Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS201763.roa
File:                     AS201763.roa (raw, json)
Hash identifier:          gzv6LD/0RJZQs1X3IrycQqYbCdK+Y8EV/AfR6eDUNEA=
Subject key identifier:   66:A3:F5:03:09:6F:FE:7F:66:09:F1:74:17:B7:0B:CC:5F:C2:07:75
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       696B2B8355B6E6D341CE6CDBFDC291C5F747B259
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS201763.roa
Signing time:             Mon 10 Apr 2023 03:31:49 +0000
ROA not before:           Mon 10 Apr 2023 03:26:49 +0000
ROA not after:            Mon 08 Apr 2024 03:31:49 +0000
asID:                     201763
IP address blocks:        2a12:dd47:816d::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6b:2b:83:55:b6:e6:d3:41:ce:6c:db:fd:c2:91:c5:f7:47:b2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:49 2023 GMT
            Not After : Apr  8 03:31:49 2024 GMT
        Subject: CN=66A3F503096FFE7F6609F17417B70BCC5FC20775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6c:fc:1a:dd:bb:2f:22:3d:98:04:ad:49:2f:
                    90:6f:70:f0:57:28:44:57:0b:68:b1:c1:b9:5a:86:
                    c0:74:95:31:cd:80:52:ec:6c:c2:64:7a:5d:d8:f0:
                    a4:d2:84:21:c0:13:3f:89:ec:f8:64:d7:ea:50:5e:
                    82:f5:c5:40:de:4d:16:61:f6:3b:96:8d:5a:9c:fb:
                    9e:51:49:f6:1e:61:73:c2:4e:33:06:ec:a0:8c:5a:
                    e0:f3:a8:f1:d4:65:69:a1:a3:57:60:3d:93:b0:2f:
                    d9:38:be:98:ae:97:e5:f8:89:94:d0:75:08:8a:ac:
                    b3:36:1d:15:b8:95:f7:bf:7b:74:71:ee:71:92:41:
                    9a:21:4e:0f:2a:ac:d1:ef:37:35:aa:8a:11:75:83:
                    9e:7b:2f:56:1e:bf:4b:d7:52:e0:d7:8c:e1:63:af:
                    d9:52:bb:ba:34:41:2d:0b:bd:e5:5c:f5:36:87:9a:
                    9d:c0:b4:4e:4f:85:d7:fc:77:2f:68:94:df:51:bb:
                    cb:e8:7f:c7:ed:df:ce:ff:c4:da:04:60:c2:4e:ca:
                    57:08:fb:5e:1d:e3:f7:e1:4b:f4:97:b4:40:6e:54:
                    ac:52:1f:6d:90:7c:66:20:f2:5d:58:e0:f6:f1:6d:
                    9e:59:92:8c:a3:c7:33:d5:60:62:aa:23:68:4c:74:
                    e1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A3:F5:03:09:6F:FE:7F:66:09:F1:74:17:B7:0B:CC:5F:C2:07:75
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS201763.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:816d::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:6a:20:da:e1:b5:51:69:b9:43:c6:c3:0f:f1:38:61:bb:c8:
         a1:ff:87:7b:0d:aa:34:2d:4c:37:c9:9c:c7:60:21:b6:91:d8:
         77:67:fb:92:c9:a0:a9:7b:7c:93:9e:76:7f:5e:95:66:02:62:
         fd:cd:bf:30:02:bb:8a:f4:c9:cd:f5:98:2f:07:35:48:b0:b1:
         6f:54:b1:c0:64:1b:3f:eb:57:22:de:e5:f8:3f:7d:64:63:3f:
         d3:c4:4d:7e:11:d5:3c:cf:a0:2e:e4:63:cd:83:83:fc:11:a9:
         a7:42:46:c1:88:33:19:83:c2:a3:c5:5f:97:d6:23:ed:89:64:
         ca:7c:2c:a9:53:81:ff:3a:c0:79:5b:b6:fe:7c:39:a9:4f:80:
         aa:17:bf:dc:c9:1c:30:7f:6b:f0:ff:43:3a:be:71:04:23:bf:
         4d:46:17:43:38:1a:18:53:bd:b7:7a:64:ff:17:2f:99:fa:05:
         e5:8a:17:e2:a1:bc:b9:b6:90:08:e3:2e:7e:e0:22:f8:15:52:
         53:82:97:17:42:b2:f3:da:c6:7d:de:be:3b:5c:a0:75:4e:10:
         7c:60:7d:d9:39:f4:b6:bf:8b:bd:36:a8:78:60:ec:70:3e:21:
         cb:e4:18:8f:cc:73:62:f5:8e:a8:b5:71:70:16:bb:98:d9:75:
         a5:b4:07:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----