Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS202412.roa
File:                     AS202412.roa (raw, json)
Hash identifier:          T9g0ydW3qHMbUPvOfxhqYf4PR1kITEaHNTWVbPvHnEE=
Subject key identifier:   1A:29:F9:03:FB:81:E0:A1:56:F9:0A:DE:5B:F7:1A:5F:73:98:33:92
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       668CEF0CB208C132E381AE6A12C928E22641B383
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS202412.roa
Signing time:             Mon 10 Apr 2023 03:31:40 +0000
ROA not before:           Mon 10 Apr 2023 03:26:40 +0000
ROA not after:            Mon 08 Apr 2024 03:31:40 +0000
asID:                     202412
IP address blocks:        2a12:dd47:8161::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8c:ef:0c:b2:08:c1:32:e3:81:ae:6a:12:c9:28:e2:26:41:b3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:40 2023 GMT
            Not After : Apr  8 03:31:40 2024 GMT
        Subject: CN=1A29F903FB81E0A156F90ADE5BF71A5F73983392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:a7:3f:0e:f1:5b:17:88:cd:6c:5f:8f:83:
                    33:ff:dc:71:81:07:7f:7d:41:44:2f:70:63:76:b8:
                    87:ce:7b:af:2d:bb:8c:6f:7c:c0:ed:ea:a3:ef:84:
                    ac:87:13:d8:2b:be:64:d1:ce:56:99:e0:40:3b:44:
                    c8:0d:af:e5:b8:54:b5:ca:90:84:6f:2a:09:af:87:
                    b8:c4:90:19:62:c5:99:11:44:5b:63:79:b4:6a:90:
                    41:2d:61:1a:c7:c4:0f:2a:97:6d:1f:ad:a6:5d:e6:
                    17:59:22:9f:23:8c:e1:f2:36:30:d0:96:26:be:2b:
                    e5:13:26:af:ed:f7:92:4b:6a:13:41:51:ed:99:1c:
                    68:9d:f0:de:e8:f9:45:5e:ae:b4:89:b0:28:b4:54:
                    28:30:e5:70:b5:2f:3f:a7:69:ef:31:6c:9b:9b:b8:
                    c2:93:bf:7c:58:19:a8:62:bd:95:70:90:fe:6c:89:
                    ad:94:79:dc:6c:40:05:c8:e4:91:a6:59:46:e3:72:
                    85:9d:9d:c9:bd:2b:e3:a8:12:b8:27:65:0e:e6:3d:
                    4c:47:6d:e1:85:4e:b8:e8:0b:87:2c:24:5f:f6:96:
                    22:af:30:b5:3d:94:65:a4:4c:fc:65:07:43:cd:01:
                    f8:33:0a:40:38:69:8c:59:ea:46:80:a8:08:39:64:
                    3e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:29:F9:03:FB:81:E0:A1:56:F9:0A:DE:5B:F7:1A:5F:73:98:33:92
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS202412.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8161::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:f3:4b:83:8e:40:18:80:bb:86:77:0c:ef:42:c6:54:42:57:
         a0:53:29:57:ba:29:ae:fa:8b:91:15:1e:7d:15:e8:13:a8:16:
         e8:c3:41:f6:f5:5e:51:ab:0d:48:0e:d6:89:77:99:cd:cc:bb:
         32:80:70:1b:df:27:79:4c:33:34:5d:31:3c:6c:9f:4c:6e:9b:
         b9:64:cd:84:43:59:43:95:22:c6:af:0c:d1:72:7a:5d:ce:ec:
         6c:3a:75:fa:fb:dd:76:39:ef:d8:d3:f8:65:2c:65:3d:70:89:
         5d:d6:f4:9a:18:cd:33:73:df:6f:09:2e:bb:ab:89:de:c4:64:
         d7:f1:c7:aa:e1:2b:a3:05:14:27:40:f3:1e:00:5b:16:ec:38:
         e0:85:bf:64:db:37:9c:4b:05:92:ef:de:a4:6d:a1:99:fa:d4:
         2f:94:60:4c:43:7d:2c:03:1d:69:4b:30:fc:09:e0:81:fc:9b:
         54:44:9d:c3:44:f0:54:14:63:9e:36:0e:ef:26:89:3d:91:03:
         62:44:b0:cc:e6:0d:6f:eb:00:cf:01:de:05:9d:cf:58:5d:8d:
         f7:00:27:dc:3d:fe:d7:85:1e:1c:8b:06:ed:d6:77:71:38:65:
         88:6b:ef:cc:fe:4f:3c:47:a6:5f:89:28:61:75:7f:c2:58:65:
         fb:38:eb:8f
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUZozvDLIIwTLjga5qEsko4iZBs4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2NDBaFw0yNDA0MDgwMzMxNDBaMDMxMTAvBgNV
BAMTKDFBMjlGOTAzRkI4MUUwQTE1NkY5MEFERTVCRjcxQTVGNzM5ODMzOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8F6c/DvFbF4jNbF+PgzP/3HGB
B399QUQvcGN2uIfOe68tu4xvfMDt6qPvhKyHE9grvmTRzlaZ4EA7RMgNr+W4VLXK
kIRvKgmvh7jEkBlixZkRRFtjebRqkEEtYRrHxA8ql20fraZd5hdZIp8jjOHyNjDQ
lia+K+UTJq/t95JLahNBUe2ZHGid8N7o+UVerrSJsCi0VCgw5XC1Lz+nae8xbJub
uMKTv3xYGahivZVwkP5sia2UedxsQAXI5JGmWUbjcoWdncm9K+OoErgnZQ7mPUxH
beGFTrjoC4csJF/2liKvMLU9lGWkTPxlB0PNAfgzCkA4aYxZ6kaAqAg5ZD4FAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUGin5A/uB4KFW+QreW/caX3OYM5IwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMDI0MTIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEt1HgWEwDQYJKoZIhvcNAQEL
BQADggEBAAHzS4OOQBiAu4Z3DO9CxlRCV6BTKVe6Ka76i5EVHn0V6BOoFujDQfb1
XlGrDUgO1ol3mc3MuzKAcBvfJ3lMMzRdMTxsn0xum7lkzYRDWUOVIsavDNFyel3O
7Gw6dfr73XY579jT+GUsZT1wiV3W9JoYzTNz328JLrurid7EZNfxx6rhK6MFFCdA
8x4AWxbsOOCFv2TbN5xLBZLv3qRtoZn61C+UYExDfSwDHWlLMPwJ4IH8m1REncNE
8FQUY542Du8miT2RA2JEsMzmDW/rAM8B3gWdz1hdjfcAJ9w9/teFHhyLBu3Wd3E4
ZYhr78z+TzxHpl+JKGF1f8JYZfs4648=
-----END CERTIFICATE-----