Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS202518.roa
File:                     AS202518.roa (raw, json)
Hash identifier:          xYEjS/vVo9H1AbV5nLjLJNiwOCqnzIXVMim0oRmfIj4=
Subject key identifier:   2F:25:D4:30:F2:24:7D:BD:2F:F3:E8:53:28:D3:17:F3:D9:8E:4A:89
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       622A9F9A0CBE29B9E7027600B217F244ACA6B15E
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS202518.roa
Signing time:             Mon 10 Apr 2023 03:31:33 +0000
ROA not before:           Mon 10 Apr 2023 03:26:33 +0000
ROA not after:            Mon 08 Apr 2024 03:31:33 +0000
asID:                     202518
IP address blocks:        2a12:dd47:807a::/48 maxlen: 48
                          2a12:dd47:8160::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2a:9f:9a:0c:be:29:b9:e7:02:76:00:b2:17:f2:44:ac:a6:b1:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:33 2023 GMT
            Not After : Apr  8 03:31:33 2024 GMT
        Subject: CN=2F25D430F2247DBD2FF3E85328D317F3D98E4A89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:28:43:ab:d7:75:22:a1:f1:41:72:0f:fe:ae:
                    73:56:82:4a:6f:31:61:22:eb:9c:92:42:94:c7:c1:
                    20:34:77:97:c6:44:1e:03:e4:7e:58:23:cd:b4:02:
                    58:5e:c4:03:50:81:c6:cb:c9:f9:bb:9a:ab:9d:9b:
                    19:5e:be:29:3e:cf:3a:7e:d5:a5:76:af:65:5e:54:
                    b6:59:c8:18:37:d1:ba:71:6d:dd:62:99:4f:ba:74:
                    1a:0f:03:39:c5:dd:6b:1f:00:82:48:5d:85:57:52:
                    33:44:b6:1b:a8:fd:d6:07:47:0c:7f:6b:5f:c0:19:
                    cc:0d:30:e8:68:5a:c9:0b:a5:00:18:ea:c1:90:5f:
                    7a:9c:ab:b9:14:73:3e:84:57:95:cf:cc:33:d6:3b:
                    c0:07:45:8e:28:71:78:75:2b:d4:80:a3:ab:0b:10:
                    86:08:a7:0b:8d:1a:72:26:98:fb:7e:84:9b:96:df:
                    a5:19:9d:e4:4e:9c:e8:c5:cd:0e:bc:f1:88:da:13:
                    d2:f1:a4:f6:cf:01:d5:25:71:d8:a1:0d:e7:80:67:
                    f5:18:75:3d:99:1e:6a:35:4b:0f:66:a7:60:13:34:
                    06:fd:cb:5c:4a:2a:77:b0:56:a6:55:d7:66:38:e6:
                    67:aa:3d:19:3e:a3:8b:6e:20:50:e4:9d:49:2a:2a:
                    ec:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:25:D4:30:F2:24:7D:BD:2F:F3:E8:53:28:D3:17:F3:D9:8E:4A:89
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS202518.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:807a::/48
                  2a12:dd47:8160::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:5c:fa:f4:6c:b5:06:64:bc:af:50:65:6d:05:40:3d:21:a8:
         9f:18:d7:1b:ef:1c:7b:1b:f0:cd:59:f2:0b:52:c2:15:c3:14:
         4e:f1:ea:c7:1c:d0:9b:e2:20:f2:3e:7c:25:2c:45:23:a7:3c:
         4d:5f:16:79:c0:12:e1:9e:1c:3b:0c:30:14:55:c2:b7:0b:8b:
         fd:5b:d7:c0:7f:c4:78:e0:0f:f8:ac:ee:01:08:17:01:98:5b:
         f1:53:3e:e2:e9:25:f8:c3:01:65:ba:b9:22:05:39:68:f3:05:
         20:21:68:86:06:99:2d:3c:e7:26:11:c5:d7:8f:29:97:53:a6:
         4a:eb:a1:8a:f4:9d:51:1f:ca:4f:e9:ef:68:97:b7:2f:3d:91:
         ca:f8:ad:e1:1c:bd:71:13:06:92:8b:c6:65:6d:88:90:1e:3a:
         44:1f:55:66:61:5e:31:78:ff:c0:7a:1b:bf:43:ff:c4:41:97:
         d4:bc:02:91:77:3c:56:c1:33:3f:b0:3c:62:70:da:31:49:32:
         6e:d7:b4:e3:01:78:ec:99:a6:dc:5e:29:3b:aa:98:0f:e1:5d:
         07:d9:10:e4:26:d3:dc:ca:70:90:d1:b8:19:74:7e:a0:23:cd:
         76:35:91:68:75:39:e0:03:49:02:c1:75:d2:9e:5b:51:75:c6:
         62:c7:6b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----