Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS200866.roa
File:                     AS200866.roa (raw, json)
Hash identifier:          YVunAkRi2CiThpZV0KpP5ey4eM5ctplFLSbXwjQ6bHo=
Subject key identifier:   31:23:C4:D8:DD:82:B7:36:52:0E:03:32:E3:ED:E2:80:DA:8E:E3:70
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       4D2420405948048ECCA6DD37FDB2E085AA70712B
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS200866.roa
Signing time:             Mon 10 Apr 2023 03:31:48 +0000
ROA not before:           Mon 10 Apr 2023 03:26:48 +0000
ROA not after:            Mon 08 Apr 2024 03:31:48 +0000
asID:                     200866
IP address blocks:        2a12:dd47:81c0::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:24:20:40:59:48:04:8e:cc:a6:dd:37:fd:b2:e0:85:aa:70:71:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:48 2023 GMT
            Not After : Apr  8 03:31:48 2024 GMT
        Subject: CN=3123C4D8DD82B736520E0332E3EDE280DA8EE370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:02:a2:66:4d:99:1f:aa:95:a1:c2:0f:0c:ef:
                    a5:84:d6:86:2e:ba:2e:9e:6a:95:6c:f1:9e:2b:0e:
                    75:cd:91:a8:79:77:62:cd:f4:57:98:45:08:dd:03:
                    da:6f:a9:0f:fe:c7:c8:b5:22:3b:0f:d6:93:e5:dc:
                    42:c0:97:e6:9c:e3:a7:a7:cf:f8:ac:47:e0:f2:60:
                    73:18:72:8a:5f:82:6e:6b:d3:b5:24:7f:a0:ae:f7:
                    ad:51:e2:1a:fe:9d:8b:95:67:6c:fa:df:ee:92:0e:
                    96:ed:16:d8:f9:35:42:7c:f1:a8:90:ff:c7:0a:26:
                    f2:ee:3d:56:64:3e:8c:08:a1:6d:66:15:36:e5:f9:
                    b4:30:91:dd:58:6b:d2:c4:a9:7c:1e:50:f6:6e:e7:
                    d3:4f:85:8a:5c:d8:93:76:8c:bd:d2:66:68:8c:bb:
                    07:4b:af:de:db:24:22:98:f5:ba:7c:ac:02:15:6c:
                    05:dc:f7:3c:de:64:c1:16:50:9b:01:a5:e3:c4:ae:
                    a3:2c:6c:c4:b2:29:52:ca:03:9e:88:c1:1c:c1:d3:
                    e2:bd:de:6c:83:ee:d0:30:ae:66:55:c5:9e:b6:93:
                    d9:e6:4e:6d:93:9f:92:fb:f8:2c:21:93:0f:9e:d7:
                    0d:af:0a:5a:2d:82:6e:ea:f5:7f:08:ee:fa:15:b3:
                    46:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:23:C4:D8:DD:82:B7:36:52:0E:03:32:E3:ED:E2:80:DA:8E:E3:70
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS200866.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:81c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         58:e5:9d:b4:e3:98:ac:a4:42:0f:7c:46:3b:a5:b9:ea:c3:32:
         11:9c:68:7d:5c:44:6e:59:9e:fa:85:d0:ec:9f:f2:ed:dc:5a:
         de:58:12:bb:5f:a2:e0:4f:c6:90:99:2e:e2:69:25:46:f0:9d:
         90:43:bb:4b:ac:de:86:ad:ba:e4:dc:b6:da:ae:9a:7e:ae:71:
         4a:9e:58:c9:9d:85:dd:20:15:92:92:ff:29:b1:d3:ba:71:48:
         43:c1:a6:14:5c:97:cb:97:a6:4c:ff:c1:3a:f3:7b:55:d7:84:
         e7:04:08:a6:1d:48:1c:55:1d:5f:b7:3f:12:02:28:1d:c1:55:
         9c:d2:18:26:01:92:34:49:9b:50:d2:7a:6a:e5:a5:6e:00:fb:
         fb:67:55:f6:a6:15:09:5c:4f:a4:1b:00:c3:21:04:9d:79:39:
         4e:65:34:fa:15:28:c3:a8:a7:3c:32:06:54:3f:ba:73:82:b2:
         4e:7b:2f:8c:99:13:d2:e0:ad:2f:70:47:68:f8:60:1b:04:a3:
         54:7e:b0:79:f2:cb:98:5b:c8:1d:f2:0a:30:e7:61:7e:78:a5:
         8c:b1:b1:51:87:e4:1b:7f:a7:7b:35:07:c8:b5:c2:b0:53:03:
         7f:c2:47:c2:ba:8c:15:12:a3:93:e5:8e:d1:df:04:4d:c6:d2:
         a8:02:c2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----