Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS200160.roa
File:                     AS200160.roa (raw, json)
Hash identifier:          MaFiFLCtIzs6K2vkyW/DgCr0vyrbpMf/ByxDtTL7MiI=
Subject key identifier:   EA:6C:DB:E9:75:66:57:3A:83:C8:8F:67:BB:DF:1F:0D:5F:62:7B:4A
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       7DABAE75628AA3939286CC535F3506D1BBFA2D67
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS200160.roa
Signing time:             Mon 10 Apr 2023 03:31:48 +0000
ROA not before:           Mon 10 Apr 2023 03:26:48 +0000
ROA not after:            Mon 08 Apr 2024 03:31:48 +0000
asID:                     200160
IP address blocks:        2a12:dd47:5200::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ab:ae:75:62:8a:a3:93:92:86:cc:53:5f:35:06:d1:bb:fa:2d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:48 2023 GMT
            Not After : Apr  8 03:31:48 2024 GMT
        Subject: CN=EA6CDBE97566573A83C88F67BBDF1F0D5F627B4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:93:68:e5:f2:c3:bd:6a:35:31:17:ef:c1:08:
                    18:47:4c:cb:5c:d0:83:de:9a:ef:35:7c:a1:57:32:
                    c3:2a:5c:4b:73:59:ad:ff:13:dc:d5:21:70:f4:f1:
                    3b:95:45:dd:c0:e9:2f:84:c2:62:d3:2f:96:af:65:
                    4b:26:d5:4d:f7:3a:45:34:4b:21:cd:f3:54:3f:ef:
                    38:c5:6e:11:4e:fb:fd:98:1a:b5:f5:a1:b5:0c:39:
                    b7:f1:f7:e6:52:3f:36:a6:60:08:e6:39:ad:14:eb:
                    4f:23:bf:8e:a0:7c:71:8e:cd:9b:c5:d8:79:c4:f6:
                    d3:2e:3b:3e:15:e9:19:ca:7c:b5:ca:75:c8:83:d7:
                    3f:ab:a9:cd:5f:51:08:e4:d1:f5:ef:04:a8:32:86:
                    f8:41:cb:eb:d1:8e:6a:52:2a:42:9b:17:60:9e:9f:
                    f1:8b:b7:9d:b8:38:da:f3:5d:c8:ee:03:d9:89:29:
                    9a:2e:c2:f5:43:8c:10:24:ce:c0:26:bd:11:b8:c9:
                    80:0c:2d:c7:f5:70:ef:d5:2f:12:0f:0f:02:9f:07:
                    ca:ea:31:13:01:18:ae:a3:da:54:d2:3d:37:ff:65:
                    44:59:17:ee:df:d2:78:f3:6b:fc:c5:e8:1e:0c:11:
                    b7:32:f9:83:20:b7:a5:44:9a:5c:c1:0a:b8:f4:32:
                    db:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6C:DB:E9:75:66:57:3A:83:C8:8F:67:BB:DF:1F:0D:5F:62:7B:4A
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS200160.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5200::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:96:c3:00:06:fb:2f:c0:b9:a3:45:67:ca:a6:81:9a:9b:e5:
         ae:0d:b2:2b:c8:55:0a:9d:5e:7c:3a:4b:c1:5b:66:57:c0:35:
         95:01:a5:86:d1:d0:02:2e:1a:8e:22:10:b8:57:59:e6:ec:49:
         52:1e:b2:95:d5:15:f8:7a:01:da:03:37:56:a8:9c:bd:22:a6:
         8d:3c:ef:0c:db:57:b8:6a:07:ad:a6:1d:6b:18:31:e7:90:f0:
         14:7f:7f:06:0c:76:d7:52:db:e0:ca:20:1c:b8:28:8a:ab:66:
         a8:4e:95:4a:c2:87:99:c7:fd:d1:be:c1:da:19:37:ca:d4:ac:
         a5:d1:3e:cc:c9:a4:66:35:c5:6f:43:90:f8:59:32:94:67:54:
         51:2c:1d:92:6d:d7:33:23:8d:a5:98:ca:cd:27:66:e4:0a:37:
         5e:55:6a:15:97:d9:5a:c7:c7:cf:41:ec:fa:d9:14:d0:4e:66:
         12:f4:46:01:90:0c:81:f4:8a:72:df:26:66:84:d6:d2:f5:46:
         ac:3d:fd:eb:0c:7d:a6:c8:b6:c4:c2:21:a0:41:35:4e:5f:c3:
         cf:b7:de:b3:e8:fd:0f:e1:88:bd:6b:d7:03:1c:7b:e5:16:47:
         41:83:e9:02:bd:75:a4:e6:10:b3:84:c0:da:04:50:ba:d2:f9:
         b2:8d:4f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----