Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS207142.roa
File:                     AS207142.roa (raw, json)
Hash identifier:          F64HuAr6BPpoOTsEp8FTj1VDyGTUW6xyABzn4a0BGxI=
Subject key identifier:   52:DB:A1:C8:47:BB:22:FF:5D:26:C0:58:78:98:DB:E3:2E:8E:6C:C5
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       4C9D2F391D98D6288B07BB808E89AAECFC4D0797
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS207142.roa
Signing time:             Mon 10 Apr 2023 03:31:50 +0000
ROA not before:           Mon 10 Apr 2023 03:26:50 +0000
ROA not after:            Mon 08 Apr 2024 03:31:50 +0000
asID:                     207142
IP address blocks:        2a12:dd47:8090::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:9d:2f:39:1d:98:d6:28:8b:07:bb:80:8e:89:aa:ec:fc:4d:07:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:50 2023 GMT
            Not After : Apr  8 03:31:50 2024 GMT
        Subject: CN=52DBA1C847BB22FF5D26C0587898DBE32E8E6CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0b:db:4d:9f:3b:4a:f1:b0:a1:b5:2b:d6:8e:
                    bf:c8:69:87:18:6c:84:8f:b8:01:07:15:72:a8:78:
                    8c:34:be:3f:4f:21:f9:c8:3f:5e:6a:6c:d7:91:ef:
                    39:02:7f:17:aa:7c:0e:a4:b6:c8:6a:0e:98:ec:60:
                    d0:01:06:4e:39:ad:4d:34:60:5e:07:dc:78:cd:c4:
                    04:d1:02:82:e7:b3:48:38:92:ae:bf:fc:20:b1:82:
                    2c:50:01:cd:7c:3e:27:39:9a:ef:69:fd:44:ea:6e:
                    b0:87:19:7c:32:80:8e:c6:ff:d9:6c:13:61:dc:a1:
                    8a:8b:eb:72:64:0b:25:9a:60:66:32:82:2c:7d:87:
                    08:d2:8c:be:8d:4b:7f:62:9d:94:1e:81:4f:93:91:
                    5b:3d:a5:d8:c9:cc:fd:6e:71:6a:98:61:b2:cf:08:
                    e9:e0:b5:66:92:2e:35:0d:e1:85:fc:76:25:cb:e9:
                    fb:fb:40:a7:5a:c6:4d:3a:66:ce:7a:e7:d1:78:14:
                    3a:d3:6f:2f:5f:2c:09:f9:7a:7b:74:02:b6:7e:2f:
                    89:2b:1c:11:ea:22:36:f2:04:3a:21:3f:2c:38:f6:
                    6a:d5:a4:b0:e7:0b:8f:fb:bc:db:8a:61:9b:1f:0a:
                    25:da:72:21:b0:66:74:31:95:5c:c2:19:fb:82:4d:
                    bc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DB:A1:C8:47:BB:22:FF:5D:26:C0:58:78:98:DB:E3:2E:8E:6C:C5
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS207142.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8090::/44

    Signature Algorithm: sha256WithRSAEncryption
         9e:85:1c:1d:68:8c:e6:57:c5:47:6f:1d:b9:ad:95:01:76:74:
         3e:60:ad:68:35:95:85:5a:90:8d:84:68:fc:99:46:40:5d:40:
         db:dd:0c:9f:f1:cb:11:2e:bf:3e:74:e8:87:a7:4c:bb:67:e5:
         36:23:c2:91:0a:48:39:7d:ac:c5:69:92:03:02:a9:94:13:39:
         19:49:02:03:23:81:fd:31:21:33:94:77:c0:44:86:da:d5:e4:
         73:ce:47:61:df:ab:0c:25:3c:0c:d8:6c:4b:84:5f:44:2d:40:
         b6:76:e0:fd:40:b8:a6:0a:e0:90:1a:f3:2d:19:d1:f5:18:fb:
         f9:a5:93:26:a3:3d:9a:3b:2b:f4:7e:38:fd:a1:86:67:74:82:
         fe:6a:1e:db:f4:72:af:9a:cf:73:6f:f1:a5:03:e2:56:b9:1d:
         8c:fc:6f:6e:03:b2:c6:b9:62:75:2e:d2:e4:a7:45:80:66:2d:
         40:ec:c8:37:9b:32:39:96:38:fe:ea:b1:80:7c:ce:22:f5:32:
         31:6d:62:51:b5:7c:0e:e4:47:f0:ee:fd:28:e6:e9:9d:81:c7:
         7c:5c:60:1e:d3:22:51:c9:c3:fd:5b:ed:bf:67:63:42:be:c9:
         45:70:cc:98:ef:ba:b3:36:4e:df:1d:20:af:8b:62:cf:6f:3c:
         1e:a8:7b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----