Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/yuki/0/326130363a313238373a353766633a3a2f34372d3438203d3e20323136313938.roa
File:                     326130363a313238373a353766633a3a2f34372d3438203d3e20323136313938.roa (raw, json)
Hash identifier:          RMi+77ui584v8aNd22B3c3ymY018W1KRLSW0PlwJ/Jo=
Subject key identifier:   60:B2:2C:B7:A8:5D:2D:07:E3:7D:19:E1:57:32:2B:B5:F7:6D:CA:09
Certificate issuer:       /CN=C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5
Certificate serial:       7791AE32A3164B3128A1C3B8CF00A75788EF9401
Authority key identifier: C3:0B:BD:63:5E:1B:8B:7A:D5:EA:D6:04:79:8A:C0:8E:AF:77:D6:C5
Authority info access:    rsync://rpki.co/repo/AS205432/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.cer
Subject info access:      rsync://rpki.co/repo/yuki/0/326130363a313238373a353766633a3a2f34372d3438203d3e20323136313938.roa
Signing time:             Sat 07 Oct 2023 06:17:12 +0000
ROA not before:           Sat 07 Oct 2023 06:12:12 +0000
ROA not after:            Sat 05 Oct 2024 06:17:12 +0000
asID:                     216198
IP address blocks:        2a06:1287:57fc::/47 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:91:ae:32:a3:16:4b:31:28:a1:c3:b8:cf:00:a7:57:88:ef:94:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5
        Validity
            Not Before: Oct  7 06:12:12 2023 GMT
            Not After : Oct  5 06:17:12 2024 GMT
        Subject: CN=60B22CB7A85D2D07E37D19E157322BB5F76DCA09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:be:46:66:8b:1d:24:e5:f5:e4:fd:af:ca:12:
                    d7:eb:8a:69:cd:dc:2f:f8:c2:bf:30:d6:ff:13:8d:
                    65:00:f7:31:54:0c:b2:0e:25:db:9e:7b:e3:99:1b:
                    39:df:57:8e:5d:36:52:2d:a3:3e:a3:a1:11:7a:bc:
                    bd:6c:d5:60:16:32:69:90:77:e7:39:2d:64:24:f7:
                    c8:eb:cb:db:97:87:e6:15:7d:eb:0c:ea:ec:e9:18:
                    d8:1f:54:8c:98:84:66:1c:e4:a9:64:89:69:70:b7:
                    b8:de:b9:0c:5e:45:4c:a2:82:4f:48:17:7e:b7:ef:
                    10:04:8e:d9:e9:d4:11:78:8c:56:96:58:fb:91:67:
                    72:0a:4a:16:81:6d:e3:16:d2:c6:f1:9f:d1:da:10:
                    fc:12:30:f3:5a:69:29:ec:45:d9:bc:d8:cf:cb:f3:
                    4a:35:3a:72:4c:46:46:fa:37:79:a3:ac:46:59:de:
                    bf:ad:ca:9d:82:d9:e1:63:1b:5f:77:16:e9:6b:a1:
                    d8:6c:07:8a:2a:11:95:89:41:40:1d:de:7c:98:a9:
                    a8:79:aa:d2:c2:ab:36:fa:2e:1e:0f:82:7c:27:5b:
                    ac:df:3e:9f:ce:45:1d:d0:21:f7:41:2a:ed:5f:e9:
                    18:0b:e1:e7:77:33:b8:27:1a:8b:20:a7:ae:af:89:
                    df:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B2:2C:B7:A8:5D:2D:07:E3:7D:19:E1:57:32:2B:B5:F7:6D:CA:09
            X509v3 Authority Key Identifier:
