Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS200579.roa
File:                     AS200579.roa (raw, json)
Hash identifier:          /P9+7Md0J2XZwe/WIA2PCu0dLLd4/V67RkArYnsNHro=
Subject key identifier:   A7:76:C8:27:1F:46:A1:10:26:44:92:18:2A:D6:91:83:87:7D:E4:4C
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       59098A1FBD87C86BD819F77213945E0C312BF885
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS200579.roa
Signing time:             Mon 10 Apr 2023 03:31:50 +0000
ROA not before:           Mon 10 Apr 2023 03:26:50 +0000
ROA not after:            Mon 08 Apr 2024 03:31:50 +0000
asID:                     200579
IP address blocks:        2a12:dd47:8700::/40 maxlen: 48
                          2a12:dd47:d000::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:09:8a:1f:bd:87:c8:6b:d8:19:f7:72:13:94:5e:0c:31:2b:f8:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:50 2023 GMT
            Not After : Apr  8 03:31:50 2024 GMT
        Subject: CN=A776C8271F46A110264492182AD69183877DE44C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:e9:c9:91:ad:98:35:77:f7:d5:f7:fc:d1:
                    eb:f5:7f:fc:cd:1f:68:db:79:5d:89:90:d9:f4:df:
                    65:85:20:12:c3:35:58:c1:cd:99:5d:35:8a:15:94:
                    7f:8e:c6:7b:e9:26:a3:50:ee:72:d9:53:85:fd:58:
                    5b:d6:df:bc:9a:98:56:32:a8:f2:ba:11:4f:3a:7a:
                    af:3d:81:6b:00:eb:67:2b:c1:8e:d8:85:a0:b1:27:
                    e6:cd:51:61:44:c9:ea:3a:9d:45:ee:00:34:91:71:
                    96:89:82:01:e1:51:a4:8e:20:47:cc:bd:07:c5:7f:
                    2a:93:2b:8d:f1:33:b6:bf:7f:61:21:5f:5a:f4:28:
                    06:b5:0a:44:b1:39:25:1a:e4:6e:96:76:a5:01:4c:
                    0d:5b:e8:d9:c9:20:5c:f2:64:00:c1:b4:37:f5:0c:
                    2c:c5:cf:8a:1f:da:72:e7:94:23:81:78:ff:53:d3:
                    03:d0:01:63:73:90:7f:e6:83:c5:2d:4e:20:40:3e:
                    51:83:30:91:96:b0:11:f7:f2:93:ed:1c:2f:b9:cc:
                    0c:8c:9b:73:19:a5:22:c7:0e:3b:b5:3b:f5:5d:da:
                    0c:5d:09:fc:bc:e5:f4:c6:18:8f:a2:4d:59:b7:61:
                    5b:a6:99:fb:dc:96:1a:29:5d:88:d1:a2:0a:34:1c:
                    5d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:76:C8:27:1F:46:A1:10:26:44:92:18:2A:D6:91:83:87:7D:E4:4C
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS200579.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8700::/40
                  2a12:dd47:d000::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:d2:49:cd:7e:40:c8:f5:76:94:a7:85:7f:4c:ab:aa:04:4c:
         39:9d:a0:3e:39:fa:f5:f7:8e:aa:75:07:2e:ab:40:cb:5d:db:
         8f:c9:e0:73:67:b0:d5:31:f2:3f:f6:6a:dc:97:6e:e7:a5:df:
         9f:02:bf:a8:fc:05:85:fe:1c:21:bf:07:28:15:dd:c9:61:06:
         7f:2d:89:1c:50:50:78:3a:ee:37:77:90:f9:e5:6c:42:5e:95:
         b8:74:cf:f6:d9:c8:8d:78:86:bf:e0:81:c8:f8:c3:74:15:c3:
         14:4a:9b:fa:ba:b9:42:84:64:0f:a7:f4:84:4e:2a:09:0a:67:
         b7:6b:6c:d2:46:5a:35:72:7f:61:6c:d9:af:ae:53:19:77:3f:
         41:a1:8c:63:44:00:fc:65:41:80:9d:66:00:6a:e8:00:23:90:
         d4:78:a7:95:40:4b:fa:8b:d8:1f:db:5f:74:2b:c9:8c:fb:72:
         d8:ae:89:8d:8c:44:f3:6e:f6:0b:17:2b:eb:b9:06:8a:b8:f2:
         39:6a:39:64:55:00:16:71:37:e9:6b:3e:7e:94:7f:2e:d2:ca:
         ac:73:30:58:e0:26:93:1f:82:ed:be:66:75:38:b0:2b:84:61:
         e7:ee:2e:c8:b8:2e:28:f8:9b:fc:2b:a5:12:92:54:a7:b0:41:
         b8:7b:7e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----