Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS201421.roa
File:                     AS201421.roa (raw, json)
Hash identifier:          W00XgI0Otc57yQ+M1TIWqHjyOLUnjvuEYAm5ineaKkc=
Subject key identifier:   05:5A:31:66:5C:43:A4:23:03:71:77:DC:85:E7:07:75:1D:AB:4B:99
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       2A630C5E9788D57199D662665B2382C041DEDE75
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS201421.roa
Signing time:             Mon 10 Apr 2023 03:31:34 +0000
ROA not before:           Mon 10 Apr 2023 03:26:34 +0000
ROA not after:            Mon 08 Apr 2024 03:31:34 +0000
asID:                     201421
IP address blocks:        2a12:dd47:8331::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:63:0c:5e:97:88:d5:71:99:d6:62:66:5b:23:82:c0:41:de:de:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:34 2023 GMT
            Not After : Apr  8 03:31:34 2024 GMT
        Subject: CN=055A31665C43A423037177DC85E707751DAB4B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9b:40:ec:83:2c:d0:91:12:e4:e8:22:4c:dc:
                    9a:32:87:20:f9:c4:c5:6e:61:a0:44:d3:58:80:9a:
                    a4:07:dd:92:ce:e6:40:5c:1c:67:40:48:12:ae:0c:
                    b3:e6:0b:a3:0d:d8:17:c5:5e:60:52:a2:b1:30:53:
                    d2:6b:44:3c:a0:d0:81:59:05:ab:ac:68:01:d5:8f:
                    f9:a6:1d:df:d1:30:33:70:67:a4:8a:b7:d0:67:87:
                    23:32:37:ce:d0:e5:1e:82:82:a3:6b:b2:57:2a:eb:
                    19:fb:ce:f0:ac:2a:b3:47:63:da:4d:8b:c0:51:d8:
                    6d:41:86:60:2b:2c:70:cb:d9:76:43:f9:84:70:c5:
                    10:f6:cd:a1:47:e6:53:75:2d:65:86:24:b7:0f:97:
                    f9:5b:9d:bb:20:fe:6d:9b:93:aa:15:50:f4:12:27:
                    f3:70:62:c3:83:90:8f:60:9b:5d:3e:b9:4f:42:65:
                    bf:bb:f8:7c:06:9a:c8:b8:f1:ea:4e:37:a6:a2:1b:
                    09:1b:8e:44:07:ba:e1:d3:85:0c:cf:4a:22:e0:8d:
                    fb:8a:7b:98:e0:ac:5b:4c:36:d1:41:18:58:34:81:
                    92:cd:5b:5c:97:49:76:8c:7b:38:cb:3f:e2:25:92:
                    07:a0:cd:8e:d8:fb:d2:56:a0:d5:6f:c0:09:1c:14:
                    45:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5A:31:66:5C:43:A4:23:03:71:77:DC:85:E7:07:75:1D:AB:4B:99
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS201421.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8331::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:70:d9:07:15:e9:37:61:27:82:12:e3:e0:91:74:b5:43:42:
         d5:32:ce:52:b7:c0:5f:39:ae:2e:f6:b7:b9:9e:8a:8e:67:e2:
         4e:12:26:b2:26:a4:28:6d:f5:a9:5b:68:c2:79:8b:ce:41:02:
         e3:df:0f:ff:0b:46:f6:72:bd:9a:0b:8f:9a:cf:5c:88:6d:e0:
         11:8f:63:30:3e:24:c6:08:5a:9a:c0:d2:3c:2a:63:3c:23:86:
         18:6d:24:78:03:ce:59:d2:02:26:0d:fb:1c:e6:63:b7:46:59:
         75:2a:62:6a:24:06:28:98:9a:77:0b:63:59:f3:b6:4c:fd:82:
         84:35:0f:10:f5:58:34:8a:b5:0a:ac:c6:6c:df:35:fa:00:4a:
         42:c3:d8:d0:0a:01:1b:4f:dd:b8:96:7a:01:0b:98:b6:4d:56:
         c5:68:79:d8:6c:48:eb:33:28:40:ee:bf:9c:1b:21:bc:17:9e:
         56:e6:39:52:cc:1f:53:ad:20:4a:dd:e9:00:1a:69:3a:5e:72:
         40:6d:87:f4:52:71:61:31:9b:c9:33:53:bb:07:82:b1:fa:12:
         1f:2b:dd:c6:8e:46:72:74:8b:99:c3:1a:94:5d:2e:bf:11:6b:
         5d:de:a6:50:d0:08:d6:9a:78:74:d3:56:fe:f6:a2:89:b9:c4:
         92:d9:01:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----