Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS200529.roa
File:                     AS200529.roa (raw, json)
Hash identifier:          LWCt8HChGOmsU/Spfla1glxwcGTZHEqVG/i0XdPUrVI=
Subject key identifier:   B9:40:80:F2:D2:F8:DF:84:8F:51:16:5B:C1:CD:63:D3:71:8B:B7:34
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       1A961415E06C456F974A95D6BE936793740603F4
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS200529.roa
Signing time:             Mon 10 Apr 2023 03:31:42 +0000
ROA not before:           Mon 10 Apr 2023 03:26:42 +0000
ROA not after:            Mon 08 Apr 2024 03:31:42 +0000
asID:                     200529
IP address blocks:        2a12:dd47:d500::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:96:14:15:e0:6c:45:6f:97:4a:95:d6:be:93:67:93:74:06:03:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:42 2023 GMT
            Not After : Apr  8 03:31:42 2024 GMT
        Subject: CN=B94080F2D2F8DF848F51165BC1CD63D3718BB734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ef:04:b0:ca:ed:ba:e7:20:86:16:ca:2b:15:
                    a9:5a:cf:34:85:5e:cc:69:1a:40:b1:0e:1e:1b:6d:
                    ab:56:c1:41:91:9a:a9:24:d4:b5:a6:79:dd:a3:de:
                    e4:ea:3a:8f:3e:33:da:2b:35:27:a8:ee:99:c6:e6:
                    28:cd:8a:f2:ce:fa:6e:2d:43:66:51:dc:55:92:29:
                    af:31:23:48:f7:05:06:b1:a5:0c:7d:b6:66:23:22:
                    35:fc:78:f6:6c:54:14:2d:e9:cd:04:dc:81:08:f6:
                    55:e1:f3:02:db:8b:68:89:e1:e5:18:ae:f4:9f:05:
                    b7:42:d8:11:92:8b:24:b3:a7:4a:3b:6a:c1:87:53:
                    38:bc:8f:21:de:2a:34:b3:06:9a:76:19:a1:97:aa:
                    10:0c:41:6d:6e:07:1d:7a:23:37:2c:83:ce:7a:95:
                    58:ec:e2:5d:e1:63:f5:21:16:76:0f:42:cd:61:ec:
                    c2:48:77:70:a2:70:56:a7:e1:0f:53:6e:46:1c:9f:
                    6b:62:04:18:bf:ca:56:b7:4b:fb:83:1e:91:03:81:
                    a8:79:d5:c8:ee:d0:ea:68:fa:c6:6b:1a:00:ad:6d:
                    a1:2b:06:1d:c0:62:c6:7e:71:23:29:fd:c2:e2:0e:
                    5f:fd:81:3b:22:a7:f4:22:2e:ea:e5:21:3d:06:ef:
                    6a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:40:80:F2:D2:F8:DF:84:8F:51:16:5B:C1:CD:63:D3:71:8B:B7:34
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS200529.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:d500::/40

    Signature Algorithm: sha256WithRSAEncryption
         62:91:43:a2:29:b1:1c:65:3a:f9:e6:bd:8e:a7:66:a7:6f:e2:
         03:6f:bc:9e:d4:82:cf:9c:d6:1a:45:0c:20:21:99:7a:55:79:
         ff:dc:cb:80:4d:08:0a:69:2c:bf:2a:cb:84:93:e3:6f:53:54:
         0d:8c:62:a3:be:0a:ed:4f:16:0e:79:3d:3a:1c:9b:4b:73:36:
         cf:15:d2:75:f6:ec:bd:c7:be:4a:0c:44:13:ee:63:d3:81:00:
         f1:b6:7e:5b:4d:47:60:f8:43:64:d7:24:5f:17:d7:24:9b:84:
         8d:46:b0:d9:06:ec:26:d7:45:d4:ca:48:ba:f3:af:fe:37:49:
         2f:03:4c:78:a3:92:5e:b4:be:47:0b:23:3b:67:46:64:b0:51:
         6a:2d:15:82:ee:15:1b:06:9b:cf:c1:7f:41:fd:89:30:62:b7:
         45:63:96:11:54:d1:32:af:f1:60:57:6c:26:d0:fc:84:d4:6c:
         92:52:c1:4a:b1:eb:96:8f:3d:9a:07:eb:d4:1b:ae:3e:53:b8:
         94:b2:b0:a5:32:f2:5a:0a:a6:de:c2:98:89:ec:df:0a:be:e0:
         77:d8:e0:b2:24:13:da:68:fa:a6:cb:8d:24:55:ea:52:5e:54:
         99:e3:21:ab:27:23:ad:50:ce:3e:65:04:dd:d8:cf:a5:1f:c3:
         9f:ab:c5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----