Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS207598.roa
File:                     AS207598.roa (raw, json)
Hash identifier:          1X5ARPEgz1vgMKn3Swpp8y+BSegoXLJ8B84qzK48B00=
Subject key identifier:   13:7B:D8:D5:72:0D:25:23:49:04:63:0C:0E:D0:91:A8:20:89:DA:E8
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       6786A509B590B8534414B15C38CB6213A9315854
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS207598.roa
Signing time:             Mon 10 Apr 2023 03:31:39 +0000
ROA not before:           Mon 10 Apr 2023 03:26:39 +0000
ROA not after:            Mon 08 Apr 2024 03:31:39 +0000
asID:                     207598
IP address blocks:        2a12:dd47:8042::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:86:a5:09:b5:90:b8:53:44:14:b1:5c:38:cb:62:13:a9:31:58:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:39 2023 GMT
            Not After : Apr  8 03:31:39 2024 GMT
        Subject: CN=137BD8D5720D25234904630C0ED091A82089DAE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:20:cf:7f:2c:de:f9:82:df:e1:6b:b9:c6:61:
                    17:5a:f7:a2:bb:2e:8d:5b:ca:8e:f2:06:cd:36:92:
                    9b:bf:37:09:8d:83:e2:02:8f:6d:44:a5:56:ea:87:
                    90:7a:86:42:e4:dd:16:c5:f5:00:2c:9b:91:8c:47:
                    ee:29:4a:19:f3:56:a9:3d:0b:0f:b2:44:35:04:e8:
                    df:16:a6:79:99:fc:31:b1:ff:2a:64:11:82:a6:91:
                    a5:6e:e3:91:e0:56:94:98:91:43:6a:f2:58:1d:ec:
                    c8:47:4b:2e:3c:96:cb:12:3d:c4:30:82:b2:d9:18:
                    53:38:b7:e9:ec:1c:8e:ad:5f:a4:b4:7f:7c:b8:ae:
                    db:02:d7:fa:f4:f2:dc:4c:65:d6:bb:a6:8f:43:b1:
                    01:24:b6:e3:32:9b:f9:0c:0a:5e:00:ba:73:c3:04:
                    83:91:f8:98:9d:3c:70:24:9f:32:0d:3e:cb:f5:2e:
                    bd:9a:47:dd:9e:5a:3d:51:3c:d3:36:bc:e3:1b:2d:
                    2b:39:4b:b6:e7:ef:67:f5:c5:30:6f:38:af:a9:bd:
                    aa:8b:60:69:83:32:a4:26:14:fa:b9:e6:52:7c:a3:
                    c4:bf:93:88:09:9d:e9:2a:52:8f:73:ba:44:48:91:
                    29:87:af:b1:c5:a6:88:14:f8:e0:98:f9:5d:56:f9:
                    aa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7B:D8:D5:72:0D:25:23:49:04:63:0C:0E:D0:91:A8:20:89:DA:E8
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS207598.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8042::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:76:9e:6d:84:c4:7b:5b:41:d2:a6:cf:13:2b:7c:ce:60:73:
         b3:90:e7:2d:75:90:04:ac:81:a1:10:67:c2:bd:12:2f:3f:40:
         1a:12:75:07:9f:d0:1d:b8:63:51:56:7d:8d:9f:da:b3:b6:e9:
         18:c4:ef:99:90:d2:8a:af:79:e2:f4:2e:2f:27:a7:92:31:48:
         2a:c1:e3:ea:66:e4:04:68:de:d7:b9:65:83:c3:43:7d:15:4f:
         fe:8b:6a:d6:65:9a:55:79:6f:b0:f3:eb:f6:a2:b8:02:03:ca:
         38:25:d4:9c:ed:bd:e8:c9:b2:d8:a5:59:60:a4:15:3e:1e:18:
         6b:df:40:76:79:d9:7a:47:50:a2:75:43:a7:6c:30:35:5a:93:
         26:73:35:5e:46:da:d8:3d:72:4b:4c:c8:f7:fd:dc:81:b4:a6:
         5e:49:6c:0d:cd:68:e8:1f:69:d1:03:c8:40:ab:2a:3e:d1:d3:
         65:a1:92:95:d9:4b:8e:fc:31:38:d4:33:4d:53:f0:15:59:05:
         ef:20:eb:6d:71:f5:4f:7a:4b:be:c9:60:03:f8:51:90:0b:0d:
         8b:8c:33:f9:19:15:a6:46:bb:10:19:a5:71:f8:31:d1:c8:4c:
         0b:8f:11:0e:0b:3c:bf:2e:91:b2:c5:1b:4a:93:50:78:c0:6d:
         c3:85:f0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----