Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS201251.roa
File:                     AS201251.roa (raw, json)
Hash identifier:          AiCavlnSaQ3fZklyf8O4x9qJdNMjwEA7RTkW1CaraVM=
Subject key identifier:   D9:03:38:31:59:46:A8:13:ED:1A:0D:E2:36:99:26:FC:FF:FF:A1:08
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       4F721B39C3B3F5AEE4FDD1CD4F6E5059603DABEC
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS201251.roa
Signing time:             Mon 10 Apr 2023 03:31:39 +0000
ROA not before:           Mon 10 Apr 2023 03:26:39 +0000
ROA not after:            Mon 08 Apr 2024 03:31:39 +0000
asID:                     201251
IP address blocks:        2a12:dd47:8074::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:72:1b:39:c3:b3:f5:ae:e4:fd:d1:cd:4f:6e:50:59:60:3d:ab:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:39 2023 GMT
            Not After : Apr  8 03:31:39 2024 GMT
        Subject: CN=D90338315946A813ED1A0DE2369926FCFFFFA108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bc:4a:c4:22:8f:21:00:9e:c3:76:b6:b5:b9:
                    05:bf:a9:9b:cd:9e:a7:0e:7f:25:07:bb:11:41:1b:
                    9e:0f:23:54:16:ff:ff:94:03:86:bb:ba:6c:49:eb:
                    fd:ed:cc:e3:72:72:06:ea:88:64:3d:fc:01:31:be:
                    32:b2:e8:4f:f6:af:a5:3d:57:44:02:cc:88:41:33:
                    3c:cd:5e:d0:bc:39:d6:55:e3:ec:f5:49:d7:bd:c5:
                    6a:4e:f6:0d:f6:b4:cf:80:49:4f:a6:71:e2:e5:c1:
                    83:34:a9:e3:db:7f:91:82:55:b0:e3:b4:62:70:43:
                    98:80:8c:80:db:ce:20:ed:e2:d6:d8:d9:88:ec:3f:
                    95:2f:a6:60:35:95:ba:e4:47:1e:c1:c2:a6:e8:ee:
                    d3:5b:d9:f8:8f:66:81:ad:6d:52:49:74:14:6d:4f:
                    33:26:f5:99:be:e6:6e:0d:82:4e:29:cd:79:c9:68:
                    e8:23:41:2c:dc:4b:20:34:4e:70:e6:0c:4a:20:23:
                    5b:ad:65:61:82:20:08:17:2d:eb:53:e5:8b:50:46:
                    50:1a:df:ec:1d:8e:21:e3:0d:63:b2:1f:96:f2:99:
                    f9:77:d6:ce:ee:a9:a4:36:c3:09:e7:7a:e4:08:c5:
                    74:1d:02:fe:24:4f:3e:a0:89:73:ed:46:a2:56:01:
                    56:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:03:38:31:59:46:A8:13:ED:1A:0D:E2:36:99:26:FC:FF:FF:A1:08
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS201251.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8074::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:af:ab:c1:6c:85:4e:b1:c7:f3:8b:9b:27:c8:9f:de:06:b3:
         c3:34:2c:f4:9e:c3:2d:f1:ef:b0:92:c5:e5:10:c8:12:3b:25:
         62:21:01:36:b9:4e:2a:6d:f7:18:7e:7e:5d:3d:bb:22:50:a5:
         ff:35:b1:8a:c5:ee:61:a5:06:a5:72:c6:75:9d:d8:f5:7d:2d:
         ee:d9:2f:f6:58:fe:71:50:37:ba:80:05:70:86:f6:1b:be:96:
         af:f2:92:7e:97:99:99:ad:97:be:45:74:f2:79:53:d2:fd:5b:
         2e:a3:0c:90:46:e6:12:c5:ff:e8:21:a2:64:80:85:22:c8:39:
         50:1c:b7:fa:84:ca:b1:85:37:a3:78:eb:13:1f:9b:b1:7b:1e:
         a4:69:4f:04:98:37:10:6c:61:7a:5d:77:e1:cc:8e:11:16:d3:
         18:12:34:af:70:23:3f:fa:85:9b:74:b9:ff:46:74:e8:ea:c2:
         da:10:83:86:62:14:27:23:56:38:b4:f7:9a:38:0c:6b:db:dd:
         10:1f:e0:76:c5:84:48:27:de:59:31:14:8c:60:14:32:49:0f:
         70:2d:db:62:9c:7b:72:a9:c4:6a:9b:a0:4e:9a:64:2a:e0:ab:
         4e:28:ae:a7:d3:56:37:b4:a2:2f:9a:0d:1b:51:ad:cf:1d:80:
         e9:cb:4e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----