Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS203199.roa
File:                     AS203199.roa (raw, json)
Hash identifier:          Of24vXeJq58uUMJFv0kEkgo8cOoi9T5iSAn6MO59D1o=
Subject key identifier:   A5:A4:DC:7F:46:61:82:40:D3:71:4D:F1:42:34:5C:D2:B8:9F:19:FB
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       49530094E68CBEE29CD64B24FD5C7F1B97122857
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS203199.roa
Signing time:             Mon 10 Apr 2023 03:31:47 +0000
ROA not before:           Mon 10 Apr 2023 03:26:47 +0000
ROA not after:            Mon 08 Apr 2024 03:31:47 +0000
asID:                     203199
IP address blocks:        2a12:dd47:8007::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:53:00:94:e6:8c:be:e2:9c:d6:4b:24:fd:5c:7f:1b:97:12:28:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:47 2023 GMT
            Not After : Apr  8 03:31:47 2024 GMT
        Subject: CN=A5A4DC7F46618240D3714DF142345CD2B89F19FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:02:0c:15:8a:d6:d0:3d:17:0c:e7:c3:1e:f5:
                    7b:b5:fd:75:b0:93:a1:9d:9d:25:57:58:b3:0f:69:
                    f5:1a:db:24:5d:9b:2b:9f:61:c8:09:75:05:ab:59:
                    34:cc:a1:99:21:6b:b9:9b:31:a0:dd:4e:5d:4c:39:
                    44:8e:fb:89:dd:db:ea:97:75:0d:b5:37:10:76:9c:
                    c5:1d:4b:03:b9:31:8b:70:fe:73:73:32:45:70:4f:
                    55:13:5d:29:16:28:b1:90:48:7c:e6:1f:04:4c:8a:
                    cb:b6:2f:cf:4f:36:ef:30:da:74:a8:e6:43:c9:38:
                    e5:79:1c:56:0b:75:de:e2:b4:bd:f9:84:9d:b6:3e:
                    22:bb:a3:6d:cb:7b:07:a2:1b:a5:bd:eb:85:45:5f:
                    1f:9d:74:f2:41:cd:be:13:f2:19:4d:7c:93:03:46:
                    08:87:03:a2:62:8e:0b:23:8a:36:a8:60:fa:6d:9e:
                    95:8e:e4:f6:1a:65:27:07:70:e9:b8:ff:db:da:67:
                    49:35:75:c3:88:5c:fc:39:10:82:58:44:13:ac:4d:
                    c2:6e:e1:12:b4:e0:c0:97:60:a7:33:fd:d8:8d:1f:
                    08:e2:92:a8:01:e8:39:8e:c9:4e:ba:7b:e3:bd:2a:
                    e2:bc:68:62:17:cf:38:7b:67:0c:ea:95:b1:7e:6c:
                    86:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A4:DC:7F:46:61:82:40:D3:71:4D:F1:42:34:5C:D2:B8:9F:19:FB
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS203199.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8007::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:32:e8:a1:d7:3f:ff:e1:b0:a4:ca:d8:5b:f7:22:92:db:44:
         86:8a:b8:5b:2d:cd:1c:67:1a:09:09:b3:a4:a4:fe:56:a3:87:
         8d:80:31:ef:af:fb:cd:c0:70:bd:a8:70:69:6f:3d:95:1b:fc:
         76:b0:d9:04:9d:0e:ec:7b:34:38:d8:6c:0a:77:ef:99:e9:73:
         b3:71:9a:9a:ad:75:75:85:b6:42:4d:19:d1:24:78:a2:18:57:
         78:95:6b:26:c0:3e:83:a6:52:84:c2:1d:d1:1f:dc:2f:19:33:
         72:66:3a:2c:b6:ac:ad:70:b6:96:9a:6b:0e:1d:18:bd:d8:10:
         c2:7f:82:33:0c:f2:eb:e7:e2:ed:02:d8:d0:e2:47:11:22:98:
         bd:5b:46:f9:0a:1d:97:c2:b1:46:4f:7b:ee:32:f2:79:f8:57:
         7b:1e:04:90:2f:eb:b8:5d:eb:b6:fc:28:1b:37:45:12:8e:d6:
         e1:ea:0f:55:32:5b:b2:7b:14:f9:ee:5e:50:a8:b5:f3:36:39:
         37:38:89:53:99:e5:04:a6:5e:3a:0b:7a:65:90:43:34:f5:54:
         da:44:9f:a1:46:25:15:c1:f7:3a:1b:2b:30:30:53:41:b9:1a:
         9c:88:04:26:ae:8f:8b:1d:4a:f0:7e:77:04:b7:fb:43:cb:a9:
         c8:a4:12:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----