Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS207731.roa
File:                     AS207731.roa (raw, json)
Hash identifier:          DmTwEFE6L59r6CSRvEWU/3krUyp5mzdvZQI3AJJSW7s=
Subject key identifier:   7D:2D:A0:C3:E6:17:22:18:D2:C9:99:DE:E0:47:6B:DF:09:C5:4E:06
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       6D445E5CB3D263ADBD99D1C4DDD016277B2B6F14
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS207731.roa
Signing time:             Mon 10 Apr 2023 03:31:34 +0000
ROA not before:           Mon 10 Apr 2023 03:26:34 +0000
ROA not after:            Mon 08 Apr 2024 03:31:34 +0000
asID:                     207731
IP address blocks:        2a12:dd47:816c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:44:5e:5c:b3:d2:63:ad:bd:99:d1:c4:dd:d0:16:27:7b:2b:6f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:34 2023 GMT
            Not After : Apr  8 03:31:34 2024 GMT
        Subject: CN=7D2DA0C3E6172218D2C999DEE0476BDF09C54E06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b6:f7:3e:a4:76:f9:03:36:cc:81:81:56:eb:
                    c9:ca:1d:d2:98:33:5d:99:c2:57:52:17:ff:b7:0d:
                    be:55:fa:00:9a:1a:0b:0f:73:68:9f:b8:02:7c:73:
                    f8:47:84:9e:8f:5b:88:0e:c4:9b:66:6d:c5:a3:77:
                    5c:c0:a9:9f:e6:91:74:53:80:11:5f:86:9b:74:c1:
                    51:6f:45:80:3c:0f:47:d0:61:0b:21:93:8f:50:68:
                    33:e0:c1:4e:f3:50:17:8d:bf:c8:71:fc:51:63:fa:
                    9c:93:60:c8:2d:a1:b8:17:28:92:67:b8:e1:d0:83:
                    76:fb:9a:0a:1f:a4:bb:9a:2e:5e:3d:36:ea:39:36:
                    63:46:89:af:b1:8d:54:b4:15:c1:a4:13:47:63:06:
                    b9:64:c3:bb:18:c8:74:eb:f2:7a:33:06:e3:e4:ab:
                    75:78:44:b3:11:d4:fa:6c:00:01:01:c6:e8:2e:a0:
                    74:ad:b0:8b:67:5d:1e:56:52:93:8b:a9:6e:b3:9b:
                    0f:0d:d4:e3:a5:82:29:00:5a:62:78:15:da:03:9f:
                    ea:5b:d3:b8:31:d0:c7:3e:ec:72:1e:01:9c:96:7c:
                    46:5f:be:b6:56:5a:30:6b:82:02:ce:16:12:8b:e2:
                    81:ef:3c:a8:f3:5f:cd:49:b5:72:b5:fa:09:92:b0:
                    57:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2D:A0:C3:E6:17:22:18:D2:C9:99:DE:E0:47:6B:DF:09:C5:4E:06
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS207731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:816c::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:40:3a:5f:72:09:54:6b:5b:6d:78:d2:e4:25:58:0f:0b:b6:
         05:bc:12:07:9f:e6:f4:0d:84:de:06:75:e6:be:df:34:f1:1f:
         03:2f:4d:b4:69:9e:b5:42:21:c1:da:7e:ac:2f:8f:49:86:20:
         e2:78:a4:70:17:15:11:81:df:f7:53:24:60:44:7e:d8:dc:0b:
         04:92:4c:4e:e3:2f:61:63:9a:7c:49:27:1f:69:f0:0a:77:11:
         c7:e7:6f:f3:8f:a5:d9:78:27:41:69:75:3f:1a:e8:a5:49:73:
         b7:d6:8c:42:31:e3:76:fd:d5:65:e8:f2:e0:eb:50:d6:f9:6b:
         3e:f8:30:94:53:2d:6f:7a:bc:bd:0c:08:0e:d6:d8:60:34:1c:
         e1:9b:c7:08:0d:1c:b5:26:f4:a8:6d:8f:84:47:3d:e8:d1:ad:
         4d:e4:db:3e:33:5d:53:6d:a4:48:1e:43:a6:fb:a5:92:9d:d1:
         2c:b4:86:8b:d1:4b:7b:8f:23:a9:27:c4:3b:46:04:eb:aa:a0:
         c4:74:6a:16:5f:7e:fc:90:c9:3e:ee:51:6a:b6:c7:8d:d1:dd:
         62:11:06:df:f9:38:e2:3c:20:48:b1:f7:39:45:db:4e:32:c2:
         dc:fe:67:c8:ff:f8:7b:2b:f4:02:aa:9c:bc:db:1c:bb:32:8d:
         8c:7f:fa:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----