Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          HfSUZzZK9UufqXSXc0HgkJhRbFXHfpDkTpjjsw5IGvs=
Subject key identifier:   A9:A9:0F:DA:58:FD:E6:51:D9:09:5A:B5:BF:18:A5:AB:E5:CC:FB:0D
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       54CF676D26306E67F94BBC979EA40AD796D8FDD8
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS14618.roa
Signing time:             Fri 14 Jul 2023 11:54:50 +0000
ROA not before:           Fri 14 Jul 2023 11:49:50 +0000
ROA not after:            Fri 12 Jul 2024 11:54:50 +0000
asID:                     14618
IP address blocks:        2001:67c:a9c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:cf:67:6d:26:30:6e:67:f9:4b:bc:97:9e:a4:0a:d7:96:d8:fd:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Jul 14 11:49:50 2023 GMT
            Not After : Jul 12 11:54:50 2024 GMT
        Subject: CN=A9A90FDA58FDE651D9095AB5BF18A5ABE5CCFB0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:05:11:f8:0a:3a:24:6a:e1:a5:76:f9:16:db:
                    43:55:77:33:1f:37:f6:3b:3c:e9:0b:d3:ec:af:bd:
                    03:f7:c7:82:a3:6f:14:13:e8:f3:27:b5:99:94:74:
                    fc:0c:b7:24:1a:85:fa:79:6e:56:7f:31:82:1e:5b:
                    f8:64:79:75:34:ae:46:f5:ae:87:b7:39:92:0a:93:
                    c4:80:5c:53:b9:10:a3:08:df:33:00:c9:9b:75:63:
                    69:c5:ad:cc:e8:52:98:de:d5:fa:b3:0d:e9:ef:72:
                    70:5e:2e:8c:0b:c2:4c:6c:bb:72:83:4e:f5:40:5e:
                    22:03:0d:69:21:b0:ad:bd:fa:f9:33:59:bf:96:fa:
                    79:1a:b5:6f:c8:7c:5d:d5:90:e8:c2:f9:88:6b:dd:
                    76:77:5a:85:52:d7:81:de:ea:26:f0:da:2e:51:d8:
                    03:d6:88:f6:be:f1:1e:15:d5:86:a2:45:43:2a:6c:
                    88:59:cd:6e:13:06:2f:59:02:d8:48:26:d3:c9:93:
                    39:54:80:20:ac:34:87:e1:3e:be:b6:3c:b3:7d:ff:
                    61:e7:fd:57:d6:dc:23:a6:2d:f9:92:f7:32:b9:92:
                    16:83:ad:5f:60:94:1c:63:19:c2:32:ec:fe:1d:a3:
                    b0:50:14:0e:98:6d:20:39:9d:f5:06:e9:af:22:59:
                    7b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A9:0F:DA:58:FD:E6:51:D9:09:5A:B5:BF:18:A5:AB:E5:CC:FB:0D
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a9c::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:bb:58:f3:3d:8e:0f:57:88:58:e3:46:33:cb:fc:bd:5c:e0:
         d8:ba:17:69:0e:4b:63:80:be:27:a3:01:2e:d4:d1:9b:f4:c5:
         a8:2b:f0:c4:3d:c6:f3:31:fd:dd:27:9e:41:e7:65:18:4a:a9:
         b2:84:ef:32:1e:5f:66:15:35:3a:95:57:30:a2:7e:99:09:4e:
         ce:f4:8a:e6:bd:3c:69:f9:c4:35:98:8c:a7:69:79:1a:e1:0e:
         fe:6f:5e:44:cb:17:50:91:c2:5b:05:b5:2e:44:d5:1f:ab:14:
         ed:1b:f2:be:35:64:32:91:9d:b8:50:de:5b:c2:7e:3d:25:8d:
         61:28:11:b7:a8:e5:a3:9a:b9:27:c6:a9:50:b1:5f:d5:98:6b:
         b5:27:d1:9c:69:db:31:ac:f1:95:a4:07:a6:a3:96:83:3c:82:
         72:e3:7c:23:b4:2d:97:85:ba:fe:82:f0:f8:1f:d2:ed:bf:bd:
         96:9e:f9:5b:08:0e:ef:54:bf:4d:01:6a:98:fd:b4:4e:50:66:
         08:d2:26:e5:3f:5b:d7:27:80:81:cd:22:05:c4:ba:ea:60:f5:
         0a:af:e6:52:6b:eb:d7:bb:6c:c7:72:f7:c6:6f:cb:b8:0d:6f:
         3e:fc:b3:13:15:ac:dd:23:81:14:9c:88:49:16:4e:5a:39:1e:
         f5:43:17:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----