Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS202199.roa
File:                     AS202199.roa (raw, json)
Hash identifier:          GjJtncfU4/7UbtJ7fxnlUvh+TmY9yvnXO4+CbgYOMh8=
Subject key identifier:   19:95:1B:04:70:46:68:B6:6E:1E:32:17:C0:0B:61:B1:8D:9D:AA:DD
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       43F3CBC13A5ACC5CD075820C6DCE0820575E2EDE
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS202199.roa
Signing time:             Mon 10 Apr 2023 03:31:42 +0000
ROA not before:           Mon 10 Apr 2023 03:26:42 +0000
ROA not after:            Mon 08 Apr 2024 03:31:42 +0000
asID:                     202199
IP address blocks:        2a12:dd47:8165::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f3:cb:c1:3a:5a:cc:5c:d0:75:82:0c:6d:ce:08:20:57:5e:2e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:42 2023 GMT
            Not After : Apr  8 03:31:42 2024 GMT
        Subject: CN=19951B04704668B66E1E3217C00B61B18D9DAADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b8:23:72:a8:99:31:07:28:ca:81:40:cf:0f:
                    8f:a6:7c:76:ac:7e:f1:87:f8:25:39:e7:ef:3d:e1:
                    18:a4:08:26:7e:7f:b3:37:d7:c1:43:bc:a9:cb:25:
                    de:87:fe:4a:57:10:86:0b:c7:78:3e:9c:c1:54:1b:
                    f8:c8:4d:50:8a:d8:b0:37:72:e4:e7:34:f2:50:d1:
                    76:f3:b1:62:27:70:3c:0a:a5:a1:e2:86:43:8b:47:
                    13:0e:d5:f0:55:34:fe:18:23:e2:69:bf:83:9d:89:
                    d9:b3:30:f3:3b:da:36:37:fe:e5:ff:9a:96:86:79:
                    60:43:ef:37:91:92:dd:1b:8c:36:a9:1d:63:3b:ba:
                    62:9c:e3:55:c9:62:f6:35:25:65:d0:2a:4d:4d:f1:
                    ca:f1:58:9f:40:11:6e:fc:d3:fc:d1:97:12:c1:b8:
                    bf:99:1a:d4:86:5d:36:d9:72:f5:aa:ac:8d:38:6a:
                    61:dc:65:92:de:0a:0c:42:dd:e3:4c:4e:ec:73:0c:
                    56:d9:2d:19:63:d9:24:8a:22:fd:38:8c:ac:30:ed:
                    e2:ea:e7:c5:66:74:09:fe:aa:77:85:81:e5:02:99:
                    59:62:25:33:48:cc:09:3e:51:7e:c2:93:18:0b:5d:
                    e9:da:19:62:fd:64:32:85:dd:2e:68:ce:08:43:7d:
                    f4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:95:1B:04:70:46:68:B6:6E:1E:32:17:C0:0B:61:B1:8D:9D:AA:DD
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS202199.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8165::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:0c:97:ea:d2:66:02:81:0d:62:40:c2:9c:61:f2:80:ef:a5:
         70:6d:81:5e:f4:22:30:58:49:e6:7f:63:e8:05:80:74:4c:fe:
         e9:d3:4b:f7:4a:f0:a3:ec:96:50:4b:71:8f:88:67:43:13:8e:
         17:08:18:41:cc:c8:e3:d8:f9:d6:25:27:0c:b4:72:91:2a:6d:
         46:50:88:64:03:8d:ea:ae:db:af:65:e4:fd:50:05:11:3e:80:
         fb:b5:31:df:20:c5:68:90:aa:12:b7:d1:46:75:8e:ad:ec:62:
         31:76:e5:9d:ef:d9:4d:29:b4:5a:5b:4a:8b:8c:27:82:f6:78:
         02:5d:93:6c:c6:4a:a4:8f:c6:3a:e2:96:2c:7a:56:3f:5a:0b:
         f6:7f:e6:5a:13:53:42:42:ac:22:2a:42:e1:2c:4a:41:0c:15:
         ed:a6:d8:73:12:bf:c7:2b:87:d1:c2:ef:ae:7f:eb:03:53:4d:
         b8:3b:e5:94:20:68:6e:23:66:b1:08:05:9e:3c:99:79:f6:fc:
         77:97:4d:7f:54:72:ee:8d:54:6e:26:01:5b:29:ee:23:9c:1c:
         f7:dc:52:d1:df:1f:03:0a:4a:7f:32:dd:63:cb:23:f9:eb:06:
         d9:7d:95:ad:59:f5:f8:f4:8c:b8:5a:fb:9e:f1:cb:0e:e1:53:
         aa:cd:24:91
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUQ/PLwTpazFzQdYIMbc4IIFdeLt4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2NDJaFw0yNDA0MDgwMzMxNDJaMDMxMTAvBgNV
BAMTKDE5OTUxQjA0NzA0NjY4QjY2RTFFMzIxN0MwMEI2MUIxOEQ5REFBREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmuCNyqJkxByjKgUDPD4+mfHas
fvGH+CU55+894RikCCZ+f7M318FDvKnLJd6H/kpXEIYLx3g+nMFUG/jITVCK2LA3
cuTnNPJQ0XbzsWIncDwKpaHihkOLRxMO1fBVNP4YI+Jpv4OdidmzMPM72jY3/uX/
mpaGeWBD7zeRkt0bjDapHWM7umKc41XJYvY1JWXQKk1N8crxWJ9AEW780/zRlxLB
uL+ZGtSGXTbZcvWqrI04amHcZZLeCgxC3eNMTuxzDFbZLRlj2SSKIv04jKww7eLq
58VmdAn+qneFgeUCmVliJTNIzAk+UX7CkxgLXenaGWL9ZDKF3S5ozghDffRXAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUGZUbBHBGaLZuHjIXwAthsY2dqt0wHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMDIxOTkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEt1HgWUwDQYJKoZIhvcNAQEL
BQADggEBAIQMl+rSZgKBDWJAwpxh8oDvpXBtgV70IjBYSeZ/Y+gFgHRM/unTS/dK
8KPsllBLcY+IZ0MTjhcIGEHMyOPY+dYlJwy0cpEqbUZQiGQDjequ269l5P1QBRE+
gPu1Md8gxWiQqhK30UZ1jq3sYjF25Z3v2U0ptFpbSouMJ4L2eAJdk2zGSqSPxjri
lix6Vj9aC/Z/5loTU0JCrCIqQuEsSkEMFe2m2HMSv8crh9HC765/6wNTTbg75ZQg
aG4jZrEIBZ48mXn2/HeXTX9Ucu6NVG4mAVsp7iOcHPfcUtHfHwMKSn8y3WPLI/nr
Btl9la1Z9fj0jLha+57xyw7hU6rNJJE=
-----END CERTIFICATE-----