Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS202118.roa
File:                     AS202118.roa (raw, json)
Hash identifier:          2DUVsnYthuhGP5m1K+pzOifl+OkdN6jetT9r2STW7dM=
Subject key identifier:   AA:3C:C0:EC:91:51:D3:8D:AA:04:87:81:A5:24:02:05:66:4A:F1:60
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       3F3B4A42997D79CE59DAE73D04EE795D7E781574
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS202118.roa
Signing time:             Mon 10 Apr 2023 03:31:38 +0000
ROA not before:           Mon 10 Apr 2023 03:26:38 +0000
ROA not after:            Mon 08 Apr 2024 03:31:38 +0000
asID:                     202118
IP address blocks:        2a12:dd47:8350::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:3b:4a:42:99:7d:79:ce:59:da:e7:3d:04:ee:79:5d:7e:78:15:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:38 2023 GMT
            Not After : Apr  8 03:31:38 2024 GMT
        Subject: CN=AA3CC0EC9151D38DAA048781A5240205664AF160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:ea:16:a5:14:82:ef:a1:f2:2b:6e:7b:d3:
                    c8:e0:67:ab:8d:31:35:90:9f:fd:05:47:d7:d0:61:
                    4b:9e:6a:79:d4:89:b0:6d:89:90:86:d0:7a:9c:06:
                    ae:86:d7:ed:03:20:60:67:86:e3:d7:67:52:a9:58:
                    4c:ce:7d:ed:12:9b:f2:fb:8d:6a:74:f0:4f:fc:6c:
                    3c:a1:d0:8f:28:bd:45:c7:4b:6b:a3:06:57:67:d7:
                    df:9e:20:dd:c2:6d:dd:c8:5a:c3:f1:b6:97:49:d1:
                    de:6f:a6:a2:14:77:bd:55:8f:62:98:db:a3:3e:ca:
                    6c:45:a3:bf:cf:a3:f0:bb:c8:f0:c7:62:e7:5c:c1:
                    f4:1c:cf:64:7d:35:76:c1:3d:be:9b:41:2b:ce:01:
                    b8:0c:00:13:a7:90:9c:7e:3c:92:69:1e:93:12:a5:
                    35:20:ae:ca:60:d4:6f:02:68:19:19:39:08:c7:99:
                    f3:42:ac:b0:e3:35:8a:ac:dc:a7:e9:c8:57:8b:8f:
                    c8:80:38:7a:c8:d4:2e:47:4c:68:97:62:59:60:dc:
                    c8:f3:14:5a:17:e4:e8:0e:7a:62:16:bd:53:f2:9f:
                    9c:01:9d:04:0f:72:97:0d:a0:00:ec:65:34:27:27:
                    3f:83:e7:08:ba:55:08:f2:d3:2f:c4:77:f2:56:c4:
                    e0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3C:C0:EC:91:51:D3:8D:AA:04:87:81:A5:24:02:05:66:4A:F1:60
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS202118.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8350::/44

    Signature Algorithm: sha256WithRSAEncryption
         08:27:ae:2c:9d:ab:6f:7d:17:6c:83:9c:c8:b0:47:0f:8a:e9:
         c6:71:bf:f7:5e:81:c1:11:91:90:fb:87:1b:85:a9:6e:e9:6d:
         5e:04:30:d9:47:db:5f:c5:13:ca:3c:03:31:49:93:64:04:ed:
         79:a6:92:8c:64:d0:6f:86:e7:e4:bf:84:8c:6f:3a:f5:39:58:
         7e:ae:68:c2:de:f6:a5:11:9b:64:c3:fc:9b:f4:d4:59:fc:8b:
         8c:dd:b7:4f:ef:ab:04:22:1a:51:2e:0b:1a:77:54:df:82:e8:
         84:62:13:33:fe:60:1a:75:a4:43:52:c1:ec:2f:35:8a:92:4b:
         66:d5:27:55:ed:4b:d3:82:5f:81:4a:67:05:4c:0c:3a:f2:21:
         fe:10:81:ec:18:b6:83:02:23:5d:9d:ed:49:75:45:53:61:8a:
         8c:fb:e4:ec:5c:cf:0c:38:c3:76:93:b2:fb:61:9c:b1:c5:0f:
         73:fa:b7:82:79:a1:2d:1a:84:1e:8c:45:91:8a:79:d0:f7:8e:
         9a:03:f7:8d:c0:0f:07:80:29:cc:f9:23:69:e8:f1:6a:31:15:
         22:36:6c:8d:6a:1c:99:db:92:19:67:db:7f:e5:74:66:a2:23:
         45:24:31:96:c0:ad:b1:27:c6:da:c3:37:19:ff:da:0a:74:b0:
         4e:c9:06:71
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUPztKQpl9ec5Z2uc9BO55XX54FXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2MzhaFw0yNDA0MDgwMzMxMzhaMDMxMTAvBgNV
BAMTKEFBM0NDMEVDOTE1MUQzOERBQTA0ODc4MUE1MjQwMjA1NjY0QUYxNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr6OoWpRSC76HyK25708jgZ6uN
MTWQn/0FR9fQYUueannUibBtiZCG0HqcBq6G1+0DIGBnhuPXZ1KpWEzOfe0Sm/L7
jWp08E/8bDyh0I8ovUXHS2ujBldn19+eIN3Cbd3IWsPxtpdJ0d5vpqIUd71Vj2KY
26M+ymxFo7/Po/C7yPDHYudcwfQcz2R9NXbBPb6bQSvOAbgMABOnkJx+PJJpHpMS
pTUgrspg1G8CaBkZOQjHmfNCrLDjNYqs3KfpyFeLj8iAOHrI1C5HTGiXYllg3Mjz
FFoX5OgOemIWvVPyn5wBnQQPcpcNoADsZTQnJz+D5wi6VQjy0y/Ed/JWxOD7AgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUqjzA7JFR042qBIeBpSQCBWZK8WAwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMDIxMTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqEt1Hg1AwDQYJKoZIhvcNAQEL
BQADggEBAAgnriydq299F2yDnMiwRw+K6cZxv/degcERkZD7hxuFqW7pbV4EMNlH
21/FE8o8AzFJk2QE7Xmmkoxk0G+G5+S/hIxvOvU5WH6uaMLe9qURm2TD/Jv01Fn8
i4zdt0/vqwQiGlEuCxp3VN+C6IRiEzP+YBp1pENSwewvNYqSS2bVJ1XtS9OCX4FK
ZwVMDDryIf4QgewYtoMCI12d7Ul1RVNhioz75Oxczww4w3aTsvthnLHFD3P6t4J5
oS0ahB6MRZGKedD3jpoD943ADweAKcz5I2no8WoxFSI2bI1qHJnbkhln23/ldGai
I0UkMZbArbEnxtrDNxn/2gp0sE7JBnE=
-----END CERTIFICATE-----