Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS202248.roa
File:                     AS202248.roa (raw, json)
Hash identifier:          g6LyhCkGtQIVRjdCojHZpwHBNT21pbpU62OCwFihtsY=
Subject key identifier:   F1:39:7F:2B:79:58:E4:FD:6E:A9:47:09:40:CC:12:F4:89:23:0A:69
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       668B458619CA51686248D1996B8A8DDEA95CBCF1
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS202248.roa
Signing time:             Mon 10 Apr 2023 03:31:35 +0000
ROA not before:           Mon 10 Apr 2023 03:26:35 +0000
ROA not after:            Mon 08 Apr 2024 03:31:35 +0000
asID:                     202248
IP address blocks:        2a12:dd47:8164::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8b:45:86:19:ca:51:68:62:48:d1:99:6b:8a:8d:de:a9:5c:bc:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:35 2023 GMT
            Not After : Apr  8 03:31:35 2024 GMT
        Subject: CN=F1397F2B7958E4FD6EA9470940CC12F489230A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:85:b9:24:40:ea:db:a3:9f:f1:01:ef:f3:8f:
                    87:90:4a:e5:70:24:f5:d3:69:11:46:2f:a6:e6:77:
                    aa:20:2a:8a:9e:4b:a8:2a:37:cd:c5:75:31:2e:04:
                    c4:5b:87:c4:09:41:af:ba:14:a8:d3:26:5b:ff:53:
                    a7:e0:dd:00:d3:93:04:86:ea:7a:1c:5f:c4:46:ec:
                    76:75:10:c6:19:f8:d3:01:6c:a9:83:be:bd:3c:f6:
                    ea:c6:27:e7:37:4b:49:10:a7:e4:34:23:1d:1c:79:
                    e2:8a:8f:94:09:76:73:8c:4a:f4:2a:0f:53:66:5c:
                    13:0c:84:18:69:74:21:4f:1a:ea:be:9f:ae:17:70:
                    04:3d:1d:f1:54:42:cf:2e:35:97:f8:72:94:45:33:
                    81:ff:89:1f:2a:d1:36:47:18:3f:ac:17:36:2a:8d:
                    85:9c:37:02:79:e6:b0:0c:38:6b:c9:67:45:b1:e5:
                    4e:ac:bd:aa:0b:6f:a6:4d:d7:1a:b3:49:ab:78:c4:
                    66:39:a2:ae:6a:a7:71:06:0d:34:9e:fb:a2:ec:2a:
                    f5:19:66:ae:87:43:34:f2:f2:5f:bc:21:6b:c3:56:
                    d5:0d:b7:13:13:34:d5:54:a0:c9:76:a7:f4:01:ee:
                    f2:ef:31:0b:da:8f:83:be:73:ff:a8:7e:b8:48:6c:
                    43:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:39:7F:2B:79:58:E4:FD:6E:A9:47:09:40:CC:12:F4:89:23:0A:69
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS202248.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8164::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:e6:04:e9:0f:ee:be:7f:a4:70:7b:49:66:31:01:81:8b:e1:
         6e:bc:7a:13:f7:b0:21:d9:59:60:71:f3:70:f5:18:95:5e:9c:
         85:82:62:72:46:a3:42:36:fb:82:a9:4f:55:33:5c:b4:cf:c9:
         0a:5b:60:53:5b:ca:86:07:b0:b5:59:79:2d:e6:48:03:6f:93:
         43:f3:85:01:82:d6:51:43:c9:a8:78:06:24:b6:ad:36:98:ae:
         d7:2d:08:59:91:52:17:33:3c:1a:10:e9:a3:9d:db:e0:7e:15:
         2d:53:0e:81:6e:26:5c:f2:6f:bf:d3:6e:21:ea:87:1d:23:38:
         c8:e1:0f:91:e4:e5:31:63:5c:b9:83:b0:b3:64:9c:3e:5f:fc:
         a9:92:ac:73:3b:6b:dc:32:ff:2b:73:b4:b1:41:b1:f5:9f:02:
         4e:f3:f6:10:ee:1b:67:4a:17:d1:9a:6e:14:61:f7:9a:89:34:
         45:17:43:a2:fd:79:68:0e:20:5b:f6:7e:88:3c:7e:68:15:b3:
         03:5f:b5:a1:7d:6e:1c:e2:90:1b:28:67:d5:8a:14:19:4f:e5:
         03:08:30:3a:60:e1:4b:ac:61:08:66:23:75:35:78:6b:e5:5e:
         8b:0c:4f:db:73:0d:3a:1e:f2:8c:a8:0b:cb:05:1b:1d:bb:10:
         a8:6a:2b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----