Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS201865.roa
File:                     AS201865.roa (raw, json)
Hash identifier:          IyhrP7QM7R2WHBNYr8/FSsgllFIhrnxbf/QbfEnQIgw=
Subject key identifier:   9C:D7:93:CA:4C:58:69:55:9D:32:34:FB:0A:2C:34:BD:05:B1:64:2E
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       4191A1F93C9A640A9BB857F6970A0F8496E7C189
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS201865.roa
Signing time:             Mon 10 Apr 2023 03:31:36 +0000
ROA not before:           Mon 10 Apr 2023 03:26:36 +0000
ROA not after:            Mon 08 Apr 2024 03:31:36 +0000
asID:                     201865
IP address blocks:        2a12:dd47:8168::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:91:a1:f9:3c:9a:64:0a:9b:b8:57:f6:97:0a:0f:84:96:e7:c1:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:36 2023 GMT
            Not After : Apr  8 03:31:36 2024 GMT
        Subject: CN=9CD793CA4C5869559D3234FB0A2C34BD05B1642E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:56:43:ae:f9:af:56:41:d4:23:92:7f:db:61:
                    4a:82:43:37:5b:88:c0:30:ac:97:f2:86:ae:08:1a:
                    db:ef:ad:c4:9c:68:e8:a1:06:43:9f:f9:a7:5a:3a:
                    f6:2a:bc:7f:12:24:d5:c8:16:66:98:af:bb:fe:b2:
                    b1:a9:d1:4c:b1:6b:1f:18:20:a4:79:39:3f:f5:05:
                    9f:fc:42:4e:e4:cf:d7:79:64:0f:d3:c4:18:3f:47:
                    57:97:7d:34:80:2e:45:c8:44:bd:f2:d1:08:37:b0:
                    cb:35:7e:24:96:3f:aa:52:74:df:bd:ba:cf:01:c5:
                    28:de:8e:a0:b3:e3:27:18:cc:01:d4:19:e6:d6:c9:
                    a7:1c:ed:6e:27:ec:c7:8d:26:0c:a7:11:68:32:03:
                    3c:36:75:0f:10:8e:68:9f:3f:02:b4:fe:6b:ef:2a:
                    cc:a5:01:8f:c3:78:cf:f6:e2:84:05:3f:a0:c6:1d:
                    ae:3b:bc:1d:9f:3d:b9:f5:97:66:08:a1:65:65:98:
                    2a:eb:50:12:fb:99:d3:cb:ab:36:8c:3a:f0:43:65:
                    87:39:b4:6a:9d:d0:9f:83:42:68:bc:35:2b:3e:2e:
                    9a:da:5b:e3:15:c7:62:ad:98:31:61:a5:63:2d:45:
                    e6:16:8a:60:6b:66:b8:6f:7f:1f:ba:ea:8a:f6:2e:
                    05:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D7:93:CA:4C:58:69:55:9D:32:34:FB:0A:2C:34:BD:05:B1:64:2E
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS201865.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8168::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:72:51:c9:1f:2e:e2:2b:9c:01:30:a7:78:3c:9e:aa:75:6a:
         f0:46:ce:e6:4b:97:d4:e9:b1:cb:77:15:b4:c1:20:fc:c2:45:
         7b:3b:ac:3b:74:5e:57:4c:be:ef:76:c8:bc:cc:cb:57:66:db:
         ba:4a:9d:0a:06:df:c9:87:ab:75:89:a2:a9:1e:16:38:4f:f6:
         0c:1c:47:15:93:b2:d2:82:f5:bc:40:1f:93:95:20:1e:03:99:
         04:fa:8e:06:00:26:c0:e1:f8:73:38:07:0e:e4:9d:c2:de:12:
         35:17:de:5f:29:d3:41:87:72:21:f3:6d:e9:99:30:ef:f4:4d:
         b3:40:b0:bc:78:94:36:c5:d5:b0:8a:1c:86:e9:e2:6d:e7:e5:
         24:38:fb:ce:1f:76:a3:72:11:51:80:57:eb:db:e4:25:da:22:
         67:d3:64:18:71:3d:38:31:e2:f8:e7:d2:f1:0b:09:e5:57:2a:
         90:d6:d3:e0:da:a6:0f:cf:5d:99:25:fc:9d:f3:59:90:37:10:
         dc:d6:d6:14:bc:90:08:06:a1:8f:02:f3:f5:21:4c:53:7e:22:
         b8:6f:ba:cf:28:3f:96:bd:5f:87:48:06:d3:1a:4e:d1:26:d0:
         e3:48:44:b1:ae:c6:46:77:44:2e:d2:c9:05:38:57:11:d8:c4:
         37:b7:00:81
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUQZGh+TyaZAqbuFf2lwoPhJbnwYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2MzZaFw0yNDA0MDgwMzMxMzZaMDMxMTAvBgNV
BAMTKDlDRDc5M0NBNEM1ODY5NTU5RDMyMzRGQjBBMkMzNEJEMDVCMTY0MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUVkOu+a9WQdQjkn/bYUqCQzdb
iMAwrJfyhq4IGtvvrcScaOihBkOf+adaOvYqvH8SJNXIFmaYr7v+srGp0Uyxax8Y
IKR5OT/1BZ/8Qk7kz9d5ZA/TxBg/R1eXfTSALkXIRL3y0Qg3sMs1fiSWP6pSdN+9
us8BxSjejqCz4ycYzAHUGebWyacc7W4n7MeNJgynEWgyAzw2dQ8QjmifPwK0/mvv
KsylAY/DeM/24oQFP6DGHa47vB2fPbn1l2YIoWVlmCrrUBL7mdPLqzaMOvBDZYc5
tGqd0J+DQmi8NSs+LpraW+MVx2KtmDFhpWMtReYWimBrZrhvfx+66or2LgXLAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUnNeTykxYaVWdMjT7Ciw0vQWxZC4wHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMDE4NjUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEt1HgWgwDQYJKoZIhvcNAQEL
BQADggEBAFpyUckfLuIrnAEwp3g8nqp1avBGzuZLl9Tpsct3FbTBIPzCRXs7rDt0
XldMvu92yLzMy1dm27pKnQoG38mHq3WJoqkeFjhP9gwcRxWTstKC9bxAH5OVIB4D
mQT6jgYAJsDh+HM4Bw7kncLeEjUX3l8p00GHciHzbemZMO/0TbNAsLx4lDbF1bCK
HIbp4m3n5SQ4+84fdqNyEVGAV+vb5CXaImfTZBhxPTgx4vjn0vELCeVXKpDW0+Da
pg/PXZkl/J3zWZA3ENzW1hS8kAgGoY8C8/UhTFN+Irhvus8oP5a9X4dIBtMaTtEm
0ONIRLGuxkZ3RC7SyQU4VxHYxDe3AIE=
-----END CERTIFICATE-----