Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS201765.roa
File:                     AS201765.roa (raw, json)
Hash identifier:          VCGCPBDRxWLb/8ngAWkcDw3VCvmC+FQOyWkC5/tmZro=
Subject key identifier:   C1:11:11:85:E1:D5:70:63:B4:0D:17:0B:0D:3E:77:00:0B:CE:D4:E5
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       63C7282B81BCFBB2DD6F5057F708F97E688C2B72
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS201765.roa
Signing time:             Mon 10 Apr 2023 03:31:51 +0000
ROA not before:           Mon 10 Apr 2023 03:26:51 +0000
ROA not after:            Mon 08 Apr 2024 03:31:51 +0000
asID:                     201765
IP address blocks:        2a12:dd47:8360::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c7:28:2b:81:bc:fb:b2:dd:6f:50:57:f7:08:f9:7e:68:8c:2b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:51 2023 GMT
            Not After : Apr  8 03:31:51 2024 GMT
        Subject: CN=C1111185E1D57063B40D170B0D3E77000BCED4E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c1:9e:80:84:ea:ae:de:11:a0:41:0e:8c:e6:
                    4c:8d:16:7f:ed:81:6d:d1:d8:f5:13:65:19:c1:c9:
                    53:bb:20:55:e3:77:50:a2:0d:e4:2c:b7:cc:55:54:
                    13:19:a1:3d:d0:ce:29:29:8a:06:3c:d8:1f:56:05:
                    14:59:4d:c3:07:8a:f9:f6:e4:a6:60:d6:8b:57:8c:
                    e6:c5:4f:eb:8c:41:4d:79:64:ef:d1:05:07:09:c2:
                    4a:4a:b3:e2:50:8a:86:47:da:b2:fe:d3:09:9c:f1:
                    35:f5:08:b9:fb:68:b0:87:fc:5a:82:d2:2d:4c:7b:
                    bf:91:b9:7c:e6:c8:8f:54:be:76:5a:fb:35:80:db:
                    e0:ff:09:b7:60:dc:71:f6:43:d6:55:7c:47:e8:7b:
                    f6:55:23:d4:b4:6a:a3:5e:ec:4c:d9:3e:5e:5c:04:
                    45:84:0c:4a:94:9f:2e:44:3b:bf:9b:88:28:3f:e6:
                    84:05:d8:2d:60:d6:fe:a7:3f:b8:b0:3f:02:56:32:
                    21:6a:cd:42:2a:d1:f7:a3:16:49:4e:01:0d:20:d0:
                    f7:7c:77:62:4b:d8:4d:0b:3f:96:89:4f:06:7c:50:
                    f7:11:a2:ca:d9:32:c6:b0:d9:54:69:62:6c:0b:c1:
                    35:f1:3c:fe:37:49:56:44:35:4c:28:a3:26:c1:39:
                    9c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:11:11:85:E1:D5:70:63:B4:0D:17:0B:0D:3E:77:00:0B:CE:D4:E5
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS201765.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8360::/44

    Signature Algorithm: sha256WithRSAEncryption
         2d:c0:2a:a1:d9:10:e3:79:89:8f:8a:d7:01:61:83:fb:8a:1f:
         c6:72:6c:5e:75:da:dc:02:55:03:82:c9:91:a1:91:5d:b3:90:
         d3:85:bf:e2:7b:b9:6f:f4:2b:9f:a5:ac:37:c4:fa:42:23:8d:
         e9:55:b3:1f:61:9d:7a:3d:c3:6b:4c:5f:43:89:03:f2:af:e8:
         ac:38:4a:9a:63:49:95:9e:75:08:aa:3d:0f:94:f3:90:f8:8c:
         47:f7:ed:2c:e1:00:a0:a0:71:20:70:42:90:fc:7f:19:75:36:
         5c:cd:83:74:e8:1d:46:af:92:14:54:17:3f:4e:9b:b7:32:b3:
         f3:86:c6:cb:97:6f:7b:af:1b:d5:38:8e:fb:b3:ff:95:2b:e8:
         94:19:21:20:84:e2:42:f3:8c:42:43:c3:78:2e:a2:3e:1f:c1:
         f5:7c:b4:5b:37:e7:e7:86:95:55:8f:94:ac:3f:f9:b2:e6:c1:
         09:3a:1a:cc:d0:95:e4:96:c3:ed:53:f4:3f:5c:ab:49:bc:e7:
         7f:b1:07:c3:a9:63:c0:54:5a:da:37:f2:8b:86:e8:fe:25:c2:
         a4:23:3f:ad:d0:49:2d:ef:90:8a:53:75:8e:3a:df:1c:bb:87:
         e3:f5:78:c0:d7:78:67:74:5d:c4:55:4d:47:75:8c:5f:8e:83:
         ce:31:2e:0f
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUY8coK4G8+7Ldb1BX9wj5fmiMK3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2NTFaFw0yNDA0MDgwMzMxNTFaMDMxMTAvBgNV
BAMTKEMxMTExMTg1RTFENTcwNjNCNDBEMTcwQjBEM0U3NzAwMEJDRUQ0RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDwZ6AhOqu3hGgQQ6M5kyNFn/t
gW3R2PUTZRnByVO7IFXjd1CiDeQst8xVVBMZoT3QzikpigY82B9WBRRZTcMHivn2
5KZg1otXjObFT+uMQU15ZO/RBQcJwkpKs+JQioZH2rL+0wmc8TX1CLn7aLCH/FqC
0i1Me7+RuXzmyI9UvnZa+zWA2+D/Cbdg3HH2Q9ZVfEfoe/ZVI9S0aqNe7EzZPl5c
BEWEDEqUny5EO7+biCg/5oQF2C1g1v6nP7iwPwJWMiFqzUIq0fejFklOAQ0g0Pd8
d2JL2E0LP5aJTwZ8UPcRosrZMsaw2VRpYmwLwTXxPP43SVZENUwooybBOZyJAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUwRERheHVcGO0DRcLDT53AAvO1OUwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMDE3NjUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqEt1Hg2AwDQYJKoZIhvcNAQEL
BQADggEBAC3AKqHZEON5iY+K1wFhg/uKH8ZybF512twCVQOCyZGhkV2zkNOFv+J7
uW/0K5+lrDfE+kIjjelVsx9hnXo9w2tMX0OJA/Kv6Kw4SppjSZWedQiqPQ+U85D4
jEf37SzhAKCgcSBwQpD8fxl1NlzNg3ToHUavkhRUFz9Om7cys/OGxsuXb3uvG9U4
jvuz/5Ur6JQZISCE4kLzjEJDw3guoj4fwfV8tFs35+eGlVWPlKw/+bLmwQk6GszQ
leSWw+1T9D9cq0m853+xB8OpY8BUWto38ouG6P4lwqQjP63QSS3vkIpTdY463xy7
h+P1eMDXeGd0XcRVTUd1jF+Og84xLg8=
-----END CERTIFICATE-----