Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS1012.roa
File:                     AS1012.roa (raw, json)
Hash identifier:          4vmVM/3sIAw5ytI3fBirRfxumaetMDxHHdf19WXFneY=
Subject key identifier:   07:08:EF:19:6F:6C:BA:48:E4:DF:B8:4F:58:70:86:8A:C0:06:B9:54
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       61DC5CFCB75BC6B339B627AB86078379ED8796F0
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS1012.roa
Signing time:             Wed 06 Sep 2023 09:29:33 +0000
ROA not before:           Wed 06 Sep 2023 09:24:33 +0000
ROA not after:            Wed 04 Sep 2024 09:29:33 +0000
asID:                     1012
IP address blocks:        2001:67c:a9c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:dc:5c:fc:b7:5b:c6:b3:39:b6:27:ab:86:07:83:79:ed:87:96:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Sep  6 09:24:33 2023 GMT
            Not After : Sep  4 09:29:33 2024 GMT
        Subject: CN=0708EF196F6CBA48E4DFB84F5870868AC006B954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6b:44:d6:95:b0:c8:0d:f6:a4:00:28:7e:b3:
                    a2:2c:72:2e:3b:10:40:bd:cf:07:48:c3:24:2a:db:
                    5d:d2:9e:06:54:26:fa:5c:85:d7:01:b0:b1:05:68:
                    1c:7f:da:46:f8:d2:e6:09:c3:a3:0f:90:c0:a2:2e:
                    48:ed:04:ac:c9:dd:71:46:dd:ae:90:30:e6:af:92:
                    cb:4d:bf:91:c5:af:33:e1:25:f4:1c:a2:e8:dc:05:
                    5f:7b:0a:fc:cd:60:79:9b:9a:0f:56:8d:18:28:4a:
                    11:a0:d4:d4:41:78:22:d1:d6:6d:1f:f4:24:26:56:
                    ba:83:83:1b:30:57:f0:55:e1:2b:ea:d4:d7:86:8b:
                    8e:e3:cd:9f:f9:11:92:7f:d6:26:11:9d:b3:cf:f8:
                    02:2f:84:c2:d0:41:fc:7a:4e:9b:f7:eb:93:24:6e:
                    e3:f6:19:55:10:2b:b5:2d:7e:a4:0d:dd:62:e0:2b:
                    0d:2b:10:3b:29:fe:45:1c:bb:6f:7a:88:dd:13:72:
                    22:9d:37:6a:7d:78:1b:2f:4b:60:a6:29:aa:dc:6f:
                    5c:0d:5f:d8:d5:fe:41:7f:97:3f:e1:e4:7f:9f:af:
                    35:1a:41:bd:da:1c:5b:29:1d:bc:51:99:52:34:ff:
                    1e:10:a7:b9:17:9d:f6:60:76:8e:0c:ab:52:8d:bf:
                    ff:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:08:EF:19:6F:6C:BA:48:E4:DF:B8:4F:58:70:86:8A:C0:06:B9:54
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS1012.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a9c::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:44:d7:d7:4d:4d:31:d3:4c:fd:8b:6f:dc:38:fd:9b:be:8e:
         6a:df:ba:e4:d9:fc:9a:ae:af:a2:5a:98:36:7a:53:64:8c:97:
         f3:c8:6d:7a:fa:a0:21:9c:fc:51:10:89:5d:9d:c1:7f:4a:20:
         8a:b2:f7:19:d1:f5:bc:01:41:77:fa:ac:4a:32:b0:d8:22:5c:
         f8:5a:8c:89:c6:7a:48:61:1a:c1:c8:d6:93:88:64:7c:5a:e2:
         2e:a5:58:7e:cb:2e:5a:06:1b:8a:b3:84:a7:a5:a5:55:a4:b5:
         a4:b5:b9:5e:18:70:73:75:71:de:d2:c6:2c:e2:1a:0e:ec:3d:
         ea:ca:48:21:94:15:7b:5d:01:3c:f8:8f:3d:c3:ef:17:62:e2:
         3e:af:a5:da:3d:0b:37:ec:0c:3b:6f:a5:97:e7:fb:db:6c:06:
         f3:7e:d3:1f:58:87:7c:d4:b3:ae:c8:77:08:cd:fe:35:5b:33:
         e2:2d:97:45:42:ce:15:5f:09:65:b2:ce:a8:fd:d9:ed:08:c7:
         ba:7a:bf:f9:b8:ef:d3:1e:53:27:08:7f:c8:f1:87:98:51:8b:
         77:2a:14:f6:7b:2d:05:dd:33:e3:76:48:8c:04:67:38:d1:8b:
         3f:e7:f5:3a:12:0c:79:3c:66:36:45:5f:74:23:73:bc:2f:1a:
         19:98:06:4c
-----BEGIN CERTIFICATE-----
MIIEkTCCA3mgAwIBAgIUYdxc/LdbxrM5tierhgeDee2HlvAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA5MDYwOTI0MzNaFw0yNDA5MDQwOTI5MzNaMDMxMTAvBgNV
BAMTKDA3MDhFRjE5NkY2Q0JBNDhFNERGQjg0RjU4NzA4NjhBQzAwNkI5NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHa0TWlbDIDfakACh+s6Isci47
EEC9zwdIwyQq213SngZUJvpchdcBsLEFaBx/2kb40uYJw6MPkMCiLkjtBKzJ3XFG
3a6QMOavkstNv5HFrzPhJfQcoujcBV97CvzNYHmbmg9WjRgoShGg1NRBeCLR1m0f
9CQmVrqDgxswV/BV4Svq1NeGi47jzZ/5EZJ/1iYRnbPP+AIvhMLQQfx6Tpv365Mk
buP2GVUQK7UtfqQN3WLgKw0rEDsp/kUcu296iN0TciKdN2p9eBsvS2CmKarcb1wN
X9jV/kF/lz/h5H+frzUaQb3aHFspHbxRmVI0/x4Qp7kXnfZgdo4Mq1KNv/+jAgMB
AAGjggGbMIIBlzAdBgNVHQ4EFgQUBwjvGW9sukjk37hPWHCGisAGuVQwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBD
BggrBgEFBQcBCwQ3MDUwMwYIKwYBBQUHMAuGJ3JzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMxMDEyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIG
CCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAqcMA0GCSqGSIb3DQEBCwUA
A4IBAQAPRNfXTU0x00z9i2/cOP2bvo5q37rk2fyarq+iWpg2elNkjJfzyG16+qAh
nPxREIldncF/SiCKsvcZ0fW8AUF3+qxKMrDYIlz4WoyJxnpIYRrByNaTiGR8WuIu
pVh+yy5aBhuKs4SnpaVVpLWktbleGHBzdXHe0sYs4hoO7D3qykghlBV7XQE8+I89
w+8XYuI+r6XaPQs37Aw7b6WX5/vbbAbzftMfWId81LOuyHcIzf41WzPiLZdFQs4V
Xwllss6o/dntCMe6er/5uO/THlMnCH/I8YeYUYt3KhT2ey0F3TPjdkiMBGc40Ys/
5/U6Egx5PGY2RV90I3O8LxoZmAZM
-----END CERTIFICATE-----