Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS199693.roa
File:                     AS199693.roa (raw, json)
Hash identifier:          wxlednqFlbOk2xzz+vyKm9948iBaJ5pKqAtUOxkLsNw=
Subject key identifier:   89:68:51:F7:1B:BF:48:8E:EE:1F:B7:37:B5:DD:F6:7F:F1:03:0C:2E
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       158C83857CEE56EC7017FC51C8FD8BAA3A936E52
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS199693.roa
Signing time:             Mon 10 Apr 2023 03:31:39 +0000
ROA not before:           Mon 10 Apr 2023 03:26:39 +0000
ROA not after:            Mon 08 Apr 2024 03:31:39 +0000
asID:                     199693
IP address blocks:        2a12:dd47:da00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:8c:83:85:7c:ee:56:ec:70:17:fc:51:c8:fd:8b:aa:3a:93:6e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:39 2023 GMT
            Not After : Apr  8 03:31:39 2024 GMT
        Subject: CN=896851F71BBF488EEE1FB737B5DDF67FF1030C2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f2:a5:79:35:90:85:85:f0:1f:d9:ca:e7:47:
                    aa:cf:ab:2b:a9:d5:d0:cc:63:8c:f3:e0:01:ab:0f:
                    50:85:53:a7:01:57:54:ac:ac:f6:35:64:fb:bd:c1:
                    7c:7a:cd:40:7e:a0:82:7c:d3:fc:4f:1f:29:41:67:
                    37:1a:1f:81:6f:81:7f:b2:2c:0f:f5:ee:8d:55:47:
                    e7:41:a6:c7:5d:ed:5d:61:c0:07:2a:03:c1:a8:df:
                    9e:8a:5a:9c:b1:81:2c:c1:68:27:8b:af:d4:2f:f6:
                    b5:35:1f:50:8e:1b:d8:b7:27:61:c8:55:9b:83:9b:
                    6e:58:88:14:8b:cd:9b:f6:d8:d0:6b:a7:75:06:95:
                    db:08:db:b3:4c:38:ec:2d:8a:6b:35:74:10:55:88:
                    50:5d:e6:89:19:f7:76:5f:c1:6b:61:7d:70:84:a3:
                    1d:48:65:cc:7f:02:c7:90:b2:b0:0f:d2:cc:e2:17:
                    7c:d8:70:59:0c:22:95:d0:cf:07:ac:66:e6:7b:9b:
                    fd:47:90:3a:59:dd:63:4d:68:90:b0:d6:2d:d9:1b:
                    da:eb:5f:2f:08:9b:c4:51:64:49:91:73:cf:60:1b:
                    3b:74:c1:66:de:3c:10:6f:24:b4:7c:f0:91:85:54:
                    1b:3e:1f:35:95:57:41:d8:07:cc:5e:f7:dc:66:7e:
                    e6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:68:51:F7:1B:BF:48:8E:EE:1F:B7:37:B5:DD:F6:7F:F1:03:0C:2E
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS199693.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:da00::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:7f:65:f0:64:71:e6:29:fc:f8:8e:73:a1:18:18:80:4c:d1:
         28:c5:72:9c:b5:b6:5e:b0:6b:86:d8:0d:34:af:10:83:39:2e:
         46:d6:50:df:16:09:30:dd:db:5c:be:0b:f6:7d:11:e2:b7:15:
         fd:ad:2d:0b:74:b2:01:f0:94:65:39:1c:dc:a2:cd:c9:a2:d5:
         ad:9b:90:97:ff:6f:2e:40:23:0d:96:4d:07:7c:50:09:52:61:
         89:4e:e9:ef:84:4c:f7:68:05:a0:90:aa:48:62:df:a2:d4:ab:
         5c:d6:57:53:b1:d9:cf:7a:9f:d6:d6:8a:79:8a:48:52:ae:48:
         d0:d0:c7:d7:6a:1f:5b:6d:bd:81:cc:35:ea:ff:25:2b:c1:3f:
         64:2d:fb:4d:0b:fb:46:34:fc:af:7b:3d:f3:a3:8f:c6:73:b6:
         79:b9:30:32:d5:3b:d4:2f:21:3d:b5:13:e0:1b:63:10:7b:38:
         e7:0a:95:e4:50:9a:f7:ed:58:c1:65:28:05:69:9c:ef:67:16:
         3b:71:e3:f3:9d:4b:d0:c1:e9:53:9a:69:13:e6:b2:32:33:a0:
         31:14:ac:4c:52:19:b0:b3:f1:16:b4:9d:9c:7e:06:87:4d:c2:
         06:ba:62:da:c9:cf:ad:35:c7:b8:64:1b:cf:91:0a:9c:ce:55:
         93:b1:ce:f3
-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIUFYyDhXzuVuxwF/xRyP2LqjqTblIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2MzlaFw0yNDA0MDgwMzMxMzlaMDMxMTAvBgNV
BAMTKDg5Njg1MUY3MUJCRjQ4OEVFRTFGQjczN0I1RERGNjdGRjEwMzBDMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8qV5NZCFhfAf2crnR6rPqyup
1dDMY4zz4AGrD1CFU6cBV1SsrPY1ZPu9wXx6zUB+oIJ80/xPHylBZzcaH4FvgX+y
LA/17o1VR+dBpsdd7V1hwAcqA8Go356KWpyxgSzBaCeLr9Qv9rU1H1COG9i3J2HI
VZuDm25YiBSLzZv22NBrp3UGldsI27NMOOwtims1dBBViFBd5okZ93ZfwWthfXCE
ox1IZcx/AseQsrAP0sziF3zYcFkMIpXQzwesZuZ7m/1HkDpZ3WNNaJCw1i3ZG9rr
Xy8Im8RRZEmRc89gGzt0wWbePBBvJLR88JGFVBs+HzWVV0HYB8xe99xmfuanAgMB
AAGjggGcMIIBmDAdBgNVHQ4EFgQUiWhR9xu/SI7uH7c3td32f/EDDC4wHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMxOTk2OTMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqEt1H2jANBgkqhkiG9w0BAQsF
AAOCAQEAZX9l8GRx5in8+I5zoRgYgEzRKMVynLW2XrBrhtgNNK8QgzkuRtZQ3xYJ
MN3bXL4L9n0R4rcV/a0tC3SyAfCUZTkc3KLNyaLVrZuQl/9vLkAjDZZNB3xQCVJh
iU7p74RM92gFoJCqSGLfotSrXNZXU7HZz3qf1taKeYpIUq5I0NDH12ofW229gcw1
6v8lK8E/ZC37TQv7RjT8r3s986OPxnO2ebkwMtU71C8hPbUT4BtjEHs45wqV5FCa
9+1YwWUoBWmc72cWO3Hj851L0MHpU5ppE+ayMjOgMRSsTFIZsLPxFrSdnH4Gh03C
Brpi2snPrTXHuGQbz5EKnM5Vk7HO8w==
-----END CERTIFICATE-----