e:09:43:b4:c2:d8:b8:e4:7a:ec:e7:c4:a7:c3:38:5c:98:
         31:ca:bb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----