Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS203418.roa
File:                     AS203418.roa (raw, json)
Hash identifier:          fOVeWKVpk02Z+S89j02jqr3bt+9HgXzooQUkRL0ftPo=
Subject key identifier:   F6:54:F7:2A:CD:82:C3:44:A4:1B:A4:3C:27:4D:4A:89:FF:09:B1:3E
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       4028F04ACF3EBC482CB946DC4940EA6636331AA4
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS203418.roa
Signing time:             Tue 11 Apr 2023 01:14:01 +0000
ROA not before:           Tue 11 Apr 2023 01:09:01 +0000
ROA not after:            Tue 09 Apr 2024 01:14:01 +0000
asID:                     203418
IP address blocks:        2a12:dd47:807d::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:28:f0:4a:cf:3e:bc:48:2c:b9:46:dc:49:40:ea:66:36:33:1a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 11 01:09:01 2023 GMT
            Not After : Apr  9 01:14:01 2024 GMT
        Subject: CN=F654F72ACD82C344A41BA43C274D4A89FF09B13E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8f:48:e3:d2:47:2f:55:39:62:e5:a6:c8:f7:
                    a6:ee:ae:6c:d0:6d:1c:0d:cf:b5:ea:35:f0:3c:99:
                    51:c6:8d:c5:b7:7b:e2:8f:fb:3c:13:b8:fa:53:20:
                    dc:5c:de:b5:b2:21:22:aa:b9:2b:b0:47:2a:41:1a:
                    6a:ac:da:5e:7b:89:cf:de:7c:ed:70:b3:5a:74:cd:
                    13:f8:13:d6:63:f0:aa:5f:e8:43:7c:e3:ab:ba:e1:
                    c9:8d:0a:09:f5:34:d3:48:ec:cd:1b:cd:da:7d:9a:
                    6b:ce:7d:33:78:96:99:6d:af:32:ee:55:b2:58:82:
                    d2:0e:db:7a:18:3b:8a:8d:46:2a:89:f3:11:55:25:
                    d5:f0:04:06:f1:b2:e2:79:dc:53:6a:2f:fb:20:19:
                    d3:da:46:b6:d7:33:cb:a2:69:94:2f:49:93:b0:05:
                    4f:68:54:fa:86:c1:10:7d:5c:7b:6a:41:e3:67:a9:
                    e3:9b:ed:b5:1f:57:65:ad:96:2e:7a:fe:42:8e:b7:
                    a1:f3:cb:fb:64:49:2a:e1:d5:c7:ec:bc:bb:13:36:
                    b7:f4:da:92:33:03:66:3d:3f:8d:2c:da:79:f2:4d:
                    60:61:67:45:84:03:4f:3b:91:36:64:6b:df:49:69:
                    5c:15:0d:3c:d2:59:f3:51:f5:b0:3d:12:e1:17:b8:
                    1c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:54:F7:2A:CD:82:C3:44:A4:1B:A4:3C:27:4D:4A:89:FF:09:B1:3E
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS203418.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:807d::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:0b:7c:a3:28:e5:ee:51:51:af:6f:84:2d:17:e6:5c:c3:3f:
         1a:2d:e9:05:e0:7d:11:37:e3:57:e3:b5:62:87:3b:35:ad:f6:
         37:72:eb:16:53:07:0d:ae:13:e0:ae:2c:79:30:0b:d5:53:34:
         a0:4b:c8:ea:70:00:4e:41:a7:4f:c6:5f:18:53:a6:42:52:9d:
         68:65:2b:8e:5b:e6:41:2e:2c:55:02:7f:be:db:85:c7:f2:0e:
         01:bc:fe:6e:53:9a:1f:94:c9:eb:8d:84:91:3f:5c:e5:9d:3f:
         78:7e:fc:8c:79:df:ee:b1:5a:24:b2:99:40:6b:d0:93:28:80:
         ac:83:93:3c:31:ed:d5:2f:45:8b:57:ef:ad:f0:a7:ed:d8:4c:
         26:ca:b2:d7:3a:27:55:a4:ee:72:87:23:a1:73:33:63:bf:4d:
         b7:ee:df:0c:bc:f1:46:96:66:af:8f:f6:a0:6c:3d:6a:80:cc:
         9c:2c:f5:c7:06:1f:78:eb:cf:0f:4c:2f:2c:63:1c:55:c3:91:
         b6:30:5d:59:62:ed:d0:96:26:95:de:a6:41:f3:86:c7:1a:e7:
         57:cc:54:13:23:9a:ec:13:37:fc:0b:af:d6:26:72:b8:31:e6:
         09:ab:dd:9f:ac:18:86:0a:34:1c:28:b9:b4:67:41:fd:0c:15:
         83:ef:b5:15
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUQCjwSs8+vEgsuUbcSUDqZjYzGqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTEwMTA5MDFaFw0yNDA0MDkwMTE0MDFaMDMxMTAvBgNV
BAMTKEY2NTRGNzJBQ0Q4MkMzNDRBNDFCQTQzQzI3NEQ0QTg5RkYwOUIxM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkj0jj0kcvVTli5abI96burmzQ
bRwNz7XqNfA8mVHGjcW3e+KP+zwTuPpTINxc3rWyISKquSuwRypBGmqs2l57ic/e
fO1ws1p0zRP4E9Zj8Kpf6EN846u64cmNCgn1NNNI7M0bzdp9mmvOfTN4lpltrzLu
VbJYgtIO23oYO4qNRiqJ8xFVJdXwBAbxsuJ53FNqL/sgGdPaRrbXM8uiaZQvSZOw
BU9oVPqGwRB9XHtqQeNnqeOb7bUfV2Wtli56/kKOt6Hzy/tkSSrh1cfsvLsTNrf0
2pIzA2Y9P40s2nnyTWBhZ0WEA087kTZka99JaVwVDTzSWfNR9bA9EuEXuBxRAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQU9lT3Ks2Cw0SkG6Q8J01Kif8JsT4wHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMDM0MTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEt1HgH0wDQYJKoZIhvcNAQEL
BQADggEBAGMLfKMo5e5RUa9vhC0X5lzDPxot6QXgfRE341fjtWKHOzWt9jdy6xZT
Bw2uE+CuLHkwC9VTNKBLyOpwAE5Bp0/GXxhTpkJSnWhlK45b5kEuLFUCf77bhcfy
DgG8/m5Tmh+UyeuNhJE/XOWdP3h+/Ix53+6xWiSymUBr0JMogKyDkzwx7dUvRYtX
763wp+3YTCbKstc6J1Wk7nKHI6FzM2O/Tbfu3wy88UaWZq+P9qBsPWqAzJws9ccG
H3jrzw9MLyxjHFXDkbYwXVli7dCWJpXepkHzhsca51fMVBMjmuwTN/wLr9Ymcrgx
5gmr3Z+sGIYKNBwoubRnQf0MFYPvtRU=
-----END CERTIFICATE-----