Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS202820.roa
File:                     AS202820.roa (raw, json)
Hash identifier:          bc9cw1Az2szrmh3aAPVjGjHFv82+dQ6LLXSP4Fc7uNM=
Subject key identifier:   F0:A7:D9:9B:22:FF:46:10:E4:51:4C:62:65:2D:AE:AB:75:E7:F8:57
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       06234EB9FCA3AB1105288E2B1457DF24EF6B326F
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS202820.roa
Signing time:             Mon 10 Apr 2023 03:31:48 +0000
ROA not before:           Mon 10 Apr 2023 03:26:48 +0000
ROA not after:            Mon 08 Apr 2024 03:31:48 +0000
asID:                     202820
IP address blocks:        2a12:dd47:802b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:23:4e:b9:fc:a3:ab:11:05:28:8e:2b:14:57:df:24:ef:6b:32:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:48 2023 GMT
            Not After : Apr  8 03:31:48 2024 GMT
        Subject: CN=F0A7D99B22FF4610E4514C62652DAEAB75E7F857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6e:9c:dc:53:c0:94:fa:19:84:08:01:59:eb:
                    bc:c6:3d:b2:06:f4:b7:ce:8f:ec:a0:85:a0:b7:f6:
                    4a:a6:fa:79:14:72:58:a1:e5:d0:63:2a:be:7c:6e:
                    64:46:32:d2:10:5f:fa:25:48:a2:7f:7b:35:77:ad:
                    92:8c:b3:3d:3f:1a:80:00:56:cd:a9:7a:7d:a5:66:
                    9e:58:09:48:01:47:7f:36:87:93:71:b8:0e:4c:28:
                    26:bf:ad:86:1e:0a:c5:09:8a:72:d0:c5:90:e9:d9:
                    a7:98:df:e1:cb:51:db:28:4e:a6:b6:c6:09:be:76:
                    d1:1e:6b:ee:27:ff:c8:99:fd:79:46:a0:b2:62:55:
                    cb:e3:5a:81:75:f8:8d:3d:fe:cc:ad:a5:a6:4b:8a:
                    a8:80:a0:fc:10:f1:8b:3a:eb:82:74:f2:10:77:d5:
                    21:8f:13:23:e0:5c:87:d8:d2:3e:82:cd:7e:3b:7d:
                    eb:24:69:f3:96:4b:bd:ad:b4:64:fc:b2:b6:7b:93:
                    3a:6b:fe:49:b4:6c:56:43:f5:bc:b8:39:89:78:b5:
                    23:55:84:99:3b:d4:71:14:ae:4f:f5:2c:78:64:49:
                    0f:b1:ba:34:61:7f:6d:9f:c7:c2:97:48:27:ca:11:
                    4e:62:f3:80:70:63:75:16:d3:1b:c6:e9:70:1e:57:
                    5b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A7:D9:9B:22:FF:46:10:E4:51:4C:62:65:2D:AE:AB:75:E7:F8:57
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS202820.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:802b::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:9e:ed:96:48:6a:fe:4e:50:e4:9f:1c:39:e4:9a:39:b6:17:
         88:c7:b7:47:e6:fd:14:ba:44:35:0b:50:6b:fa:0c:ae:a3:c5:
         65:13:2a:18:7c:7b:67:63:97:35:59:e0:26:0b:05:c9:10:50:
         16:36:cf:6e:d6:1a:e7:b9:79:52:a8:c7:16:a7:84:c8:a2:b0:
         61:01:78:eb:8c:a4:b0:52:8a:43:4f:4c:a9:2f:61:0b:3f:94:
         29:58:88:32:da:9b:2a:cb:8b:01:49:f2:e5:d9:89:50:eb:6d:
         f8:80:06:a2:c1:d2:68:1a:54:d3:80:fd:68:e0:b0:19:a3:07:
         cf:db:3f:d6:a6:55:23:87:f0:92:bd:b5:7a:1d:71:42:f0:92:
         41:18:5a:24:9b:a7:4d:f9:e6:e3:be:4d:e0:8f:55:fd:98:17:
         7c:b8:68:cd:9f:ee:80:c7:9b:b2:b7:7d:81:97:88:af:86:9c:
         21:33:fd:13:ab:02:70:fc:5c:fa:80:ee:98:1f:24:c6:d7:77:
         79:68:cc:15:ea:ce:e6:3f:ce:ef:5f:e3:c2:0e:6b:0e:4d:9d:
         66:24:3e:72:11:9d:65:33:7c:1b:91:8b:d9:48:74:16:39:f1:
         e1:24:d0:5c:a5:c8:6d:07:ad:cc:71:8f:23:d7:dd:a3:82:b7:
         3b:e1:29:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----