Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS204518.roa
File:                     AS204518.roa (raw, json)
Hash identifier:          BMBrNYXKO+ckQ+hPwTG8Pt1ciqQIBdokK1XV8QfxrMc=
Subject key identifier:   1F:8F:62:53:AA:BA:09:D6:B7:60:5F:0B:D6:9B:97:0A:EB:0F:DB:D8
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       6E089F27E7CF222AFF9443003287A77F30DF9B9A
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS204518.roa
Signing time:             Mon 10 Apr 2023 03:31:36 +0000
ROA not before:           Mon 10 Apr 2023 03:26:36 +0000
ROA not after:            Mon 08 Apr 2024 03:31:36 +0000
asID:                     204518
IP address blocks:        2a12:dd47:8080::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:08:9f:27:e7:cf:22:2a:ff:94:43:00:32:87:a7:7f:30:df:9b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:36 2023 GMT
            Not After : Apr  8 03:31:36 2024 GMT
        Subject: CN=1F8F6253AABA09D6B7605F0BD69B970AEB0FDBD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ed:ae:de:64:d6:33:17:3c:6f:8f:eb:19:f2:
                    db:77:ee:2a:8e:19:60:dd:29:9f:df:59:02:df:67:
                    f7:19:0b:ba:93:41:89:01:4c:12:d5:1d:31:c8:b6:
                    a6:90:20:a5:3e:35:e7:d6:38:58:6f:8f:26:34:3b:
                    94:98:d1:12:54:f1:6b:01:56:18:04:b0:d4:14:52:
                    a4:b7:65:8c:40:40:cf:e6:29:a4:51:df:3a:b6:db:
                    ec:c7:a0:e8:9e:8c:a3:b5:07:6a:dc:3f:2b:e0:b4:
                    fb:51:c4:b7:6e:7c:35:1d:21:72:6e:32:4c:ce:a8:
                    34:84:ec:1b:11:16:4b:36:13:a6:bf:2e:69:79:a6:
                    79:b5:f9:83:6b:24:f3:0d:41:e7:b1:e2:ba:89:12:
                    77:16:c6:c8:f7:f4:06:80:dc:09:b7:85:00:f0:e3:
                    d6:a5:52:e1:8d:6f:ea:4b:6d:c9:48:8c:de:15:7f:
                    19:d2:cf:c2:30:6a:50:52:98:2d:2a:a9:67:3e:cf:
                    d0:a6:b9:23:e8:6a:32:44:f9:b5:42:ce:73:66:6f:
                    d9:8e:88:89:62:f6:02:45:40:94:ce:e8:58:a7:04:
                    65:c1:ee:b5:af:f6:4d:6c:02:30:9a:e0:cb:cb:ca:
                    c9:3a:16:d0:df:5a:06:91:9d:54:75:7b:eb:7f:c0:
                    e8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8F:62:53:AA:BA:09:D6:B7:60:5F:0B:D6:9B:97:0A:EB:0F:DB:D8
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS204518.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8080::/44

    Signature Algorithm: sha256WithRSAEncryption
         1d:0e:fe:07:c3:2a:9d:a7:89:90:3e:66:34:0c:02:99:04:81:
         df:41:fc:4a:9b:dc:b7:59:d2:55:82:a2:2e:55:9a:af:7c:ff:
         24:9a:ea:19:32:51:4c:1c:f2:e7:85:c0:9b:71:24:dd:e3:82:
         43:9e:c1:63:b9:ce:85:77:ab:f4:b1:f4:b7:27:03:4b:73:ba:
         e2:f2:e5:6d:8e:97:9b:5c:6b:cd:65:84:8a:e4:15:44:f1:1e:
         90:aa:41:71:a7:ae:cb:c0:f0:bc:1b:64:81:52:c6:41:84:2c:
         93:ec:d4:7d:e1:7f:92:4c:e8:d4:bd:c0:5f:95:ab:87:8b:5f:
         e9:72:9e:23:16:14:17:52:13:2d:3f:61:7e:b1:e6:93:09:cf:
         8c:e3:1b:04:3f:ad:bd:62:25:32:f7:e2:86:4e:ee:b9:d5:19:
         70:07:36:46:c4:f2:fe:d3:c7:af:4d:86:a6:cf:8d:33:64:cc:
         89:1f:3a:98:28:bc:9f:4f:ef:4b:bc:34:56:6f:42:58:0e:48:
         e4:04:6c:45:e7:1d:61:1f:61:13:41:0d:7b:64:f6:5d:d3:df:
         76:fe:c2:29:d5:e5:1a:bb:40:41:2f:22:a0:1d:fb:4f:60:4e:
         4e:f4:73:af:48:58:98:6a:89:a6:0c:bb:1c:d1:33:50:e2:dd:
         86:ac:de:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----