Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS200021.roa
File:                     AS200021.roa (raw, json)
Hash identifier:          1AMBC3WlLhJjMOBAh7fHb8TL71VOeewe7MkZcSP+B2E=
Subject key identifier:   41:C9:EC:CD:23:5C:AB:A7:66:91:BE:12:19:6E:0D:1B:2F:2F:24:B1
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       4E31E18FB38960AF885875CA554F1645B8D47FA0
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS200021.roa
Signing time:             Mon 10 Apr 2023 03:31:52 +0000
ROA not before:           Mon 10 Apr 2023 03:26:52 +0000
ROA not after:            Mon 08 Apr 2024 03:31:52 +0000
asID:                     200021
IP address blocks:        2a12:dd47:5c00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:31:e1:8f:b3:89:60:af:88:58:75:ca:55:4f:16:45:b8:d4:7f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:52 2023 GMT
            Not After : Apr  8 03:31:52 2024 GMT
        Subject: CN=41C9ECCD235CABA76691BE12196E0D1B2F2F24B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:75:5a:be:0f:cc:86:d3:12:78:60:e6:ab:b1:
                    6e:7b:0f:12:45:6a:45:cb:45:15:8d:95:51:cb:a5:
                    eb:d3:1d:70:18:df:bd:bb:b4:9a:e4:71:4e:cb:a6:
                    04:56:3d:5e:62:b8:28:84:8a:23:0e:39:58:48:95:
                    97:8d:52:18:6a:0d:84:1e:a0:eb:61:b2:3a:08:6f:
                    8a:1d:fe:c1:cf:8a:31:e2:95:4c:53:bd:dc:b1:a8:
                    2c:e7:b3:91:48:e2:cb:0a:5a:08:e9:ec:8f:ba:a5:
                    ce:0d:84:e1:73:1f:d9:c3:c1:53:e3:c8:53:da:c1:
                    52:1d:e9:b3:bd:ef:08:22:0d:3d:8f:b0:b7:23:eb:
                    4c:75:a0:69:c1:2b:5c:90:ef:9c:f4:42:c9:99:cf:
                    c7:09:54:76:3c:2d:0b:bf:51:50:c9:4b:b9:ec:7d:
                    72:82:02:ea:14:da:f8:5d:61:4e:15:1e:95:66:ea:
                    6e:d4:b2:b2:ae:bc:16:48:cd:23:fb:7f:5e:b8:f5:
                    74:19:03:70:e2:75:f8:c3:3e:af:12:59:c8:df:fc:
                    4a:8f:07:35:00:ed:a5:07:10:df:84:10:3b:9e:ee:
                    13:b6:49:83:3a:93:0b:db:a1:c4:f5:95:f3:a8:45:
                    52:a2:6e:08:d1:c1:2a:3e:76:67:b0:5f:e2:ab:58:
                    63:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C9:EC:CD:23:5C:AB:A7:66:91:BE:12:19:6E:0D:1B:2F:2F:24:B1
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS200021.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:ca:33:c5:97:82:32:85:4b:a1:f7:73:58:b3:a8:38:01:7e:
         41:45:cc:02:e7:43:22:2d:18:2f:24:bb:f3:f0:e2:fc:4b:10:
         70:1b:b6:3a:3d:53:b6:e9:71:20:2f:da:52:50:8f:cb:43:83:
         84:aa:a9:76:0b:13:8d:3e:0d:38:41:2d:83:b3:32:f6:21:28:
         00:6a:59:21:df:55:b1:ed:e1:af:99:9a:4a:16:7c:ee:37:89:
         f9:0c:94:ce:a3:77:20:9b:03:82:ce:ef:ce:a1:f1:1f:ce:1e:
         eb:c5:9f:55:7f:e6:7d:5a:f7:ce:00:8b:e6:7e:f6:b6:6f:07:
         08:69:f6:c2:0b:bb:19:a8:07:5e:52:e5:d5:e3:d7:19:41:50:
         9f:ad:ed:09:57:19:a7:5d:05:34:ef:e1:4c:bd:0a:68:f6:b9:
         83:d6:b9:3e:b3:20:e8:26:70:90:1c:8c:c3:58:39:e4:56:ea:
         94:9c:26:41:cd:8f:6f:80:bb:55:a4:b1:23:d8:9e:0c:19:10:
         f8:8e:92:f3:36:37:3f:3b:e4:a8:6d:e3:fc:e2:01:d3:62:a0:
         b2:99:a5:ca:42:0c:3b:47:e2:d4:c7:b5:8b:e6:5d:bc:8b:f1:
         d2:77:b1:01:e5:f4:59:2e:e8:94:b0:e4:38:4d:14:0f:f0:67:
         aa:3a:22:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----