Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS202256.roa
File:                     AS202256.roa (raw, json)
Hash identifier:          rKjMMnPV8gj2vbw+4ifZHoiZvwL1w3J/GVhHpNXEcBg=
Subject key identifier:   CF:03:12:C8:81:C8:9C:6F:7F:98:CF:C6:93:4E:12:D8:D0:D0:5D:BE
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       3B09788175C097D30B733E6A0F074C43849DEC4A
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS202256.roa
Signing time:             Mon 10 Apr 2023 03:31:37 +0000
ROA not before:           Mon 10 Apr 2023 03:26:37 +0000
ROA not after:            Mon 08 Apr 2024 03:31:37 +0000
asID:                     202256
IP address blocks:        2a12:dd47:4000::/36 maxlen: 48
                          2a12:dd47:6000::/36 maxlen: 48
                          2a12:dd47:7000::/36 maxlen: 48
                          2a12:dd47:c000::/36 maxlen: 48
                          2a12:dd47:e000::/36 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:09:78:81:75:c0:97:d3:0b:73:3e:6a:0f:07:4c:43:84:9d:ec:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:37 2023 GMT
            Not After : Apr  8 03:31:37 2024 GMT
        Subject: CN=CF0312C881C89C6F7F98CFC6934E12D8D0D05DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:e6:0a:2b:76:88:61:fe:63:fb:71:3b:5b:41:
                    9e:d5:2e:b8:74:7d:8a:67:81:37:64:2f:5a:12:e5:
                    29:54:d8:e6:ac:53:47:65:94:80:d7:a6:a5:ea:73:
                    bc:43:29:53:d0:75:38:36:93:36:13:95:7a:91:70:
                    49:08:05:f1:25:e7:b8:de:03:30:e5:b7:11:4b:ce:
                    18:12:4d:ce:8e:35:fc:fb:d8:fb:bc:c6:c5:3d:39:
                    45:db:76:de:a5:91:18:68:04:91:c1:3c:2d:4b:6c:
                    31:6d:d4:32:33:73:05:2a:64:99:e0:a1:10:71:c5:
                    68:1a:42:49:33:2c:1b:8e:a5:e0:86:6f:a5:2f:e8:
                    df:0b:38:17:14:b4:87:c3:ca:c3:01:cd:eb:39:f7:
                    64:bb:5e:2b:d1:0f:39:8b:20:0b:c1:cd:64:e8:36:
                    a4:98:ca:d2:ea:c6:08:96:d0:f7:6d:3d:22:54:5c:
                    b7:72:5c:d3:e8:e8:ce:90:1b:87:81:97:5e:e6:cc:
                    96:44:7a:e7:cb:81:1a:66:12:7a:90:82:49:e7:c4:
                    ee:dd:8d:47:b1:fe:92:b3:b6:ed:d4:44:ab:08:6e:
                    10:a9:0c:bb:b0:b4:00:87:89:fd:24:56:2a:39:ed:
                    e7:6e:aa:6a:8d:b1:ac:78:89:17:3f:84:2a:3d:a7:
                    a1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:03:12:C8:81:C8:9C:6F:7F:98:CF:C6:93:4E:12:D8:D0:D0:5D:BE
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS202256.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:4000::/36
                  2a12:dd47:6000::/35
                  2a12:dd47:c000::/36
                  2a12:dd47:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         38:7f:9d:d7:23:ca:80:5c:07:8f:c6:89:0e:0d:f9:14:1e:6b:
         93:d7:95:b1:22:3a:12:b7:74:9d:c7:f5:f3:3c:c9:0a:18:45:
         be:4c:88:7d:86:03:c7:7c:64:02:46:92:0f:1e:d2:f0:a4:37:
         00:cb:d3:e4:73:01:1e:69:73:1e:e5:b9:86:09:b1:23:2c:b1:
         41:cc:ad:0d:ac:c9:94:72:d3:49:19:0e:f5:5c:fd:74:3a:51:
         a9:72:11:a5:b8:a0:38:17:5a:02:c4:94:aa:4b:8e:15:2b:f6:
         7a:42:47:5e:87:9d:04:6e:c0:50:08:bc:64:19:ad:20:90:bc:
         67:c6:de:e3:1a:f0:cd:60:10:f7:0e:e4:d0:1b:86:09:f1:30:
         27:38:e1:67:d7:70:c9:26:2a:e3:f0:05:8a:5e:6a:5f:0c:32:
         95:1a:24:10:41:90:d8:eb:05:ed:ec:01:f6:81:9b:9d:21:d7:
         54:73:af:1a:90:d4:45:8f:a0:fb:46:13:3a:06:63:4d:5b:37:
         64:23:40:1e:87:1d:46:1f:36:06:ee:43:67:f1:ee:9e:95:bf:
         f2:4b:e6:88:ac:20:80:80:bf:a8:bd:6a:7a:1a:f5:98:d6:fd:
         6e:3c:2d:ef:d6:cc:c5:2e:92:2d:e3:0c:82:61:a6:5f:70:5a:
         47:2d:1c:47
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----