Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS203069.roa
File:                     AS203069.roa (raw, json)
Hash identifier:          mSJFzpOxWYqtHyXws7almlAiCUPSWyebgmZ4gegnedI=
Subject key identifier:   AD:95:E5:F9:4E:63:D9:25:65:5D:8D:E3:42:0A:49:E3:F4:63:70:B2
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       420CF0F72FCEC05E6F4BFC64F00B025034488590
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS203069.roa
Signing time:             Mon 10 Apr 2023 03:31:33 +0000
ROA not before:           Mon 10 Apr 2023 03:26:33 +0000
ROA not after:            Mon 08 Apr 2024 03:31:33 +0000
asID:                     203069
IP address blocks:        2a12:dd47:802c::/46 maxlen: 46
                          2a12:dd47:8230::/44 maxlen: 44
                          2a12:dd47:8400::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:0c:f0:f7:2f:ce:c0:5e:6f:4b:fc:64:f0:0b:02:50:34:48:85:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:33 2023 GMT
            Not After : Apr  8 03:31:33 2024 GMT
        Subject: CN=AD95E5F94E63D925655D8DE3420A49E3F46370B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:51:37:97:73:b8:85:51:26:9d:df:8a:a5:4f:
                    19:d8:c2:1c:ca:46:54:be:6f:27:56:82:de:07:19:
                    85:05:e4:40:d2:77:2e:29:e9:75:a4:f1:7c:3b:80:
                    89:a9:51:8e:f0:a3:12:5b:a3:f6:dc:1b:93:3e:84:
                    45:a0:50:b6:31:8e:a7:11:03:6c:8b:de:42:cc:1a:
                    e2:87:47:67:e3:40:36:3e:71:1d:1a:61:f5:77:19:
                    d8:28:ef:cd:a2:45:0b:15:15:7b:d9:67:11:30:a0:
                    eb:5c:db:f2:29:b6:b0:c3:37:c4:95:47:47:2f:b5:
                    7b:d7:6d:cf:22:78:1b:43:d3:89:af:86:68:7b:06:
                    a7:00:6d:ab:86:11:89:ec:fc:0b:31:e2:36:db:06:
                    a4:2e:aa:e7:a3:d1:e1:73:f1:e5:83:37:f2:5a:bc:
                    20:8f:cb:a3:be:fc:7a:25:69:25:54:3e:a0:2f:c3:
                    a5:ab:f0:66:a5:ab:a9:91:b8:16:64:b2:5e:3d:03:
                    6c:41:e8:0c:a6:a4:13:a1:16:87:23:79:76:86:89:
                    eb:93:3b:fe:0a:aa:56:9d:38:58:d3:be:2d:6f:ff:
                    c5:69:ec:ae:10:04:41:c0:a2:d3:8d:43:a2:ee:9a:
                    ae:22:36:60:2a:71:f7:db:3d:42:94:2f:ca:f5:c3:
                    c4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:95:E5:F9:4E:63:D9:25:65:5D:8D:E3:42:0A:49:E3:F4:63:70:B2
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS203069.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:802c::/46
                  2a12:dd47:8230::/44
                  2a12:dd47:8400::/40

    Signature Algorithm: sha256WithRSAEncryption
         04:b2:35:2f:b0:1d:e2:19:db:e0:f7:f2:3b:f8:1f:9b:76:82:
         a9:9e:63:b2:22:9e:74:f0:1a:eb:99:63:25:8c:c6:fc:a4:78:
         db:8f:02:2b:38:bd:c4:0a:12:ab:60:a3:85:52:39:f3:72:36:
         77:80:b1:86:2c:6c:1f:4f:7d:d9:27:35:a0:f3:f1:e6:68:b0:
         e8:05:8b:17:97:5c:a3:8e:5d:99:6b:f8:f2:5f:80:5b:4e:7e:
         b4:ec:53:49:cf:0f:0e:70:82:e2:e9:53:f4:d4:b6:e7:a7:6c:
         e4:71:0b:59:d7:9c:3d:2c:de:9b:91:1d:a6:6c:21:19:5e:ab:
         43:0f:78:d4:fa:6f:2a:0a:80:12:9b:0c:e7:48:cc:0f:ae:8a:
         ec:a9:6b:33:6f:4b:52:29:37:29:dd:db:37:6f:a5:1e:31:c0:
         53:ed:c8:5c:77:a8:45:35:9e:fb:5f:a8:18:dd:a5:d9:4f:bc:
         f1:f3:80:05:d4:a9:57:6d:8a:6e:6e:bd:d8:3f:55:25:5c:42:
         1f:5b:8c:14:8b:30:4f:ea:6a:7f:5f:4f:8c:4d:4b:fa:1b:eb:
         a9:63:25:d7:71:f3:1f:ee:c3:b9:36:1e:1d:a0:49:59:14:9b:
         1d:c1:b1:b8:01:80:db:ee:0a:85:b3:db:c1:f9:f1:ea:16:75:
         3f:e0:f5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----