Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS199304.roa
File:                     AS199304.roa (raw, json)
Hash identifier:          E5Im2XlPVYdrk1qrQbRBwj6MN5RAhqFHt2EGGzUcKvE=
Subject key identifier:   EA:CF:4A:27:84:E8:F0:2C:27:FE:C4:6A:79:B8:37:8F:C7:BA:1D:AC
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       0D220A6E4E770FE0401DDB5BBF63C1C28F8F8674
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS199304.roa
Signing time:             Mon 10 Apr 2023 03:31:45 +0000
ROA not before:           Mon 10 Apr 2023 03:26:45 +0000
ROA not after:            Mon 08 Apr 2024 03:31:45 +0000
asID:                     199304
IP address blocks:        2a12:dd47:df10::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:22:0a:6e:4e:77:0f:e0:40:1d:db:5b:bf:63:c1:c2:8f:8f:86:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:45 2023 GMT
            Not After : Apr  8 03:31:45 2024 GMT
        Subject: CN=EACF4A2784E8F02C27FEC46A79B8378FC7BA1DAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:85:20:24:6f:ca:4b:f5:5d:84:5c:53:15:5c:
                    d1:15:ee:82:1b:50:ff:8e:eb:77:e8:25:e7:20:8b:
                    34:c5:96:84:f0:1c:f8:a4:d6:24:d3:f8:b1:31:90:
                    e4:5c:8d:bb:90:c7:fe:7f:1e:57:f7:4e:e8:0a:6b:
                    85:73:b3:7c:95:7d:73:b9:66:12:a9:78:f6:49:2a:
                    d9:55:0a:35:71:35:a7:b1:d2:42:fd:b3:a0:43:c6:
                    5a:9a:dc:b7:97:df:76:31:7f:42:aa:dd:eb:bb:df:
                    f7:6c:05:9d:d3:52:e7:de:2e:2a:b4:b9:2e:89:ae:
                    b6:3b:68:0e:16:42:5e:c8:2e:da:fc:21:82:aa:a2:
                    53:e2:df:e8:84:93:2e:bb:fa:a4:2c:f1:99:ce:69:
                    11:35:4f:24:c8:e0:bd:55:fd:eb:01:c5:e6:5e:94:
                    60:47:d7:2c:f9:c3:72:93:bd:e7:f7:e3:a7:9b:c2:
                    e4:10:bd:e0:fa:e3:7f:12:f3:0c:cd:1b:ef:03:6c:
                    59:9e:ba:ce:1d:65:fd:41:5e:5c:65:d8:bc:fd:b5:
                    71:ac:24:16:87:63:16:19:23:c9:58:a4:3c:dc:d4:
                    d6:a6:3d:45:25:1e:d5:5b:75:ff:aa:78:78:65:20:
                    90:2c:bd:d3:76:23:ac:72:15:cd:39:08:69:ca:c5:
                    51:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CF:4A:27:84:E8:F0:2C:27:FE:C4:6A:79:B8:37:8F:C7:BA:1D:AC
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS199304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:df10::/44

    Signature Algorithm: sha256WithRSAEncryption
         d1:64:ac:a7:ef:ab:37:3f:f5:b4:b5:5d:35:da:93:56:de:0d:
         9f:19:04:67:f3:0b:d7:46:8a:f5:3b:c2:39:2d:1e:68:99:79:
         07:ff:a3:75:66:5d:96:cf:b2:6e:24:ed:fa:52:d1:8e:ac:b8:
         83:74:e8:e0:0b:a4:18:e2:c3:32:a0:df:24:13:49:7f:5b:a8:
         33:29:ec:4f:a1:c3:64:30:fb:5c:f7:f6:aa:5b:1b:c6:96:e3:
         d0:29:eb:8e:c4:ae:3b:e1:1b:e0:29:81:0e:37:ad:77:63:58:
         c6:a7:e4:86:92:58:a6:5a:28:3b:bc:00:f6:fd:84:00:6e:ef:
         c3:56:3e:5e:ee:3e:ac:8a:cf:61:66:61:a8:36:e2:b0:6a:6a:
         8e:ff:f9:c0:76:3b:2a:ef:e7:55:47:1b:d4:56:f0:e8:74:2c:
         8b:53:ab:6f:ca:a3:15:6c:3d:9b:da:93:9a:f6:f2:1c:ad:d9:
         fe:d7:93:b9:1c:45:54:31:b4:9e:2b:1f:75:9b:aa:6d:d4:1c:
         bb:10:f5:10:bd:41:42:d5:23:5a:58:aa:c7:f4:91:0e:e7:0a:
         5a:c5:a4:ed:6d:15:a3:3e:02:8a:39:33:93:a6:10:c4:7d:21:
         68:d1:8c:cf:68:f0:12:36:40:a1:97:56:15:cb:e7:21:24:95:
         a0:38:84:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----