Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS206368.roa
File:                     AS206368.roa (raw, json)
Hash identifier:          jQKR6WRQ9UHnIdywjimUjVsazN+xu4xfcQVdllCFpww=
Subject key identifier:   E2:13:84:CE:12:D9:BB:2B:BA:4C:F8:01:9D:76:DC:38:47:D3:92:DC
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       41FE1DB49142995FE1F13A3069EC1970E90EFDDD
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS206368.roa
Signing time:             Mon 10 Apr 2023 03:31:48 +0000
ROA not before:           Mon 10 Apr 2023 03:26:48 +0000
ROA not after:            Mon 08 Apr 2024 03:31:48 +0000
asID:                     206368
IP address blocks:        2a12:dd47:80f0::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:fe:1d:b4:91:42:99:5f:e1:f1:3a:30:69:ec:19:70:e9:0e:fd:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:48 2023 GMT
            Not After : Apr  8 03:31:48 2024 GMT
        Subject: CN=E21384CE12D9BB2BBA4CF8019D76DC3847D392DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:78:bc:87:71:0d:fd:b2:5c:6a:8e:7d:42:fe:
                    3a:60:28:bd:f0:e2:59:f9:0a:ef:54:55:b2:9b:2e:
                    eb:77:29:2d:7e:49:2c:eb:88:46:9d:1d:6b:8f:54:
                    30:73:ac:0e:d9:e1:a3:04:91:9a:a8:58:ad:72:67:
                    a3:24:69:c3:dd:0b:39:51:c4:45:15:07:9b:47:fc:
                    17:7b:e4:e2:bb:a1:c9:57:fc:d6:5d:2b:85:73:9b:
                    49:6d:90:ed:68:99:0b:cd:aa:86:78:0a:b6:38:18:
                    84:28:36:31:72:fb:25:46:52:4d:fa:fd:86:c7:05:
                    ea:4c:39:79:3a:e4:b6:29:de:b2:b1:74:b1:9b:1d:
                    c8:25:f7:48:d0:b2:33:8c:22:49:9c:31:46:ad:c2:
                    8c:9c:f3:74:0f:6c:3d:9e:94:8f:91:29:46:0d:40:
                    e2:39:6f:16:d0:1f:52:d4:26:22:71:69:b3:62:11:
                    f1:19:bb:af:75:82:2f:24:df:e9:db:c3:f4:26:6b:
                    67:77:70:a7:19:10:96:ec:71:4f:c3:44:6a:4e:55:
                    e0:26:6f:e1:bb:3a:03:56:b1:77:c6:dd:96:6b:06:
                    a7:be:d0:d5:92:7b:d9:86:3b:aa:c2:15:24:80:7f:
                    d5:cc:51:53:2a:ee:62:aa:6b:59:21:20:35:e3:d0:
                    31:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:13:84:CE:12:D9:BB:2B:BA:4C:F8:01:9D:76:DC:38:47:D3:92:DC
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS206368.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         0e:33:90:9e:58:17:b9:ee:fc:72:79:5c:61:d4:e0:2c:19:46:
         55:39:a5:59:7a:77:53:e4:c3:38:75:15:5c:d1:b9:38:f4:ea:
         ba:79:f1:8c:81:45:d9:58:1d:65:3a:24:59:d0:e1:fa:d8:fb:
         64:40:48:6e:63:ef:ab:59:1d:7c:38:d6:64:59:c1:53:11:e6:
         60:cb:e7:e8:b2:76:e4:ef:7d:e5:8d:88:69:be:25:64:73:28:
         6b:a6:fd:cd:96:e9:e7:36:79:60:8b:04:3d:1c:0a:a3:ab:07:
         0a:17:19:f9:ee:e9:7d:a7:44:ed:ae:85:f1:07:86:28:0f:11:
         2b:52:8c:e4:e4:d1:ec:00:87:cb:30:46:ed:84:d7:15:70:d3:
         af:b7:a6:1f:0a:94:e3:70:70:81:8e:50:c0:0b:ad:2a:fe:1d:
         54:92:df:df:58:d9:cc:68:dd:80:73:a8:ff:e2:46:b2:5f:ae:
         82:4c:45:f5:a1:53:15:e3:26:0e:38:fa:9e:27:0c:0c:6b:1f:
         4b:09:26:58:97:9f:07:74:05:ce:53:b2:d4:b2:90:e5:13:aa:
         eb:c0:03:b7:6b:9d:51:7c:a5:76:a5:41:8e:4f:46:c0:94:b3:
         45:ac:c9:af:67:61:11:94:dd:ce:ee:51:6c:a9:eb:82:f4:af:
         f0:f3:e3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----