Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS199762.roa
File:                     AS199762.roa (raw, json)
Hash identifier:          xcjTnZYOwuSsvdkigo3RXjzjG6oiljnyrSPTJ1iZuMs=
Subject key identifier:   D3:16:6E:65:73:56:CA:95:79:CD:73:01:F7:E8:81:0B:52:98:00:D5
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       09262DC2FEBF0602C137BC3D6504B47DB36D9F88
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS199762.roa
Signing time:             Tue 11 Apr 2023 06:30:54 +0000
ROA not before:           Tue 11 Apr 2023 06:25:54 +0000
ROA not after:            Tue 09 Apr 2024 06:30:54 +0000
asID:                     199762
IP address blocks:        2a12:dd47:3900::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:26:2d:c2:fe:bf:06:02:c1:37:bc:3d:65:04:b4:7d:b3:6d:9f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 11 06:25:54 2023 GMT
            Not After : Apr  9 06:30:54 2024 GMT
        Subject: CN=D3166E657356CA9579CD7301F7E8810B529800D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:86:55:4c:ae:5d:cb:dd:0f:d3:12:a2:04:1d:
                    cf:ed:e1:71:bd:70:78:8f:c4:b3:f0:56:b7:48:e1:
                    c5:86:a6:e3:a2:b1:a6:52:b1:b2:39:bb:12:8a:c7:
                    db:93:ba:2b:28:52:e3:88:2f:60:ce:94:e5:e6:7d:
                    5c:f0:03:ec:a1:ac:37:34:e4:78:51:d0:e8:03:21:
                    e4:80:cb:0e:37:f0:90:ac:0a:da:a3:74:46:5d:43:
                    a2:60:f0:11:d0:cc:9c:84:26:e1:77:2c:4e:8e:06:
                    3a:3f:3f:8b:fa:02:e8:f5:af:98:b9:a0:eb:8a:67:
                    ad:ac:8e:fe:d7:0c:62:65:50:db:d4:83:d8:8d:cf:
                    bd:4e:df:50:62:b3:f9:c7:4b:59:d6:cb:2c:03:aa:
                    cb:8e:1a:ab:ca:b0:74:4d:de:94:c7:e1:fd:85:45:
                    46:ad:d7:6f:a5:89:d4:ff:57:4b:46:46:c7:29:6e:
                    0b:3d:de:b4:88:e0:0d:81:60:5e:18:71:26:81:83:
                    ca:24:d7:35:b5:f8:c6:5f:57:1f:bc:f4:9c:90:e2:
                    a4:7d:d3:c8:24:5a:2d:ae:24:e8:ca:1e:f9:d6:c2:
                    67:23:2a:f1:97:7d:ae:f7:73:fd:71:87:91:e3:87:
                    89:1b:ff:10:2b:44:6f:06:97:c7:60:9c:cf:04:88:
                    e0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:16:6E:65:73:56:CA:95:79:CD:73:01:F7:E8:81:0B:52:98:00:D5
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS199762.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3900::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:96:17:d9:01:55:a4:5f:1e:2b:a5:0b:4b:98:13:36:5d:4e:
         dd:d7:0f:00:48:0f:51:5f:78:e6:e0:cd:00:e1:7a:25:89:cc:
         05:ed:d9:1e:b0:84:d2:6a:bd:53:10:66:56:c7:56:9e:dc:08:
         5e:49:a6:0b:30:33:c5:b1:5b:3d:e8:1a:6e:cb:16:c9:52:fd:
         5d:d2:f7:a6:cf:6d:45:bc:68:03:de:88:15:54:6a:91:64:b5:
         3a:95:f5:6b:3a:4b:62:3b:03:47:18:62:3d:44:fc:ef:aa:28:
         f3:5b:8f:cd:5d:f8:45:ab:78:e3:49:04:e9:4c:ca:82:e8:51:
         f5:00:cd:e0:b1:4e:d6:59:63:ed:16:df:f5:d9:0a:4f:d9:d8:
         d4:ee:e9:d4:22:92:be:cd:62:e0:86:fb:a6:fd:0b:90:f5:ac:
         98:79:8e:fd:18:05:46:a7:7d:61:9a:2d:a7:6a:62:27:80:e6:
         19:0a:b6:35:da:43:48:ec:b5:6d:92:54:62:fc:36:2a:0b:ae:
         b1:22:d3:4f:fd:3c:6b:91:b3:23:34:b6:ab:b8:11:70:7a:86:
         92:07:a7:46:3f:b5:78:7b:cf:b8:17:33:83:fe:63:af:90:e8:
         9b:0c:e8:22:f9:b0:6b:de:1d:e7:48:bb:3f:22:fe:fa:16:aa:
         e0:00:4c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----