Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS203661.roa
File:                     AS203661.roa (raw, json)
Hash identifier:          /Ovm+oPxYNp1J0R3Mp2GK2YIFyhUV3Cf8giwyqOrcsA=
Subject key identifier:   1D:4C:06:7D:41:A2:86:FF:87:F1:61:5A:6E:67:80:AF:96:E9:2A:69
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       5BD308ED2A32087991C89F7F8B63F494B736694F
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS203661.roa
Signing time:             Mon 10 Apr 2023 03:31:45 +0000
ROA not before:           Mon 10 Apr 2023 03:26:45 +0000
ROA not after:            Mon 08 Apr 2024 03:31:45 +0000
asID:                     203661
IP address blocks:        2a12:dd47:81d0::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d3:08:ed:2a:32:08:79:91:c8:9f:7f:8b:63:f4:94:b7:36:69:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:45 2023 GMT
            Not After : Apr  8 03:31:45 2024 GMT
        Subject: CN=1D4C067D41A286FF87F1615A6E6780AF96E92A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8f:e0:1f:5e:78:39:89:57:b3:a7:96:8f:3c:
                    b3:c6:ac:98:05:37:8d:5a:e7:f6:b5:a2:72:76:aa:
                    4c:d9:32:da:79:ae:1f:9d:72:d9:65:f9:08:9f:f9:
                    26:f8:39:44:1b:85:bf:d6:d9:21:8f:26:3f:5c:cc:
                    f6:56:fc:a3:68:10:ed:a5:89:a3:86:cb:52:5d:5c:
                    e5:29:b3:c2:e0:32:ce:1c:0d:38:6c:92:65:63:94:
                    7d:fc:a8:1b:41:ca:e0:d1:9b:3b:3a:75:46:8e:93:
                    cb:e7:37:82:71:67:01:71:ee:22:6b:9e:fa:43:08:
                    af:fa:46:a0:21:91:85:93:4e:75:cf:87:ff:16:29:
                    78:87:c8:c7:0c:87:a7:94:5a:01:06:0e:d9:d5:e5:
                    65:ab:95:12:7e:4b:2c:88:6b:34:52:39:ff:c5:62:
                    e0:4f:1b:6e:a9:f7:ee:c5:58:4c:89:99:07:d3:4a:
                    07:7b:8c:12:e3:22:2d:41:6c:cf:a3:62:01:70:6c:
                    6e:04:7b:f1:11:61:10:e8:5a:e4:57:f2:28:65:74:
                    f8:fa:17:58:e0:1d:b3:a2:95:bb:3a:e7:99:55:7d:
                    cf:44:83:bb:21:56:10:b1:f3:d5:94:ef:25:d5:97:
                    f9:d0:8c:62:6b:28:d6:47:22:1e:ca:39:b9:da:48:
                    22:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4C:06:7D:41:A2:86:FF:87:F1:61:5A:6E:67:80:AF:96:E9:2A:69
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS203661.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:81d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         49:65:66:c0:dd:7b:70:31:9b:5e:a7:ed:8d:9e:81:6d:e3:4b:
         b0:2c:cb:d2:1b:a9:e4:c7:f4:7f:e6:f2:2e:3e:f9:0e:13:3a:
         6c:3f:65:99:5d:8b:f7:02:06:03:b6:36:11:b9:62:5f:9b:7e:
         85:c4:16:3f:29:92:f7:43:f1:bc:a9:6f:4f:3d:eb:02:35:95:
         6a:08:c2:df:60:48:28:22:2e:88:20:7b:a4:f7:bf:1c:51:d2:
         31:f3:f8:03:6a:ab:2f:a0:a6:30:4d:9d:f5:86:66:d7:4c:e8:
         dc:36:a7:a6:a9:51:13:11:fd:90:07:83:df:6e:e0:7a:51:e9:
         40:62:40:34:7f:1a:d3:45:04:cb:6a:67:01:72:7f:db:86:19:
         b8:ad:ec:81:f1:6c:b8:ca:fd:ad:ac:ab:f2:ab:26:66:a7:e8:
         0a:f1:df:43:6d:97:0f:33:f3:1f:3b:1b:0f:e2:a8:8d:4e:4d:
         c0:d5:c9:04:38:b0:6f:70:f7:f4:13:d9:d8:40:41:cc:bf:7a:
         5f:f1:a9:73:b4:a4:8c:65:8b:91:15:88:ac:8b:f0:b4:d0:9a:
         7c:db:c8:c7:7c:72:9c:4a:37:67:3b:e6:40:61:d7:48:01:e1:
         b4:22:bf:cf:00:ec:56:2f:bd:4f:7b:ef:23:25:fc:23:89:35:
         5d:bd:53:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----