Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS200506.roa
File:                     AS200506.roa (raw, json)
Hash identifier:          5TtEqP+siJ2thPmRNeAMTerF6a0wRUgKaCq2L8eQjWw=
Subject key identifier:   66:0A:B9:20:24:28:42:60:4E:CF:DE:51:72:B6:4A:7C:9C:3B:5B:07
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       336C17E2AC8ADF975C943F7EAE4EC07E02E11731
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS200506.roa
Signing time:             Mon 10 Apr 2023 03:31:36 +0000
ROA not before:           Mon 10 Apr 2023 03:26:36 +0000
ROA not after:            Mon 08 Apr 2024 03:31:36 +0000
asID:                     200506
IP address blocks:        2a12:dd47:d400::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:6c:17:e2:ac:8a:df:97:5c:94:3f:7e:ae:4e:c0:7e:02:e1:17:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:36 2023 GMT
            Not After : Apr  8 03:31:36 2024 GMT
        Subject: CN=660AB920242842604ECFDE5172B64A7C9C3B5B07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e4:e3:72:51:3e:dc:45:ba:fc:8e:d1:ea:db:
                    f7:3a:5a:7b:d9:58:12:a4:61:0a:36:79:2d:c9:df:
                    0d:55:6b:82:46:5e:35:6d:5a:d4:ef:90:0e:89:49:
                    9e:9f:ab:68:1f:90:29:36:ad:87:05:69:9f:a3:8f:
                    86:77:52:4a:50:b8:4a:82:59:a2:82:64:c0:57:d9:
                    a0:bd:48:c9:1d:86:27:a1:eb:76:85:a4:b6:bf:c7:
                    2a:73:ec:c3:d9:b0:33:5b:9f:ac:4e:d8:53:75:e6:
                    91:a5:69:2c:0a:a4:5b:61:2a:70:d6:3d:fd:23:1d:
                    14:99:d2:f9:d2:af:e7:63:81:56:05:a7:54:eb:31:
                    e8:82:64:fc:b2:bd:e5:6c:fa:44:9b:bb:85:ea:ec:
                    5a:5e:49:be:02:10:53:d9:44:ad:cf:d5:b3:37:e0:
                    b6:41:ef:66:c4:18:fc:f6:83:68:0e:5a:91:1f:e9:
                    9f:62:09:ae:f8:ee:4b:bb:95:10:4d:dc:d9:6f:9e:
                    19:7f:ef:ef:0f:98:95:12:80:39:3b:bd:b7:89:17:
                    7e:e7:99:48:a4:23:8b:28:6f:e2:f6:2d:98:ce:49:
                    3e:a4:fb:e2:9a:38:b3:84:13:14:57:44:05:ae:f5:
                    30:b2:72:52:b3:61:30:04:ea:93:7f:19:66:f1:27:
                    c2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0A:B9:20:24:28:42:60:4E:CF:DE:51:72:B6:4A:7C:9C:3B:5B:07
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS200506.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:d400::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:d4:ba:5a:ee:9d:b1:0a:39:65:50:53:83:dc:84:ae:4f:c2:
         8e:f7:ef:04:c6:8c:81:85:58:c3:82:86:e4:5d:d0:a6:57:a7:
         c1:aa:3b:06:f5:d0:ba:72:70:f8:27:e3:38:fd:9f:cf:3f:f7:
         f3:c8:a6:b3:d2:bd:a9:0e:52:da:c7:42:44:e6:05:59:ae:d3:
         55:e5:21:0b:4a:06:2e:5b:9f:7a:2d:43:dc:37:7b:7e:92:71:
         9a:62:b9:30:7e:64:53:3f:ca:94:e3:fe:91:ea:2d:d2:28:96:
         f4:88:63:e2:ca:fb:d5:d2:0e:6e:78:28:69:00:02:00:b2:00:
         9e:27:1a:9d:90:32:ec:6a:8f:1e:e7:01:02:af:b9:88:f0:b8:
         aa:47:7e:20:05:59:3d:b0:64:d8:79:20:c6:56:4c:92:15:69:
         48:bd:24:5e:be:c6:06:f8:21:5b:93:8a:5f:5c:a6:c1:60:ab:
         f9:d1:4e:06:9c:31:d9:90:7c:35:8b:57:1a:5e:4b:25:dc:bb:
         25:15:6b:b1:d0:46:fa:2c:76:ce:76:9f:b3:b3:60:ee:7d:d4:
         41:0c:ba:20:04:83:d6:c0:06:40:e4:5d:94:f3:c9:5b:5e:ba:
         d5:b5:ac:a9:2d:e4:7f:4f:d1:98:e4:e3:6d:68:61:a3:e6:a9:
         a3:9d:f1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----