Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/yuki/0/326130363a313238373a353630313a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a313238373a353630313a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          8wGkehTZPf1wO3lHSKkGd6pOD9R6BG7IgtcStyaavrE=
Subject key identifier:   52:B2:90:38:0C:D0:89:51:C6:15:EA:42:5E:E3:84:EA:06:71:AC:C2
Certificate issuer:       /CN=C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5
Certificate serial:       07567F8E48680179D440B99BC0272CA304800060
Authority key identifier: C3:0B:BD:63:5E:1B:8B:7A:D5:EA:D6:04:79:8A:C0:8E:AF:77:D6:C5
Authority info access:    rsync://rpki.co/repo/AS205432/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.cer
Subject info access:      rsync://rpki.co/repo/yuki/0/326130363a313238373a353630313a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Wed 13 Sep 2023 06:46:13 +0000
ROA not before:           Wed 13 Sep 2023 06:41:13 +0000
ROA not after:            Wed 11 Sep 2024 06:46:13 +0000
asID:                     151349
IP address blocks:        2a06:1287:5601::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:56:7f:8e:48:68:01:79:d4:40:b9:9b:c0:27:2c:a3:04:80:00:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5
        Validity
            Not Before: Sep 13 06:41:13 2023 GMT
            Not After : Sep 11 06:46:13 2024 GMT
        Subject: CN=52B290380CD08951C615EA425EE384EA0671ACC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ab:89:68:4b:39:83:1b:eb:18:e2:26:8f:20:
                    55:d8:3e:86:74:70:9b:ea:1b:4d:a6:35:cd:42:be:
                    f3:73:86:31:e5:28:76:03:cf:7c:fd:e0:7c:5b:c7:
                    f1:0d:1b:4b:9a:bd:31:b1:a2:18:f8:a4:6c:7e:c5:
                    5c:94:76:b8:d2:dc:a2:41:a6:2a:28:4e:50:51:14:
                    94:12:37:ab:77:4f:2d:34:39:34:5c:e4:b1:a0:c0:
                    91:18:fa:ac:bc:bc:4a:c6:1a:d6:e9:69:2e:b5:ac:
                    39:fd:1a:59:35:34:c1:8b:25:6c:03:e7:86:28:34:
                    43:c5:ef:e6:ec:38:3a:70:7d:54:0c:2e:bf:c9:94:
                    62:be:33:05:75:2b:55:96:e2:fe:76:3d:dc:ca:dc:
                    99:ec:c3:42:c6:97:8a:3c:c5:48:8d:ad:03:0b:bb:
                    4e:52:61:11:2b:c9:5e:29:ba:d3:74:cf:63:72:f5:
                    2f:d2:d8:94:41:5d:67:9e:8d:7c:dd:08:52:c2:22:
                    98:c6:9c:8a:88:65:99:75:07:29:63:20:d2:0a:e8:
                    8f:9f:9b:e0:a8:0e:84:ca:ea:ce:bc:8b:cc:48:82:
                    fc:01:fc:f0:47:1d:78:32:f1:aa:70:63:06:33:65:
                    3d:0e:2e:55:9c:ca:1a:a5:dd:a4:15:d5:c8:0a:a6:
                    2c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B2:90:38:0C:D0:89:51:C6:15:EA:42:5E:E3:84:EA:06:71:AC:C2
            X509v3 Authority Key Identifier:
                keyid:C3:0B:BD:63:5E:1B:8B:7A:D5:EA:D6:04:79:8A:C0:8E:AF:77:D6:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/yuki/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/yuki/0/326130363a313238373a353630313a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:5601::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:05:45:bf:e1:97:95:43:f8:e6:ca:ca:04:95:79:6f:16:8a:
         0e:34:27:56:80:b6:64:39:12:7b:c4:e7:0f:eb:7c:a1:ab:02:
         af:8d:9e:15:27:e3:66:aa:74:e1:dc:0d:92:ba:b8:09:b7:03:
         6e:1d:9d:1b:07:d7:a8:2c:6d:3f:6f:fc:3e:61:27:90:10:f1:
         41:8b:39:e0:59:6a:24:d6:9e:66:8a:32:98:6d:9f:23:9d:7b:
         f1:ca:1f:9d:4c:0c:ff:2b:2b:d9:17:73:39:03:ee:7e:1b:5e:
         a4:68:0e:67:fb:c4:c8:49:cc:af:32:b5:ce:19:78:fd:1d:b2:
         11:82:3c:80:81:05:30:f7:71:22:13:cd:f8:d2:c7:07:3d:c6:
         e2:c9:5b:ba:da:dc:92:d3:e5:d1:86:07:ef:4f:78:07:c6:39:
         35:0e:f6:f2:79:dd:c9:a5:c6:3a:ef:c4:0b:10:26:ff:7e:f5:
         b8:44:49:69:56:c9:4e:ae:94:6c:9c:3c:52:5a:78:9a:35:5c:
         a5:60:ec:b6:6d:0d:8a:41:c0:e1:9a:64:29:7f:b8:ea:7c:08:
         c7:f7:de:11:d0:d8:5e:79:6c:3d:b3:a7:a2:d5:df:78:a9:9f:
         1f:8a:58:f8:2a:0b:85:e0:66:1a:7d:e2:2d:52:22:4b:8b:ce:
         61:96:f3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 05:53:00 2023 by rpki-client on console-fra.rpki-client.org