Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS204769.roa
File:                     AS204769.roa (raw, json)
Hash identifier:          szscf9sxvcvqV6yMrhxekXks/Hb6ZUOdO32V8sPRfDg=
Subject key identifier:   58:0E:67:1D:4D:88:36:74:E1:D5:5E:75:70:D8:44:29:9D:1B:E7:4E
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       0D0AEEA905432AAFCACF5AD74534B995A8E458F7
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS204769.roa
Signing time:             Mon 10 Apr 2023 03:31:32 +0000
ROA not before:           Mon 10 Apr 2023 03:26:32 +0000
ROA not after:            Mon 08 Apr 2024 03:31:32 +0000
asID:                     204769
IP address blocks:        2a12:dd47:82a0::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:0a:ee:a9:05:43:2a:af:ca:cf:5a:d7:45:34:b9:95:a8:e4:58:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:32 2023 GMT
            Not After : Apr  8 03:31:32 2024 GMT
        Subject: CN=580E671D4D883674E1D55E7570D844299D1BE74E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:cf:73:47:af:64:c3:2f:de:df:ec:d0:a6:
                    34:12:34:70:40:bb:68:83:9b:b6:dc:e4:bb:37:e8:
                    3b:32:ec:bf:ec:06:e5:eb:f7:89:02:b4:0b:6d:8e:
                    43:61:8f:e2:2b:e2:3a:38:23:36:31:04:0e:54:8b:
                    4e:c1:ff:7c:73:84:9c:e2:51:30:0f:1b:b3:5f:78:
                    03:10:d8:de:16:ef:67:f8:a4:fd:fa:92:05:cf:aa:
                    ac:71:28:c9:83:c3:14:a7:cc:4a:fc:00:2c:0b:59:
                    30:f9:bb:c4:f1:ab:f1:0b:62:2f:de:93:27:4b:63:
                    5a:88:fd:ba:eb:76:02:b4:ba:f1:eb:e0:3a:39:86:
                    a5:4f:eb:17:b1:b7:85:cc:44:7c:66:c5:96:0b:ec:
                    dd:3b:5f:f1:c5:72:b6:cc:a8:90:fa:4e:44:9d:a2:
                    a7:f6:2d:81:44:20:10:ba:af:83:c3:3b:37:97:71:
                    ba:a5:c9:89:51:ee:8c:23:a9:a6:8c:93:4c:f4:11:
                    ca:aa:93:42:b1:0a:78:62:4e:64:47:24:8e:39:46:
                    52:12:2b:78:0a:47:0d:18:12:96:98:84:a0:b0:4c:
                    12:87:97:10:73:a7:25:03:c0:66:f8:65:7b:4b:a4:
                    91:8f:6b:f2:f0:9c:ff:42:70:dd:9f:b3:dd:ff:d3:
                    66:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0E:67:1D:4D:88:36:74:E1:D5:5E:75:70:D8:44:29:9D:1B:E7:4E
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS204769.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:82a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         50:d6:0b:2f:95:26:af:f9:7c:4f:a9:4d:b4:12:48:da:1d:16:
         6c:c2:13:b4:97:6c:3b:b1:8b:57:a7:0e:fd:7b:f3:cb:25:08:
         51:5d:6d:f5:eb:69:4b:80:af:e4:07:ce:29:e5:87:e9:0a:fb:
         8e:52:05:7f:46:64:f9:0c:24:67:b3:c3:0f:10:c2:f4:8f:21:
         b8:6d:fc:a2:97:b1:eb:91:64:40:c9:a0:5b:ea:a7:09:d0:00:
         76:18:cb:92:59:b8:4f:c8:a5:39:cd:10:01:a0:6c:d8:91:85:
         8e:b3:f1:e0:57:e2:56:94:03:42:2e:e8:6d:40:c1:4f:71:23:
         2a:52:00:10:97:b9:8a:97:c4:b1:fc:5f:f6:ac:42:26:12:4b:
         64:90:bf:7d:8c:5d:fa:c2:8b:25:c8:35:fb:3f:7d:77:17:cb:
         9f:87:49:52:59:41:1b:ce:fc:3d:3a:10:c7:86:25:e5:bc:02:
         8a:eb:42:ee:d4:c3:67:59:0a:8e:f5:21:30:30:ca:1a:86:6c:
         02:0f:6a:95:c4:b4:23:8d:96:be:34:12:71:03:7a:cf:0c:ee:
         9d:29:6a:9c:32:4d:e3:d7:f5:4b:3f:58:d2:f0:ea:7c:74:13:
         0d:94:e6:80:53:bc:b9:d4:0e:a9:55:1d:39:9f:f7:da:c3:19:
         e1:9c:58:d1
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUDQruqQVDKq/Kz1rXRTS5lajkWPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2MzJaFw0yNDA0MDgwMzMxMzJaMDMxMTAvBgNV
BAMTKDU4MEU2NzFENEQ4ODM2NzRFMUQ1NUU3NTcwRDg0NDI5OUQxQkU3NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAbc9zR69kwy/e3+zQpjQSNHBA
u2iDm7bc5Ls36Dsy7L/sBuXr94kCtAttjkNhj+Ir4jo4IzYxBA5Ui07B/3xzhJzi
UTAPG7NfeAMQ2N4W72f4pP36kgXPqqxxKMmDwxSnzEr8ACwLWTD5u8Txq/ELYi/e
kydLY1qI/brrdgK0uvHr4Do5hqVP6xext4XMRHxmxZYL7N07X/HFcrbMqJD6TkSd
oqf2LYFEIBC6r4PDOzeXcbqlyYlR7owjqaaMk0z0Ecqqk0KxCnhiTmRHJI45RlIS
K3gKRw0YEpaYhKCwTBKHlxBzpyUDwGb4ZXtLpJGPa/LwnP9CcN2fs93/02ZpAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUWA5nHU2INnTh1V51cNhEKZ0b504wHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMDQ3Njkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqEt1HgqAwDQYJKoZIhvcNAQEL
BQADggEBAFDWCy+VJq/5fE+pTbQSSNodFmzCE7SXbDuxi1enDv1788slCFFdbfXr
aUuAr+QHzinlh+kK+45SBX9GZPkMJGezww8QwvSPIbht/KKXseuRZEDJoFvqpwnQ
AHYYy5JZuE/IpTnNEAGgbNiRhY6z8eBX4laUA0Iu6G1AwU9xIypSABCXuYqXxLH8
X/asQiYSS2SQv32MXfrCiyXINfs/fXcXy5+HSVJZQRvO/D06EMeGJeW8AorrQu7U
w2dZCo71ITAwyhqGbAIPapXEtCONlr40EnEDes8M7p0papwyTePX9Us/WNLw6nx0
Ew2U5oBTvLnUDqlVHTmf99rDGeGcWNE=
-----END CERTIFICATE-----