Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS206042.roa
File:                     AS206042.roa (raw, json)
Hash identifier:          H9IWG/jUUrQ/xL2wfloOVQXagwecEVo9Dz6JJ1IRQFM=
Subject key identifier:   18:7C:BF:E1:63:29:0A:B2:51:7A:A3:78:0D:25:04:20:DF:78:A2:E4
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       77201292D6F0EBAAE8EB2305F4B62F9A72612E2E
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS206042.roa
Signing time:             Mon 10 Apr 2023 03:31:39 +0000
ROA not before:           Mon 10 Apr 2023 03:26:39 +0000
ROA not after:            Mon 08 Apr 2024 03:31:39 +0000
asID:                     206042
IP address blocks:        2a12:dd47:8390::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:20:12:92:d6:f0:eb:aa:e8:eb:23:05:f4:b6:2f:9a:72:61:2e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:39 2023 GMT
            Not After : Apr  8 03:31:39 2024 GMT
        Subject: CN=187CBFE163290AB2517AA3780D250420DF78A2E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6c:ab:60:39:79:24:cd:f9:7a:4c:30:da:c1:
                    a6:0c:03:eb:32:16:ec:80:73:c1:6f:7c:6e:d2:fc:
                    7b:b8:20:e2:b0:a0:4e:a1:b8:59:bd:be:26:9d:58:
                    9f:40:98:ba:17:5f:a7:a0:c3:4c:f1:51:f8:71:fc:
                    ae:f9:67:6b:be:c3:f0:b0:98:20:5a:ff:c5:65:47:
                    09:4f:4c:e0:1b:a4:d1:0a:8f:3f:d1:1c:fe:ae:e6:
                    45:ee:37:93:8a:62:98:94:cf:61:00:f1:f7:59:ea:
                    9d:e7:ad:60:04:aa:89:2d:51:63:60:02:5f:95:17:
                    cd:c2:e2:11:ed:79:04:11:99:8f:44:7c:28:c2:ee:
                    08:c7:06:7c:e9:d1:76:50:14:e8:d6:de:f0:a2:97:
                    85:6e:f6:cb:e1:90:48:49:29:0e:71:eb:b3:7f:7f:
                    4e:10:07:d9:f0:0d:38:63:06:a0:e2:b3:6c:60:5f:
                    74:33:ef:af:46:7c:50:e7:28:48:d8:55:dc:64:b3:
                    68:00:6d:98:f5:d9:81:c2:fe:3e:46:6d:f7:ee:f0:
                    11:15:42:1b:9e:85:75:4f:df:09:de:ad:28:86:c3:
                    32:3a:35:13:51:58:7d:3d:3c:9a:fa:e8:02:2f:99:
                    81:1a:60:ff:f9:0e:0a:36:30:cc:c6:db:f4:f3:e8:
                    f0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7C:BF:E1:63:29:0A:B2:51:7A:A3:78:0D:25:04:20:DF:78:A2:E4
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS206042.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8390::/44

    Signature Algorithm: sha256WithRSAEncryption
         d0:f7:d0:df:ff:bc:0f:0c:f7:d7:5a:a4:1c:7d:81:69:7c:53:
         f9:42:63:51:bf:69:8a:cc:78:ff:35:33:d1:4c:6c:37:c9:4a:
         b9:e3:cc:16:5f:55:eb:01:72:f3:1b:91:99:47:ab:9c:32:76:
         ff:e5:89:67:0a:97:c2:e2:62:78:b2:fd:91:6b:6f:72:2b:46:
         94:84:51:d3:83:5d:90:8a:df:93:fa:a0:e2:fd:d5:78:e9:06:
         d1:62:26:40:7c:43:ee:7d:a4:65:ac:ff:4e:6c:23:13:92:e7:
         f8:c3:c9:45:f7:2f:00:36:c9:64:fb:1e:ac:11:d4:72:9e:f8:
         da:2a:24:4b:47:34:9e:d8:82:d9:f8:d7:05:95:93:56:28:58:
         b1:1c:82:bb:af:e8:5a:e4:41:79:7d:92:cc:bb:64:97:bb:66:
         fb:78:e1:3e:c4:18:87:5c:c8:ed:cb:95:e7:05:9f:2c:56:e2:
         11:16:da:02:7c:05:91:5d:31:d0:ad:5f:38:d0:9e:c9:35:05:
         0a:f6:8b:e5:a1:c9:87:38:89:f0:2d:bc:d2:39:b3:54:80:2e:
         56:dc:a7:b4:d2:d3:b7:d4:6c:aa:22:de:ef:3a:d2:c9:55:f3:
         5c:89:5c:45:1a:8c:e6:21:79:ad:6b:64:be:bb:2f:f8:6b:36:
         52:a7:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----