Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS203075.roa
File:                     AS203075.roa (raw, json)
Hash identifier:          o1I4oC3uJYEIxRDdz3s7NPaCkfYC1GNCzdzpwVpgiiE=
Subject key identifier:   1E:44:FD:79:76:FE:9D:8B:FA:AF:0E:96:85:81:26:79:6C:58:4F:72
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       71EC27E97175402FEBD8E2CDCA73F0A2BCC741F8
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS203075.roa
Signing time:             Mon 10 Apr 2023 03:31:41 +0000
ROA not before:           Mon 10 Apr 2023 03:26:41 +0000
ROA not after:            Mon 08 Apr 2024 03:31:41 +0000
asID:                     203075
IP address blocks:        2a12:dd47:8200::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ec:27:e9:71:75:40:2f:eb:d8:e2:cd:ca:73:f0:a2:bc:c7:41:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:41 2023 GMT
            Not After : Apr  8 03:31:41 2024 GMT
        Subject: CN=1E44FD7976FE9D8BFAAF0E96858126796C584F72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:63:05:9f:71:40:a3:43:74:80:c7:56:f5:21:
                    9c:6e:2f:b4:7b:ba:2f:53:e5:bc:f3:00:83:9a:00:
                    03:db:5c:02:22:34:6f:a9:ca:8c:8b:9b:27:9e:1c:
                    45:cb:d0:73:49:6e:33:57:10:23:c4:06:cf:ab:08:
                    87:fb:86:49:c9:08:99:41:60:b4:60:e5:a6:95:1b:
                    4d:50:b8:67:39:30:ac:45:53:26:86:c5:23:ce:88:
                    f9:23:6b:2e:52:9d:4f:99:85:be:2d:be:53:3b:43:
                    71:d3:72:24:30:11:63:34:cc:c4:77:aa:cb:b2:e1:
                    2a:d2:b6:0c:5a:9f:b6:df:e9:54:ee:72:d2:2e:bf:
                    19:d8:7a:53:54:32:72:3e:7b:6d:38:0e:20:7f:d9:
                    bc:d1:70:64:2b:c7:44:04:e6:18:78:57:d3:f4:c6:
                    9f:18:29:c5:64:50:1d:ec:e6:69:99:96:75:29:da:
                    96:f5:28:46:be:fb:fb:c1:af:7e:14:45:9b:7a:67:
                    58:37:c4:88:67:22:2e:c4:f8:bc:58:6d:fa:1d:d8:
                    62:54:dc:c4:a5:7f:52:81:75:64:65:9f:ab:36:48:
                    fc:7f:ea:1a:b8:36:8d:2d:a3:71:4c:e0:1e:42:3c:
                    df:6c:04:33:a1:b8:15:0d:38:75:62:ea:4d:b4:68:
                    54:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:44:FD:79:76:FE:9D:8B:FA:AF:0E:96:85:81:26:79:6C:58:4F:72
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS203075.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8200::/44

    Signature Algorithm: sha256WithRSAEncryption
         50:b0:20:6c:a3:aa:4f:b1:a0:97:de:14:d1:58:f1:09:00:fe:
         43:f5:43:a4:14:96:9b:c4:f2:b6:49:d0:da:91:9b:a1:7e:19:
         9b:4b:fd:bc:2e:63:69:d5:63:98:b0:e3:f2:49:17:95:eb:b3:
         23:6b:ce:8e:32:fb:bd:1f:19:cb:8c:35:dd:ba:54:df:73:3d:
         6f:97:a8:09:4c:6b:5f:f4:c0:91:c9:16:1c:55:34:7d:24:f8:
         3b:d6:05:2a:37:c7:d0:4d:02:45:4a:32:ae:ba:c5:29:3f:23:
         dc:cb:32:92:61:26:e7:36:9f:a6:25:66:e3:a2:58:ba:9c:3e:
         b1:f3:92:4b:17:51:6d:0a:ca:1f:d2:7e:7c:46:bc:59:6f:03:
         32:97:f8:b3:0d:ab:b2:94:29:01:99:fd:c2:d4:d6:a2:8a:0f:
         59:fb:9e:25:3d:dc:32:03:60:48:bd:c5:48:8e:68:4c:bd:f2:
         46:46:9a:b4:51:9c:fa:af:a3:53:de:67:2f:7c:0b:4c:11:d0:
         87:37:41:55:5b:d5:29:b4:2b:2f:e6:15:d8:77:30:ea:e0:23:
         39:b1:e3:7d:29:35:59:c9:2b:82:87:d1:3b:f7:a4:ac:51:8e:
         89:62:8e:2e:c5:fc:92:5c:00:1b:20:00:a4:70:44:5d:5a:eb:
         fb:4f:26:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----