Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS149296.roa
File:                     AS149296.roa (raw, json)
Hash identifier:          mqnyal9xiyAlifDEdodYrcLbbKSnfs1cUB0cQioLtgw=
Subject key identifier:   DC:3A:30:19:F1:BD:04:AB:64:FA:E8:C3:4B:D3:28:92:C4:92:8A:D6
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       114085DA54DCA383B1D36A6A2FA65CF3E15C87E7
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS149296.roa
Signing time:             Mon 10 Apr 2023 03:31:31 +0000
ROA not before:           Mon 10 Apr 2023 03:26:31 +0000
ROA not after:            Mon 08 Apr 2024 03:31:31 +0000
asID:                     149296
IP address blocks:        2a12:dd47:82c0::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:40:85:da:54:dc:a3:83:b1:d3:6a:6a:2f:a6:5c:f3:e1:5c:87:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:31 2023 GMT
            Not After : Apr  8 03:31:31 2024 GMT
        Subject: CN=DC3A3019F1BD04AB64FAE8C34BD32892C4928AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e6:d7:61:06:4d:e5:fb:c1:a3:68:1f:46:29:
                    84:11:ad:51:73:30:74:e1:27:d9:c7:1d:d1:fe:7b:
                    b5:2d:70:d0:59:ce:d5:92:6d:ce:44:d5:63:cf:e7:
                    37:1a:df:26:72:f4:23:08:a9:ec:7f:e9:36:e4:76:
                    05:6a:02:cd:2e:92:86:d6:14:ed:66:97:22:84:d7:
                    8e:c3:6e:ce:e8:de:4e:93:cf:ad:14:70:47:f0:5d:
                    e8:bf:ec:87:14:a7:4f:05:83:69:c7:e8:1c:fc:1e:
                    d1:de:b5:12:09:d6:9c:d3:23:a2:c8:ab:b9:d9:db:
                    c9:32:0c:e3:c8:cf:10:4e:ea:32:e6:dc:b2:52:a8:
                    bb:29:af:71:65:c5:e5:80:88:8b:e7:70:e0:3b:61:
                    75:f4:3e:ba:f2:85:4e:01:de:40:59:f7:6e:70:d2:
                    92:3c:9b:0e:a7:f5:b8:67:11:26:6b:63:46:8b:da:
                    f8:be:d5:ea:ad:71:e9:ca:05:79:dd:77:f5:64:42:
                    9c:d4:3c:89:c1:c3:1b:4d:28:14:4a:b8:db:5f:c4:
                    48:d0:49:c7:3d:79:8c:da:d9:e5:67:cb:75:87:6f:
                    fc:06:42:ce:2b:91:86:22:cd:5f:fc:38:44:af:38:
                    e1:b4:7b:22:f9:3d:49:a1:ac:0c:3e:23:a0:f8:b2:
                    a1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3A:30:19:F1:BD:04:AB:64:FA:E8:C3:4B:D3:28:92:C4:92:8A:D6
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS149296.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:82c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         70:2f:04:c6:d8:29:9c:cb:eb:f4:4b:5a:31:a6:60:74:00:c4:
         b4:00:ad:d4:09:af:fb:a7:7b:a5:3f:a3:73:ab:40:c1:2b:3f:
         f5:23:3f:48:7d:2e:b5:33:9f:01:d0:8f:db:c4:7d:cd:b3:b3:
         a8:1a:1e:a2:21:78:3a:e4:6b:51:21:21:7e:97:3f:af:54:fd:
         17:b6:a7:d7:03:90:f7:00:e5:eb:14:3e:1a:44:ee:bd:a9:e8:
         cf:05:50:3c:d0:02:4e:f7:f0:5c:eb:d8:e5:74:d9:18:f9:90:
         57:cb:59:e3:05:03:bd:3c:88:40:aa:f4:49:63:6f:3c:10:c7:
         69:e7:a2:cf:44:eb:88:7f:1c:ef:73:f2:80:51:08:20:78:56:
         32:57:c6:2c:7b:b0:ec:17:b8:91:df:ca:b5:41:78:13:a2:ed:
         53:4d:67:ac:67:a3:09:a8:cb:7f:73:f0:34:ac:a0:e4:81:c5:
         79:78:4a:90:6c:dc:23:3a:95:84:8a:da:39:d0:df:b2:88:52:
         99:cd:d2:74:da:1e:38:76:54:93:1b:e4:39:11:5c:49:ee:7a:
         de:5d:ab:00:30:6a:49:3d:f1:9d:26:6f:cd:f3:36:63:91:85:
         0f:30:41:4c:04:ab:60:f4:49:85:ee:d3:0c:5a:c8:61:2e:56:
         5b:5c:61:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----