                keyid:C3:0B:BD:63:5E:1B:8B:7A:D5:EA:D6:04:79:8A:C0:8E:AF:77:D6:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/yuki/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/yuki/0/326130363a313238373a353766633a3a2f34372d3438203d3e20323136313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:57fc::/47

    Signature Algorithm: sha256WithRSAEncryption
         d0:e4:71:02:2f:07:b5:d8:ca:f2:27:45:82:ee:2e:11:1a:bc:
         f9:fd:b4:b1:51:f1:ab:b5:53:0c:a2:ab:18:50:a6:01:9e:eb:
         86:c4:4b:45:7b:f5:e8:a9:5a:a0:a9:84:3c:ad:f9:59:48:e5:
         e6:c2:58:6c:50:af:d1:d6:17:2a:76:51:93:ab:cb:d0:1d:dd:
         42:82:6d:19:ed:fd:6a:d3:7a:7d:eb:e5:79:dc:80:1c:e1:4e:
         8f:07:7c:e1:59:d7:06:bb:8b:9d:2a:ae:f3:eb:bf:42:35:4b:
         3a:bf:3f:9f:40:2b:8a:04:50:6a:ee:86:25:18:0e:f0:16:db:
         bd:ff:c9:1a:6b:1b:b2:c3:b6:13:37:d7:b9:be:55:d6:85:7c:
         44:50:ba:91:56:f9:05:50:57:c6:76:cd:49:74:be:77:cf:66:
         52:0b:2f:d6:f1:84:a6:ea:37:10:50:93:a5:a5:29:09:cb:5e:
         8d:34:f8:8f:92:d9:37:21:67:b6:90:28:d3:e9:ea:e3:e3:8c:
         9e:1c:26:7a:76:2c:4e:d7:3d:ca:a2:3c:28:7b:04:8f:88:29:
         9f:a7:7f:f8:0b:58:b2:e4:79:45:94:39:98:4d:25:1d:f2:61:
         69:d3:3c:98:80:27:95:4e:5b:bd:6f:56:79:c8:79:49:72:4e:
         12:5c:ea:2e
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgIUd5GuMqMWSzEoocO4zwCnV4jvlAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzMwQkJENjM1RTFCOEI3QUQ1RUFENjA0Nzk4QUMwOEVB
Rjc3RDZDNTAeFw0yMzEwMDcwNjEyMTJaFw0yNDEwMDUwNjE3MTJaMDMxMTAvBgNV
BAMTKDYwQjIyQ0I3QTg1RDJEMDdFMzdEMTlFMTU3MzIyQkI1Rjc2RENBMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vkZmix0k5fXk/a/KEtfrimnN
3C/4wr8w1v8TjWUA9zFUDLIOJduee+OZGznfV45dNlItoz6joRF6vL1s1WAWMmmQ
d+c5LWQk98jry9uXh+YVfesM6uzpGNgfVIyYhGYc5KlkiWlwt7jeuQxeRUyigk9I
F3637xAEjtnp1BF4jFaWWPuRZ3IKShaBbeMW0sbxn9HaEPwSMPNaaSnsRdm82M/L
80o1OnJMRkb6N3mjrEZZ3r+typ2C2eFjG193FulrodhsB4oqEZWJQUAd3nyYqah5
qtLCqzb6Lh4PgnwnW6zfPp/ORR3QIfdBKu1f6RgL4ed3M7gnGosgp66vid9RAgMB
AAGjggHVMIIB0TAdBgNVHQ4EFgQUYLIst6hdLQfjfRnhVzIrtfdtygkwHwYDVR0j
BBgwFoAUwwu9Y14bi3rV6tYEeYrAjq931sUwDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL3l1a2kvMC9DMzBCQkQ2
MzVFMUI4QjdBRDVFQUQ2MDQ3OThBQzA4RUFGNzdENkM1LmNybDBoBggrBgEFBQcB
AQRcMFowWAYIKwYBBQUHMAKGTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMy
LzAvQzMwQkJENjM1RTFCOEI3QUQ1RUFENjA0Nzk4QUMwOEVBRjc3RDZDNS5jZXIw
fAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzovL3Jwa2kuY28vcmVw
by95dWtpLzAvMzI2MTMwMzYzYTMxMzIzODM3M2EzNTM3NjY2MzNhM2EyZjM0Mzcy
ZDM0MzgyMDNkM2UyMDMyMzEzNjMxMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHASoGEodX/DANBgkq
hkiG9w0BAQsFAAOCAQEA0ORxAi8HtdjK8idFgu4uERq8+f20sVHxq7VTDKKrGFCm
AZ7rhsRLRXv16KlaoKmEPK35WUjl5sJYbFCv0dYXKnZRk6vL0B3dQoJtGe39atN6
fevledyAHOFOjwd84VnXBruLnSqu8+u/QjVLOr8/n0ArigRQau6GJRgO8Bbbvf/J
GmsbssO2EzfXub5V1oV8RFC6kVb5BVBXxnbNSXS+d89mUgsv1vGEpuo3EFCTpaUp
CctejTT4j5LZNyFntpAo0+nq4+OMnhwmenYsTtc9yqI8KHsEj4gpn6d/+AtYsuR5
RZQ5mE0lHfJhadM8mIAnlU5bvW9Wech5SXJOElzqLg==