Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Simple/1/326131323a646434373a663230303a3a2f34302d3430203d3e20313531313838.roa
File:                     326131323a646434373a663230303a3a2f34302d3430203d3e20313531313838.roa (raw, json)
Hash identifier:          AjbmXZf9cKqMaV3QcDMM7nR8v3dmzJn8T5B02oL4vmI=
Subject key identifier:   71:3A:93:F0:73:3A:5A:81:25:FB:E9:04:68:DC:74:F1:15:57:D2:89
Certificate issuer:       /CN=40C513034911811188EE6887BB01091E1FE7EE0D
Certificate serial:       25C197AB1E0E21BD566DF4C5D13539B6D9144AB5
Authority key identifier: 40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
Authority info access:    rsync://rpki.co/repo/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
Subject info access:      rsync://rpki.co/repo/Simple/1/326131323a646434373a663230303a3a2f34302d3430203d3e20313531313838.roa
Signing time:             Mon 24 Apr 2023 05:16:32 +0000
ROA not before:           Mon 24 Apr 2023 05:11:32 +0000
ROA not after:            Mon 22 Apr 2024 05:16:32 +0000
asID:                     151188
IP address blocks:        2a12:dd47:f200::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c1:97:ab:1e:0e:21:bd:56:6d:f4:c5:d1:35:39:b6:d9:14:4a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C513034911811188EE6887BB01091E1FE7EE0D
        Validity
            Not Before: Apr 24 05:11:32 2023 GMT
            Not After : Apr 22 05:16:32 2024 GMT
        Subject: CN=713A93F0733A5A8125FBE90468DC74F11557D289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:53:85:62:e4:5e:ca:22:bd:5d:9c:54:76:8b:
                    2e:73:61:d6:21:96:fc:8b:e1:03:87:52:d5:6b:19:
                    e0:5f:7c:db:3e:c2:59:7d:29:03:05:31:df:51:7c:
                    83:66:0e:2c:ab:15:fd:25:c7:40:1d:8c:99:04:56:
                    bc:75:3e:a8:9b:c9:93:55:29:69:e8:ed:96:f6:24:
                    0c:85:99:44:5a:99:ba:e9:24:c8:07:fc:6d:32:c9:
                    80:87:c7:f4:be:7c:b0:70:77:4f:78:43:d9:4d:3e:
                    78:ec:28:de:97:69:f7:19:04:9c:ca:ad:12:df:04:
                    05:1c:d2:5e:a4:09:4f:34:41:1b:f6:ca:33:ee:c5:
                    01:c6:e6:eb:37:39:d6:b8:46:d1:38:94:21:0a:1e:
                    d9:82:a9:97:24:03:8c:2f:1c:12:23:0f:e1:87:68:
                    40:b2:c4:61:f4:9a:c1:6b:30:2c:82:f2:24:e6:06:
                    c7:44:49:46:e9:66:a3:59:5a:f6:22:a1:25:75:2e:
                    99:b4:a8:9e:c1:05:20:3f:36:67:3f:47:65:e5:60:
                    f1:65:b3:0c:c6:6a:a9:b7:76:f3:fc:79:83:95:a8:
                    b6:b0:17:8b:f0:92:4f:ab:ad:0f:bf:ef:87:51:bb:
                    1d:9d:d6:f5:fd:ea:e2:2f:fb:dd:bc:fc:e7:20:dd:
                    36:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3A:93:F0:73:3A:5A:81:25:FB:E9:04:68:DC:74:F1:15:57:D2:89
            X509v3 Authority Key Identifier:
                keyid:40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Simple/1/326131323a646434373a663230303a3a2f34302d3430203d3e20313531313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:f200::/40

    Signature Algorithm: sha256WithRSAEncryption
         7b:74:bf:77:6f:e9:2d:c3:2a:25:3b:90:1c:dc:ca:b8:f5:c5:
         d2:b3:bd:29:35:ce:80:33:71:be:67:f7:35:ab:ce:ed:ec:ce:
         95:15:b6:0c:da:54:db:f0:7a:b1:f9:b6:35:a0:d3:ec:2a:a9:
         7f:fb:a0:b5:17:30:26:8c:3b:a4:f9:43:ba:bf:b9:be:14:1e:
         9c:e9:ab:4d:bc:be:ac:f2:47:82:c3:a9:cf:c5:b9:40:38:1d:
         47:c1:d0:b6:7a:97:36:b2:66:01:86:68:62:1d:39:ee:c1:67:
         20:f3:56:18:1e:3f:ed:2d:6a:79:23:f4:b9:90:93:57:96:01:
         77:52:f6:3b:8d:3a:1a:71:6c:68:e4:0f:ed:03:b8:30:34:c6:
         6d:01:f0:ef:b4:a3:ad:c2:9d:cf:07:ea:c9:8a:d9:a7:53:ab:
         6f:ed:8d:1d:b2:10:f5:57:4f:b7:69:90:b3:71:d6:6a:db:12:
         f5:5b:46:db:35:60:9f:23:27:0f:69:93:6a:17:20:fe:1a:10:
         84:ad:75:e0:4a:c9:78:e4:3c:4c:b1:a4:5d:ef:8e:29:60:e0:
         d7:e7:ae:80:66:02:df:f4:a1:9d:3f:a6:8e:70:0a:18:b7:16:
         45:4f:74:d9:c4:27:77:de:05:51:d6:b4:a6:93:db:3e:e7:40:
         63:b7:57:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:33 2023 by rpki-client on console-fra.rpki-client.org