Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS207320.roa
File:                     AS207320.roa (raw, json)
Hash identifier:          8Ty6T3u72yY3JK47afyOrxE+KUzsGm2oKVdY8RZNYGk=
Subject key identifier:   2B:03:9A:58:6A:16:BE:FD:39:6E:5F:57:97:4C:87:1D:5E:E3:56:53
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       7D9407D16A8EAB07CE55BD190C578258E7C3D1A6
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS207320.roa
Signing time:             Mon 10 Apr 2023 03:31:46 +0000
ROA not before:           Mon 10 Apr 2023 03:26:46 +0000
ROA not after:            Mon 08 Apr 2024 03:31:46 +0000
asID:                     207320
IP address blocks:        2a12:dd47:82e0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:94:07:d1:6a:8e:ab:07:ce:55:bd:19:0c:57:82:58:e7:c3:d1:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:46 2023 GMT
            Not After : Apr  8 03:31:46 2024 GMT
        Subject: CN=2B039A586A16BEFD396E5F57974C871D5EE35653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:07:10:2e:85:01:e4:43:6c:e7:3b:48:d1:f2:
                    88:23:78:85:b0:85:ac:99:48:83:00:00:ae:d9:56:
                    85:11:60:cf:dc:2b:36:04:71:35:05:48:26:e4:79:
                    ad:d1:2b:2b:23:58:9b:a1:1c:87:b6:74:07:a1:fe:
                    78:c9:0e:0b:f3:10:58:51:4b:d9:2d:2e:c2:89:bd:
                    bd:4c:40:02:a5:19:ae:76:88:e4:22:d8:77:cf:64:
                    5b:4d:6b:87:f0:02:b6:4b:77:eb:e2:f4:48:55:8d:
                    3d:18:f8:7c:0f:fd:18:d0:a5:68:0d:07:af:c8:60:
                    2e:d8:00:fe:91:a8:27:14:95:97:8c:a4:92:ed:c0:
                    5b:95:ca:94:1c:58:ce:60:bb:27:56:30:b3:4c:71:
                    fe:1b:82:75:0a:24:ef:d9:5f:5c:1c:c0:2f:69:9f:
                    7a:7f:89:cc:e4:cd:5f:92:a5:3e:7d:84:cd:e5:26:
                    7e:05:d0:fa:50:27:f8:bb:69:de:04:fe:da:9f:89:
                    6d:0e:f9:4a:47:93:94:8b:c0:80:78:eb:2e:c1:a1:
                    fe:60:e5:7d:37:2f:8e:17:be:13:fc:f7:ec:53:c8:
                    14:76:99:7d:f3:7b:8c:16:e8:2c:f9:39:41:42:48:
                    05:8f:31:03:52:e3:fa:aa:79:25:35:ab:21:12:00:
                    48:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:03:9A:58:6A:16:BE:FD:39:6E:5F:57:97:4C:87:1D:5E:E3:56:53
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS207320.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:82e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         35:34:55:b7:57:63:e9:12:eb:e6:ca:45:67:29:03:c3:2a:e0:
         ed:08:53:71:61:12:7d:cb:51:b0:fe:d5:66:f6:c1:9f:a3:ec:
         d4:ad:f6:59:19:7e:29:1f:96:05:4f:f0:ee:0d:3b:96:b1:50:
         20:6c:ee:6f:a0:65:c2:72:33:e3:9c:48:8c:f0:e2:1b:8d:d2:
         7f:88:e6:cf:30:22:5e:5b:22:c9:3c:da:83:17:68:29:49:b3:
         cb:8d:2d:0b:7f:08:7f:cc:75:07:47:66:e7:c8:ef:bc:6c:88:
         05:59:f5:a9:fc:2e:49:85:bb:b8:17:f5:c4:06:01:04:42:94:
         66:5b:ac:e5:ee:09:e9:d5:3b:0b:b8:af:26:fd:56:15:88:59:
         76:81:bd:f8:7d:50:0d:93:8f:0d:a6:83:9c:ca:e7:00:54:be:
         da:e4:c0:68:03:d8:fd:04:9b:2a:bf:88:30:f2:f8:f9:d1:e9:
         5d:5e:47:47:b0:74:4f:68:69:9a:61:d0:78:29:a4:43:cb:13:
         61:c4:fc:33:aa:8a:b7:46:a3:5e:10:1a:31:b5:d9:d9:3c:e0:
         0a:e2:25:76:94:de:5a:ba:3d:54:1b:11:a7:e0:2a:b0:45:c3:
         ac:6b:2a:9f:49:fe:31:fa:3b:de:11:dd:06:ce:94:c8:a3:61:
         d6:f2:7e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----