Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS200226.roa
File:                     AS200226.roa (raw, json)
Hash identifier:          oIbYxAA5j232LrVOYuFo7DBp3XZY6i0cz+9r6JkCY/I=
Subject key identifier:   31:11:13:35:D5:AD:5D:05:5A:BE:CB:07:13:88:F9:92:91:75:9C:5C
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       52030AED88288EE91068E55FAB5BA3F858750A99
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS200226.roa
Signing time:             Mon 10 Apr 2023 03:31:52 +0000
ROA not before:           Mon 10 Apr 2023 03:26:52 +0000
ROA not after:            Mon 08 Apr 2024 03:31:52 +0000
asID:                     200226
IP address blocks:        2a12:dd47:5e00::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:03:0a:ed:88:28:8e:e9:10:68:e5:5f:ab:5b:a3:f8:58:75:0a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:52 2023 GMT
            Not After : Apr  8 03:31:52 2024 GMT
        Subject: CN=31111335D5AD5D055ABECB071388F99291759C5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6c:ca:b2:09:ce:0f:42:08:96:ca:6e:29:73:
                    43:3e:b0:07:a7:ec:7d:32:99:2d:43:14:17:04:d5:
                    59:a6:df:6f:e1:98:12:46:09:ea:3b:c5:c8:11:6c:
                    d4:43:30:2a:d0:04:0e:c3:cd:d3:97:15:13:78:be:
                    33:36:05:d7:c5:34:62:93:8c:cf:ee:5d:d5:c9:85:
                    37:54:5a:91:f5:3b:32:6a:10:3c:9f:ff:30:6f:ed:
                    2f:41:97:c1:82:b4:ff:d4:1b:8e:8f:c4:d9:0d:88:
                    c9:c1:b9:49:dd:ec:7c:3d:e0:31:03:92:74:3f:ad:
                    1c:2e:b3:79:29:b1:53:c2:a4:89:ee:85:da:97:e3:
                    c9:2c:0b:22:6e:dd:d9:7a:51:6e:74:a8:af:a6:26:
                    7d:1f:da:d5:a3:14:c9:33:85:af:65:22:38:71:ef:
                    a2:59:52:c6:06:52:cc:ef:5c:fd:9b:55:80:6c:c9:
                    97:5e:45:9a:fe:a9:35:cf:6a:10:50:00:84:21:a4:
                    7b:55:51:be:bf:f7:33:57:3b:96:d2:0a:cf:29:c8:
                    60:3a:15:38:81:b4:59:49:df:76:eb:41:d3:bb:d9:
                    ff:4c:1b:56:01:17:65:0e:64:0e:a0:10:94:4f:7e:
                    a3:fa:fe:ac:9c:95:2f:83:1d:d5:dc:5d:9b:d4:1e:
                    ab:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:11:13:35:D5:AD:5D:05:5A:BE:CB:07:13:88:F9:92:91:75:9C:5C
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS200226.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5e00::/44

    Signature Algorithm: sha256WithRSAEncryption
         97:43:96:a5:70:7d:b1:2b:78:3c:3d:e7:1d:c0:b2:90:60:68:
         54:14:3d:62:ce:bc:0b:95:6f:e5:cb:7a:9f:aa:1e:2b:91:51:
         32:7b:7f:78:ee:99:54:1a:6c:66:a1:3f:30:3a:af:34:66:4c:
         0a:96:8b:8b:4d:41:cd:d3:e3:40:a6:7a:d5:45:06:b9:2e:00:
         6f:ad:ea:41:02:d0:c2:c6:6d:18:5b:40:d0:15:bd:a4:70:18:
         5e:6b:17:71:dc:23:7a:3f:21:5b:b3:d0:98:f0:78:30:00:e7:
         69:0a:04:51:ae:1b:f2:27:87:7f:98:53:99:4d:a3:2a:83:94:
         13:45:7f:e2:c6:c7:0f:c5:85:c8:e0:31:0e:76:54:aa:0d:d3:
         4b:c5:34:c4:a6:0a:ed:57:44:af:c2:de:73:3d:f9:bd:16:fe:
         90:f4:b8:22:38:5e:f3:b1:90:54:e2:71:27:4f:a1:ce:49:17:
         61:5c:b9:48:36:01:d1:91:26:8d:83:62:98:6e:b4:68:21:c7:
         3b:bf:4b:48:82:8e:7e:f1:07:45:51:d1:2c:7f:23:4b:81:89:
         2e:de:ce:8c:18:4e:d8:27:b4:ae:d6:55:ba:4f:ae:90:c5:56:
         94:44:a6:f8:54:03:f4:44:ac:d7:93:87:36:1b:04:82:14:df:
         e0:8d:f1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----