Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS201386.roa
File:                     AS201386.roa (raw, json)
Hash identifier:          8Z34wBM/3XUfzKgjzvob41ZDoSO10Q/EwtkW1BpgNEg=
Subject key identifier:   81:01:03:8B:E2:B2:CB:CE:43:92:8E:92:FF:D3:C7:8C:7B:3A:27:2D
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       75CFFE66EF17F78CFB533F4E49F6356DE15898F4
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS201386.roa
Signing time:             Mon 10 Apr 2023 03:31:44 +0000
ROA not before:           Mon 10 Apr 2023 03:26:44 +0000
ROA not after:            Mon 08 Apr 2024 03:31:44 +0000
asID:                     201386
IP address blocks:        2a12:dd47:83d0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:cf:fe:66:ef:17:f7:8c:fb:53:3f:4e:49:f6:35:6d:e1:58:98:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:44 2023 GMT
            Not After : Apr  8 03:31:44 2024 GMT
        Subject: CN=8101038BE2B2CBCE43928E92FFD3C78C7B3A272D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:89:3c:d9:83:97:72:1c:29:94:9b:0e:8b:58:
                    c1:6d:7b:bd:c3:6a:65:7a:25:64:24:40:31:d8:fb:
                    6d:b9:d7:b0:40:16:ca:70:cb:9b:a7:79:f6:22:a1:
                    1a:1b:74:86:0d:f8:67:cd:d0:3a:35:8f:68:8d:73:
                    f3:97:d4:70:3e:1d:19:3c:4c:62:7e:42:41:fb:9d:
                    6c:c9:6a:cb:ae:57:33:e1:9b:ab:5f:cb:40:97:c9:
                    2b:d6:8d:1f:50:3b:cd:b4:45:68:44:a0:39:13:52:
                    cb:0b:63:50:d4:7b:c0:f6:ee:7c:09:7e:6d:5a:62:
                    b5:16:dd:74:d8:e3:c3:9f:35:62:a9:9a:cf:a5:8f:
                    55:62:8d:be:4f:39:16:63:32:80:88:09:48:fe:ae:
                    c6:20:ae:11:b5:c4:d4:65:23:45:e9:f9:81:65:fe:
                    47:02:07:0f:97:6f:21:bc:38:17:27:a9:05:1c:11:
                    8e:43:c0:18:60:29:e3:09:ca:54:3c:22:05:b9:63:
                    1e:e9:d8:8f:91:89:30:bd:f8:9a:c0:f6:b4:b0:2d:
                    b0:81:ca:12:72:81:1f:fe:c8:76:99:05:84:b6:a7:
                    b4:a7:85:0b:6a:f8:20:bb:df:e8:14:3e:3f:99:fa:
                    d9:62:b8:4f:0b:87:9d:57:d9:d5:43:50:8d:f7:40:
                    48:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:01:03:8B:E2:B2:CB:CE:43:92:8E:92:FF:D3:C7:8C:7B:3A:27:2D
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS201386.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:83d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         bf:4d:29:34:87:fd:e2:ee:61:18:f1:9e:4b:6a:c2:21:2e:c2:
         7f:ac:07:32:36:aa:8e:e8:51:b6:13:e3:15:be:79:b1:21:94:
         95:9d:12:11:85:b9:1c:61:d3:4e:34:de:b4:ab:6b:3d:59:f4:
         de:f4:69:64:29:cc:3e:a5:3a:db:80:6b:cf:3c:68:30:d1:00:
         23:f2:7b:59:06:3d:92:47:f0:73:c4:ab:93:b7:b1:2d:80:e3:
         dc:6e:60:2b:01:2a:2e:c4:ff:51:33:33:13:1c:5b:f9:fb:ba:
         fc:b1:98:43:32:5e:f3:f9:75:e6:80:87:3a:8a:0b:36:f2:d3:
         4e:0a:a8:e8:95:2f:ec:1d:a5:0f:b6:4d:d3:ef:c6:59:e8:67:
         07:e8:02:ff:56:61:7a:26:1e:b2:b6:5c:2c:b4:66:25:07:cd:
         35:e5:77:1a:5a:ac:40:21:3f:0a:75:2b:2c:57:f5:84:60:77:
         b8:04:63:69:09:c1:b8:7f:fa:bf:20:93:4f:33:98:65:da:b0:
         ab:d3:65:5c:f5:f8:21:56:1e:ae:92:d9:0b:ca:77:ca:1b:91:
         2a:34:ba:c3:c8:3e:77:9e:92:4c:d7:d3:8b:ff:4a:4b:1b:b1:
         2d:c6:a9:14:7a:66:15:87:9a:35:4b:05:9a:05:ac:4c:ff:b8:
         1d:3c:42:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----