Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS203470.roa
File:                     AS203470.roa (raw, json)
Hash identifier:          PzaWMvu1LVr3ILomMrVL/v5cHUGxMz7nRa02o5MOApk=
Subject key identifier:   AA:BB:FD:69:17:40:A7:D3:27:56:EB:01:49:36:AF:37:86:B6:E0:89
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       0CEE5D052E7CEE31D79CE6B16F9327CB4CC82763
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS203470.roa
Signing time:             Mon 10 Apr 2023 03:31:40 +0000
ROA not before:           Mon 10 Apr 2023 03:26:40 +0000
ROA not after:            Mon 08 Apr 2024 03:31:40 +0000
asID:                     203470
IP address blocks:        2a12:dd47:80e8::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ee:5d:05:2e:7c:ee:31:d7:9c:e6:b1:6f:93:27:cb:4c:c8:27:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:40 2023 GMT
            Not After : Apr  8 03:31:40 2024 GMT
        Subject: CN=AABBFD691740A7D32756EB014936AF3786B6E089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6d:2d:c0:9d:50:7b:e3:11:ab:a6:c1:58:f2:
                    45:32:8a:1e:35:16:37:d8:fc:3f:8e:34:34:37:ca:
                    95:4b:11:d7:09:50:55:e3:bc:57:65:7e:a8:06:4b:
                    2b:f3:d7:f1:c4:b9:11:8d:38:a4:ee:40:b4:53:73:
                    24:20:48:4d:ad:68:03:da:bc:23:6b:29:c4:d6:6e:
                    44:f8:38:9a:78:57:d8:8b:bc:13:5f:08:47:30:ae:
                    3b:9a:a3:99:da:48:78:27:25:54:a3:1d:e0:2a:d9:
                    23:27:12:73:79:b7:14:5c:1d:e1:be:02:a5:e8:ef:
                    c5:60:b4:fd:34:2a:cd:e9:f1:ff:2f:5f:24:78:2e:
                    77:cf:ae:62:dc:d9:d0:f6:fd:19:bd:e1:6a:81:73:
                    e6:ab:06:a6:1c:0d:2d:e9:0b:30:ea:47:60:9e:d8:
                    ff:59:3a:6c:36:fc:d7:c7:8d:dc:d3:56:40:af:bc:
                    74:71:75:15:0d:ff:75:50:87:38:33:ee:85:ce:1f:
                    49:08:8c:d1:2f:ad:9f:9d:2b:4e:8b:f2:ec:f1:82:
                    5b:d5:1e:fa:82:49:ca:65:29:2e:b1:b8:e7:86:32:
                    a2:73:e3:ea:ab:05:e2:69:01:e2:d4:bd:35:5c:5f:
                    c4:c3:7f:a8:bd:8b:20:d8:c6:a3:de:f7:7a:a1:34:
                    a7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BB:FD:69:17:40:A7:D3:27:56:EB:01:49:36:AF:37:86:B6:E0:89
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS203470.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80e8::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:f9:98:dd:91:b4:e2:04:1e:c0:e9:f4:1b:ba:33:94:04:20:
         36:11:3e:ae:3e:b2:65:37:50:5e:c5:c7:02:ef:5e:4a:6b:37:
         44:f1:1b:28:87:c6:71:e0:e0:78:18:cf:f6:3e:21:7d:9a:bc:
         d2:b9:5d:e6:d0:66:c9:85:fa:35:bb:a1:14:ec:96:a7:15:89:
         a4:ef:08:85:54:b7:7b:cd:26:3c:99:01:b7:b0:ae:12:a8:7d:
         73:6b:a2:ff:6e:de:ad:e2:2b:16:74:06:3a:2d:16:64:ea:fd:
         20:24:e5:f9:fe:c0:a4:c2:46:39:97:00:cf:2d:f1:d5:23:1a:
         70:69:8c:f1:1c:b2:2a:4b:ba:5a:e4:41:c9:0e:43:b4:2d:5a:
         49:0d:bc:b8:5c:08:85:2c:06:53:e1:10:61:04:8f:5d:c3:1c:
         bb:7d:57:98:77:b0:d0:60:c2:79:47:a0:17:a3:9f:cc:37:2b:
         b7:47:b7:1c:c9:5e:1b:78:9d:94:36:76:55:d6:f6:ca:ad:46:
         0a:88:35:40:71:da:a1:51:24:90:9a:a6:3a:42:f5:c6:bf:93:
         d5:c4:d3:c3:0f:f0:d2:b6:2c:80:c7:21:35:79:47:7a:71:91:
         b8:46:e7:dc:12:94:97:92:19:0f:4d:19:35:44:4a:1e:42:e2:
         ed:fa:e3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----