Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS203868.roa
File:                     AS203868.roa (raw, json)
Hash identifier:          YaBvHCKE3YaDZ5qA5yPbWIhRv055Uva59TQ2Q8nj3BI=
Subject key identifier:   E1:D4:4F:76:79:99:7D:4E:9A:4A:88:E3:10:21:36:0D:8F:EF:06:66
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       3EC397E83A8C5065FF8185D3A6224FAB1A2B4E35
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS203868.roa
Signing time:             Mon 10 Apr 2023 03:31:48 +0000
ROA not before:           Mon 10 Apr 2023 03:26:48 +0000
ROA not after:            Mon 08 Apr 2024 03:31:48 +0000
asID:                     203868
IP address blocks:        2a12:dd47:8046::/48 maxlen: 48
                          2a12:dd47:8700::/40 maxlen: 40
                          2a12:dd47:d000::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c3:97:e8:3a:8c:50:65:ff:81:85:d3:a6:22:4f:ab:1a:2b:4e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:48 2023 GMT
            Not After : Apr  8 03:31:48 2024 GMT
        Subject: CN=E1D44F7679997D4E9A4A88E31021360D8FEF0666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:26:eb:27:72:b8:68:f6:90:2b:58:26:e3:4d:
                    66:21:d1:9a:93:0e:e1:ef:fd:69:da:1c:af:96:9f:
                    35:6d:21:87:ec:f8:a0:2e:6a:93:59:52:41:72:0b:
                    ec:dc:cb:ce:ca:5a:97:68:b1:14:d1:34:cf:69:2b:
                    65:a3:2b:c5:ca:93:53:2c:24:d0:e3:63:36:66:7e:
                    4c:38:92:80:a8:91:31:8a:e0:19:f7:b2:f9:9c:e0:
                    07:4a:4e:d2:89:57:66:03:e9:e0:08:77:65:1b:1a:
                    6a:10:92:d8:6f:bf:a0:16:85:2c:a1:e1:00:a0:80:
                    89:6d:cb:23:f5:5e:16:09:84:27:28:8b:da:01:13:
                    c6:0c:26:d1:96:da:c8:9d:48:6d:03:4e:23:0c:8e:
                    42:b7:39:8e:a6:ef:9d:78:ec:52:38:2f:f8:64:10:
                    b5:c1:8b:2a:c3:91:56:65:ff:95:d0:a1:29:00:52:
                    32:fe:55:8a:fe:6c:c9:e8:fd:42:f7:a7:85:cc:86:
                    6b:d0:fa:dc:c0:88:1a:56:57:17:5d:6b:c4:8d:b9:
                    ba:ba:4b:80:33:a0:3a:9e:4a:76:4c:10:a0:89:ad:
                    f3:70:ac:d8:59:14:b1:89:1e:7d:b8:c4:b4:cb:cf:
                    f1:1f:a4:0d:92:1a:fd:93:2a:8a:ed:6d:40:c7:06:
                    98:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D4:4F:76:79:99:7D:4E:9A:4A:88:E3:10:21:36:0D:8F:EF:06:66
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS203868.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8046::/48
                  2a12:dd47:8700::/40
                  2a12:dd47:d000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:d6:ba:7f:fc:7f:50:a8:6c:60:16:33:a0:ab:2c:ac:fa:e0:
         37:3d:f8:5e:85:42:f1:a1:09:7e:4a:97:5e:52:44:6b:84:5b:
         24:ad:63:9c:15:c6:8f:b5:81:71:2e:fd:71:21:79:71:5c:e7:
         2c:5c:c5:70:e7:2e:10:9e:9a:f9:33:e4:d3:05:ab:11:66:b0:
         83:10:c0:3b:2d:a6:0c:51:e7:59:fb:b4:b8:cd:9a:ad:56:14:
         0c:36:d8:24:b3:59:31:c8:20:93:df:42:bc:35:ac:e3:81:be:
         6f:9e:82:b2:7c:4c:e1:2e:5f:bc:31:cc:d4:48:bc:4d:ac:f9:
         97:df:b6:83:db:3e:5b:0f:b3:5e:ec:d9:e6:8d:d7:61:38:58:
         57:f3:d5:7f:b8:4e:37:05:18:3b:5c:b5:0a:c2:4c:fb:d5:4c:
         6b:43:7b:99:ac:3a:90:c0:ba:7b:1e:38:a6:fb:45:4f:98:17:
         94:d5:1c:b9:09:b9:5f:dc:c8:22:d8:2b:bf:a7:db:a2:b0:44:
         c5:f7:2d:d4:d3:d1:6d:9c:8a:dc:42:98:78:c2:f2:96:14:77:
         81:74:4c:32:85:8f:8f:16:18:27:0b:ff:02:7b:28:9e:34:4c:
         94:d9:81:2a:34:26:b3:9d:fa:3b:0e:85:c1:dc:37:98:2a:a4:
         32:49:de:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----