Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS199299.roa
File:                     AS199299.roa (raw, json)
Hash identifier:          03DYAl+GRKuTd59BarynpAbCN+MwFJY/YCL5GcrwJZo=
Subject key identifier:   3B:8D:AE:05:44:A4:13:36:55:55:1C:E9:84:1F:1D:D0:64:5C:BF:C7
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       0EAD9DA854666CBF09A62448880C0D6DA726473C
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS199299.roa
Signing time:             Mon 10 Apr 2023 03:31:44 +0000
ROA not before:           Mon 10 Apr 2023 03:26:44 +0000
ROA not after:            Mon 08 Apr 2024 03:31:44 +0000
asID:                     199299
IP address blocks:        2a12:dd47:f500::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ad:9d:a8:54:66:6c:bf:09:a6:24:48:88:0c:0d:6d:a7:26:47:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:44 2023 GMT
            Not After : Apr  8 03:31:44 2024 GMT
        Subject: CN=3B8DAE0544A4133655551CE9841F1DD0645CBFC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6d:cd:44:ba:ec:64:ab:6b:e5:0a:dc:aa:82:
                    dd:af:22:11:d2:0a:2f:f9:3c:8f:e5:38:cf:3d:86:
                    e6:57:9d:35:12:4b:c9:f5:d6:77:61:d3:c5:f1:a8:
                    12:03:1a:b5:35:d1:99:6c:a3:81:31:b7:05:3e:c2:
                    81:79:3f:d5:a7:16:1f:5c:c0:5b:cc:bb:47:32:d7:
                    da:f0:6e:9b:98:0c:99:4d:73:0b:ad:31:4f:5e:aa:
                    44:ba:e7:08:a2:f5:d4:bf:67:4b:3b:ba:f2:fa:7e:
                    53:8d:d4:3f:4e:13:c5:1c:f9:a7:48:90:e0:cd:a4:
                    75:b8:25:2f:0e:d7:ff:66:30:14:64:51:92:81:c8:
                    ac:2a:d0:39:13:8e:c9:bc:cf:8c:8e:40:0f:e4:b3:
                    73:d8:36:21:30:f9:e5:99:91:8f:f7:ef:7d:dd:99:
                    6d:7c:d7:45:22:4f:d8:b3:42:03:50:93:35:0c:e0:
                    ff:68:10:ee:d4:05:60:a2:c2:ad:b3:12:2b:5a:12:
                    7e:39:92:95:7f:33:83:77:8f:74:7f:7b:7e:09:de:
                    fa:4c:34:02:2b:67:46:e2:3d:0a:13:f6:1a:0c:0c:
                    d6:9b:05:d5:93:cf:a9:f7:bb:63:68:db:a3:f4:3b:
                    9c:e9:12:13:55:f0:39:70:8f:22:87:8b:73:12:40:
                    7d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8D:AE:05:44:A4:13:36:55:55:1C:E9:84:1F:1D:D0:64:5C:BF:C7
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS199299.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:f500::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:d7:92:88:92:d4:43:bf:f4:1f:03:bd:33:96:5b:da:53:0c:
         c7:ee:58:2f:34:62:38:5d:b1:8e:95:2e:18:c6:70:93:f8:69:
         0e:4e:27:9d:a9:b0:5b:7c:13:1b:0e:06:da:a7:62:d1:41:e0:
         1a:bc:1d:d2:c5:75:bd:6b:63:11:e3:3d:71:ce:55:a0:cc:b3:
         92:dc:4e:3f:61:2f:51:b5:74:ae:15:80:57:91:63:1e:ae:54:
         2a:b1:b1:a3:da:f4:7f:1e:29:47:37:ce:18:37:bc:cd:56:79:
         b2:51:24:00:dd:fd:6b:b7:e0:00:0a:1e:1a:b1:8c:05:43:82:
         d6:76:cd:2b:66:15:88:fb:bc:ed:45:de:55:44:d0:c2:6b:91:
         d7:a1:f3:37:55:df:58:dc:ac:9d:f0:4c:de:49:fc:65:60:32:
         47:d4:d8:8e:a7:12:d8:42:1d:9f:ad:43:65:8d:c3:83:92:82:
         49:99:52:0b:44:c4:0c:60:b8:7c:e4:8d:a5:83:36:7d:64:03:
         f5:49:b0:85:3d:d3:ec:d2:e5:4f:05:02:fd:3b:a7:30:6b:95:
         3d:21:a2:79:78:5e:70:4f:17:54:eb:4f:5d:82:ec:85:c0:55:
         99:82:79:3f:4c:91:9c:46:f1:f0:a3:7e:78:84:62:cf:01:bf:
         81:9e:e8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----