Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS204676.roa
File:                     AS204676.roa (raw, json)
Hash identifier:          tvVP4U+69j4WKUzdQu+v/B72swoN/RQb9mdb5Z7bHTA=
Subject key identifier:   E7:E9:65:B4:34:E1:20:B8:AF:96:BD:36:61:F5:7D:7A:EB:0C:8C:42
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       2F0401097DEE4CA82C6B97856297E90626E77343
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS204676.roa
Signing time:             Mon 10 Apr 2023 03:31:52 +0000
ROA not before:           Mon 10 Apr 2023 03:26:52 +0000
ROA not after:            Mon 08 Apr 2024 03:31:52 +0000
asID:                     204676
IP address blocks:        2a12:dd46:8000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:04:01:09:7d:ee:4c:a8:2c:6b:97:85:62:97:e9:06:26:e7:73:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:52 2023 GMT
            Not After : Apr  8 03:31:52 2024 GMT
        Subject: CN=E7E965B434E120B8AF96BD3661F57D7AEB0C8C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:ca:f1:46:4d:1b:9f:7e:c0:fb:53:08:49:
                    84:db:d9:34:06:03:95:85:dd:6f:27:a6:53:c8:fd:
                    49:ad:db:d1:d6:c9:79:3a:14:a7:52:65:82:cb:fd:
                    1a:40:d3:43:e1:e6:fb:d1:d2:07:bc:eb:1b:8f:a9:
                    5d:ec:a8:d0:ea:a7:80:10:d9:91:93:88:af:71:0b:
                    5c:b4:f6:8e:91:70:04:f5:4f:74:7d:0a:6a:6a:5b:
                    27:c6:45:66:26:75:dc:d3:26:07:86:3b:ed:3b:83:
                    b3:d6:51:c3:43:d9:e1:1b:0f:4a:d4:85:ee:be:62:
                    e9:e4:f8:2f:0f:54:2e:c9:0a:85:ff:09:dd:0f:47:
                    9a:64:15:0d:6a:f4:e2:ac:56:a1:63:e5:aa:ff:6b:
                    3c:aa:c9:84:0d:61:87:11:d2:fe:ac:4b:81:c6:9f:
                    56:8f:bf:ed:b1:e0:59:36:c5:88:44:f4:cf:d6:88:
                    f3:a6:db:ea:0c:b8:56:a8:24:0a:aa:02:55:fe:63:
                    6f:b8:49:8a:ad:04:ad:d1:e1:76:b5:88:d3:1e:51:
                    0a:e3:b7:99:18:92:81:7f:47:7e:d8:83:b5:d2:fd:
                    9a:f3:4b:d4:16:bf:16:6d:14:24:e6:31:5f:f7:4c:
                    3d:28:cc:2c:ad:21:50:00:d5:45:6e:dd:5e:e3:94:
                    1c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E9:65:B4:34:E1:20:B8:AF:96:BD:36:61:F5:7D:7A:EB:0C:8C:42
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS204676.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd46:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         d4:42:cc:94:33:1e:da:8e:ec:94:fd:9c:80:a3:3d:4d:e0:84:
         96:29:cd:02:bc:fc:54:91:d0:da:1e:07:4f:1d:c9:d6:36:89:
         5b:4d:68:8e:ee:5f:39:17:4b:5e:26:61:06:bb:3a:83:36:5c:
         3b:34:25:ff:af:6d:95:b2:1b:40:4e:78:df:1f:ba:d4:fd:21:
         28:f1:f4:84:7f:e7:32:a3:7b:c6:79:ef:d2:47:ee:76:b7:2a:
         34:12:cd:a9:4f:67:dc:63:1c:d2:5e:f5:44:77:7f:01:13:40:
         b6:c5:3f:f4:43:6b:31:ac:4a:30:9a:e0:6b:a7:fa:b5:8a:b6:
         12:2a:1c:10:a9:79:70:8f:06:76:66:6c:6a:b7:6d:25:82:3b:
         8f:12:48:05:56:46:80:b0:15:54:4e:25:7f:af:d5:6a:90:0d:
         11:72:4a:7c:c7:9e:85:df:4b:69:33:a6:c1:34:d0:54:c9:81:
         cf:cf:d9:a1:f2:de:5a:57:8f:36:e7:e8:99:87:00:90:1a:b9:
         9e:a0:97:12:47:2d:df:3e:dc:01:84:8d:36:62:6a:c2:38:62:
         ee:68:2d:cd:3c:2e:08:7c:7e:89:dd:8a:33:b9:01:73:ab:49:
         bd:e9:91:5d:5f:54:5f:aa:a6:e1:89:05:7a:e0:21:19:ea:ff:
         61:15:ed:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----