Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS201658.roa
File:                     AS201658.roa (raw, json)
Hash identifier:          hvIL/tT2rhft2f8lwM0yoSBbClveodxY8Q1zaRr1UKI=
Subject key identifier:   16:A8:97:9A:E9:11:F2:65:02:C1:87:00:CA:57:64:FD:13:A6:BB:BB
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       16A84513099280D775B1E7EA40872B11DE1A413C
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS201658.roa
Signing time:             Mon 10 Apr 2023 03:31:33 +0000
ROA not before:           Mon 10 Apr 2023 03:26:33 +0000
ROA not after:            Mon 08 Apr 2024 03:31:33 +0000
asID:                     201658
IP address blocks:        2a12:dd47:83b0::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a8:45:13:09:92:80:d7:75:b1:e7:ea:40:87:2b:11:de:1a:41:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:33 2023 GMT
            Not After : Apr  8 03:31:33 2024 GMT
        Subject: CN=16A8979AE911F26502C18700CA5764FD13A6BBBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:74:9a:2a:4f:97:c3:6c:56:a2:7c:d3:76:
                    eb:e1:77:19:c4:8c:c5:2f:07:32:24:f6:2f:11:cb:
                    47:76:f8:11:5f:b6:5b:05:4f:92:48:c7:c9:3b:b2:
                    ec:04:fa:b5:9a:44:56:61:3c:06:fb:35:77:a7:92:
                    5d:07:ed:28:ec:61:ff:56:c2:62:0a:0c:82:f0:b1:
                    e4:7f:50:45:f8:f6:51:72:26:67:59:b2:66:3b:98:
                    c6:9c:43:b0:46:4d:4f:4e:c5:96:69:aa:e7:0a:07:
                    d4:e0:fa:4c:a8:04:3a:bb:5e:93:ea:12:1c:a4:3f:
                    23:86:73:cc:9f:02:47:a6:eb:ec:28:ac:e4:4f:ef:
                    47:b6:17:3a:02:7b:a3:e5:6b:e3:94:45:7b:90:f6:
                    a6:37:ab:83:a1:3d:f8:d2:54:b5:77:b4:27:9f:1d:
                    42:c7:a6:11:70:2b:95:1e:c4:79:80:fa:c7:d1:cb:
                    51:f0:c8:51:c4:5c:b4:19:a6:d9:4d:15:c9:83:74:
                    3b:50:fa:77:c8:98:05:43:35:55:52:61:3c:ff:5a:
                    c8:29:6c:eb:86:7c:93:95:72:ab:0e:d8:a0:75:4e:
                    bc:9d:02:cc:ad:fc:80:66:c8:0e:db:77:7a:0f:f4:
                    f0:45:4d:0d:43:6e:6c:4e:4c:5c:50:45:3c:3b:3b:
                    7b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A8:97:9A:E9:11:F2:65:02:C1:87:00:CA:57:64:FD:13:A6:BB:BB
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS201658.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:83b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         96:2d:0a:fe:c9:4b:59:3b:07:04:a7:cb:0f:eb:31:13:f0:07:
         4f:00:a0:35:48:71:17:7b:03:2b:c4:6f:5f:96:9c:93:c9:a4:
         45:db:7f:3c:a5:60:40:7b:85:cb:03:6e:fa:66:a8:e2:35:e3:
         47:12:31:05:f6:d7:fa:b6:57:73:6f:86:01:b3:c0:bd:a8:0e:
         a7:8a:1b:21:98:0d:23:70:91:9b:6a:06:be:07:4f:06:a2:38:
         ea:6e:67:09:5c:2d:f7:23:e5:88:ba:77:d7:07:79:27:0e:10:
         b2:ed:e9:11:9b:c9:cf:62:62:57:2e:e0:52:61:4b:bc:cc:53:
         c9:bf:6a:b1:e0:b2:cb:d7:a7:e7:cd:a2:48:e8:6c:e0:8e:92:
         d8:c3:4e:45:b1:14:97:b1:49:61:03:29:1d:08:ae:d7:4e:8a:
         19:6e:12:98:7e:c8:ef:b1:21:ec:cd:24:9b:ed:b5:3d:8a:02:
         05:f5:b9:4e:e5:2c:bb:46:0e:40:63:36:41:99:82:57:2e:0c:
         1e:64:2a:cd:7c:5e:e5:47:bc:8d:11:7a:6c:ed:71:ea:ac:d1:
         95:08:b3:c6:b4:6a:93:5c:81:44:fe:c6:6d:2f:6e:e6:90:e2:
         7d:2a:44:a4:06:f3:9e:19:c0:85:fa:27:7a:83:60:f8:32:1e:
         98:88:ec:0a
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUFqhFEwmSgNd1sefqQIcrEd4aQTwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2MzNaFw0yNDA0MDgwMzMxMzNaMDMxMTAvBgNV
BAMTKDE2QTg5NzlBRTkxMUYyNjUwMkMxODcwMENBNTc2NEZEMTNBNkJCQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKuXSaKk+Xw2xWonzTduvhdxnE
jMUvBzIk9i8Ry0d2+BFftlsFT5JIx8k7suwE+rWaRFZhPAb7NXenkl0H7SjsYf9W
wmIKDILwseR/UEX49lFyJmdZsmY7mMacQ7BGTU9OxZZpqucKB9Tg+kyoBDq7XpPq
EhykPyOGc8yfAkem6+worORP70e2FzoCe6Pla+OURXuQ9qY3q4OhPfjSVLV3tCef
HULHphFwK5UexHmA+sfRy1HwyFHEXLQZptlNFcmDdDtQ+nfImAVDNVVSYTz/Wsgp
bOuGfJOVcqsO2KB1TrydAsyt/IBmyA7bd3oP9PBFTQ1DbmxOTFxQRTw7O3vfAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUFqiXmukR8mUCwYcAyldk/ROmu7swHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMDE2NTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqEt1Hg7AwDQYJKoZIhvcNAQEL
BQADggEBAJYtCv7JS1k7BwSnyw/rMRPwB08AoDVIcRd7AyvEb1+WnJPJpEXbfzyl
YEB7hcsDbvpmqOI140cSMQX21/q2V3NvhgGzwL2oDqeKGyGYDSNwkZtqBr4HTwai
OOpuZwlcLfcj5Yi6d9cHeScOELLt6RGbyc9iYlcu4FJhS7zMU8m/arHgssvXp+fN
okjobOCOktjDTkWxFJexSWEDKR0IrtdOihluEph+yO+xIezNJJvttT2KAgX1uU7l
LLtGDkBjNkGZglcuDB5kKs18XuVHvI0Remztceqs0ZUIs8a0apNcgUT+xm0vbuaQ
4n0qRKQG854ZwIX6J3qDYPgyHpiI7Ao=
-----END CERTIFICATE-----