Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS200879.roa
File:                     AS200879.roa (raw, json)
Hash identifier:          NppikCtQX8SsgQ1Mz/6IQkYh8qgjt2Nt8zk/b0L040g=
Subject key identifier:   CF:18:C1:C1:53:E2:4E:00:39:E6:EF:98:DF:FC:1D:43:0E:71:60:95
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       28BCA8173C02200A025AACFED2CBF75B1AE89190
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS200879.roa
Signing time:             Mon 10 Apr 2023 03:31:35 +0000
ROA not before:           Mon 10 Apr 2023 03:26:35 +0000
ROA not after:            Mon 08 Apr 2024 03:31:35 +0000
asID:                     200879
IP address blocks:        2a12:dd47:df00::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:bc:a8:17:3c:02:20:0a:02:5a:ac:fe:d2:cb:f7:5b:1a:e8:91:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:35 2023 GMT
            Not After : Apr  8 03:31:35 2024 GMT
        Subject: CN=CF18C1C153E24E0039E6EF98DFFC1D430E716095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:2f:7c:c0:50:c1:aa:8f:04:30:7d:e2:f8:
                    b0:a9:74:bb:6e:6e:6e:b2:5c:8e:96:91:67:35:2a:
                    1e:1b:68:99:5f:61:48:9a:66:4d:4d:67:63:d3:5e:
                    c2:a8:81:ca:57:cd:90:90:ff:80:aa:ea:d0:3d:d8:
                    eb:ea:de:74:4c:8c:8b:1d:e6:89:4d:3d:03:d7:50:
                    2e:93:32:92:b2:98:5b:d1:94:9b:47:1d:1e:e2:4a:
                    3c:b1:fe:0e:81:bb:84:41:99:d0:90:40:5f:1f:f1:
                    7a:20:5e:53:4f:f3:1e:58:4a:a8:84:6f:52:9a:e3:
                    d2:9e:b0:d9:e7:e1:bb:89:64:4d:44:6e:32:69:44:
                    87:04:95:8b:09:70:03:68:9a:66:b0:64:1a:e1:9e:
                    1f:aa:a2:b6:b1:f2:18:c5:72:aa:e1:5e:c7:98:85:
                    45:ee:cc:db:44:5c:ed:4d:18:ad:97:26:0f:83:89:
                    41:a7:0e:33:c8:08:b7:6e:f7:64:2d:ea:e7:33:2c:
                    ae:d4:19:0a:29:82:08:f5:ff:d2:0f:11:44:01:a9:
                    b4:0f:77:33:61:eb:22:41:8b:1b:0a:00:15:d9:60:
                    7d:0d:1d:04:1c:e3:a5:2e:3d:82:ea:fe:92:26:6d:
                    5b:8c:6f:36:4e:da:0a:6d:af:0d:5c:e7:3e:9a:29:
                    4d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:18:C1:C1:53:E2:4E:00:39:E6:EF:98:DF:FC:1D:43:0E:71:60:95
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS200879.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:df00::/44

    Signature Algorithm: sha256WithRSAEncryption
         da:84:79:87:bf:23:a9:77:94:93:91:a8:71:c8:47:b9:6a:ea:
         5e:34:ea:aa:46:80:6f:e6:d1:3a:76:ae:52:6c:66:2b:d1:8a:
         34:38:e3:09:a3:10:e4:11:b8:f4:38:ed:ed:66:10:35:b5:07:
         56:1b:e5:b2:4e:71:26:95:6a:62:9b:df:55:da:1f:a8:58:8c:
         64:ba:17:b5:58:66:70:1a:b2:8f:39:46:ae:4f:5e:93:29:5c:
         ea:77:7d:5f:d4:9e:f0:20:87:85:41:10:b7:55:11:63:24:25:
         2f:69:24:2e:ef:3d:a2:fa:f0:c8:bf:0c:a3:89:44:39:88:3e:
         15:81:21:46:e6:7c:d8:1c:b5:4f:b0:74:ff:f7:d7:05:d1:02:
         21:fe:ae:17:d2:c8:69:74:96:c7:2c:9c:ac:0d:22:9c:56:e9:
         bc:fb:aa:d9:14:f2:9b:d4:a5:41:87:94:34:28:99:11:c2:d7:
         03:97:fd:c1:71:d1:30:4b:84:1e:bc:a9:8b:73:27:75:a5:0c:
         cf:ee:dd:a5:61:cc:7f:d8:d4:7c:73:21:a3:10:0d:3e:1f:7d:
         0f:97:d4:68:9f:80:5a:29:c2:48:2b:7b:0c:20:f5:f4:9f:6f:
         63:9c:03:af:5c:0f:09:8c:03:8f:38:0a:03:c6:71:60:3e:28:
         77:cb:9e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----