Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS204291.roa
File:                     AS204291.roa (raw, json)
Hash identifier:          ptxwRE+Na8BkY2puK8GYPg0L+fuLAtrNczCTqgtwLM8=
Subject key identifier:   B1:04:8C:C4:D8:D2:C9:77:AF:25:51:8C:04:10:6E:44:5F:E7:76:B8
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       6AA5731DF65B432208233E360F546F17523225D5
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS204291.roa
Signing time:             Mon 10 Apr 2023 03:31:44 +0000
ROA not before:           Mon 10 Apr 2023 03:26:44 +0000
ROA not after:            Mon 08 Apr 2024 03:31:44 +0000
asID:                     204291
IP address blocks:        2a12:dd47:8002::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a5:73:1d:f6:5b:43:22:08:23:3e:36:0f:54:6f:17:52:32:25:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:44 2023 GMT
            Not After : Apr  8 03:31:44 2024 GMT
        Subject: CN=B1048CC4D8D2C977AF25518C04106E445FE776B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:95:a3:12:4d:f6:d6:8b:3c:49:c2:7f:56:20:
                    0e:fd:e9:e0:6f:9b:c5:2d:aa:e9:66:93:10:20:54:
                    fc:4f:06:56:62:38:d3:10:77:47:d8:0b:2a:62:65:
                    66:c4:3b:c7:9a:de:94:a7:ce:f2:19:3d:bc:ea:de:
                    fd:e4:8a:19:93:31:14:f3:40:e3:19:e4:ac:13:3c:
                    76:1c:b5:0c:b6:c5:40:2f:43:8c:fe:e1:38:f1:c5:
                    45:e3:c4:36:3c:4c:33:d5:f8:a2:4a:ae:33:40:a2:
                    fa:36:e0:84:9d:32:db:d4:bb:79:6c:e9:a2:8a:04:
                    33:f2:9a:eb:f3:9a:f5:96:ab:7e:98:29:c8:21:fd:
                    c9:3c:83:21:f3:7d:bb:73:f5:c8:8d:ec:2d:39:9c:
                    67:22:7a:07:80:07:b6:ac:94:b8:d2:0d:d8:79:db:
                    fc:53:5c:9e:0e:3e:10:0f:f6:17:84:66:6d:48:fb:
                    0f:88:d2:eb:b2:b2:61:1e:00:47:20:b3:96:bb:99:
                    28:81:10:92:20:e3:d3:60:fb:00:34:17:48:0a:87:
                    e1:d1:79:33:3d:c7:fe:1e:cc:d7:98:a2:7e:b9:1a:
                    03:a3:69:a3:e0:59:40:52:cc:77:d0:44:b1:f8:4c:
                    ca:a1:f3:28:01:64:fb:79:a3:e3:f0:6b:d3:c5:c2:
                    77:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:04:8C:C4:D8:D2:C9:77:AF:25:51:8C:04:10:6E:44:5F:E7:76:B8
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS204291.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8002::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:59:4f:f9:d7:a0:aa:d5:94:f7:7e:37:48:f6:1e:46:e0:50:
         15:76:57:1c:3a:fb:41:f5:07:37:f4:f9:97:41:30:7a:7b:71:
         90:a7:71:88:b0:32:33:88:3c:28:d0:a5:42:b7:a0:d1:6a:a5:
         12:42:88:bc:9e:d0:7e:59:d8:6f:8d:55:17:96:0d:ae:0c:4b:
         35:f1:9f:2b:9b:65:85:7d:99:f0:53:68:a8:0f:18:88:10:7d:
         af:e3:db:a4:1f:49:3d:28:73:52:42:04:38:73:1c:2a:ea:af:
         75:cb:28:c6:7a:d8:8a:d9:cd:3c:56:fc:2b:a5:e8:d9:6b:05:
         3a:35:4a:38:50:66:47:0a:81:0b:2c:85:64:e1:76:7b:2c:9d:
         a7:70:56:9c:1f:1c:ab:fb:7d:60:be:9a:5b:d6:06:97:a3:c1:
         c3:a6:6d:c9:ea:c2:e7:6f:0b:78:4b:d4:7b:7b:a0:8b:55:a7:
         b4:a0:f6:7e:a4:81:ff:c4:f3:d0:36:03:28:85:60:95:ad:28:
         b3:b4:89:ff:2e:64:6d:e4:c0:e3:e8:a7:da:5b:4e:7a:1e:85:
         bb:15:b3:d3:fe:7d:aa:10:18:88:d2:01:77:7e:d2:23:3b:36:
         aa:23:7c:ef:d4:da:63:61:52:f9:ab:7c:6a:7a:b8:0b:12:68:
         36:2c:f5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----