Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS207941.roa
File:                     AS207941.roa (raw, json)
Hash identifier:          7aae53E+ATspmiOOs29iS+h2r2ki4ojLoLoh0q+pJOI=
Subject key identifier:   15:5C:AA:F7:6F:31:CC:51:C4:1B:2F:31:DD:5E:AD:A8:4B:39:60:F3
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       229EB3E33D50200E63FEB6C7066A2C052BE3C9E0
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS207941.roa
Signing time:             Mon 10 Apr 2023 03:31:52 +0000
ROA not before:           Mon 10 Apr 2023 03:26:52 +0000
ROA not after:            Mon 08 Apr 2024 03:31:52 +0000
asID:                     207941
IP address blocks:        2a12:dd47:8005::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:9e:b3:e3:3d:50:20:0e:63:fe:b6:c7:06:6a:2c:05:2b:e3:c9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:52 2023 GMT
            Not After : Apr  8 03:31:52 2024 GMT
        Subject: CN=155CAAF76F31CC51C41B2F31DD5EADA84B3960F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:a8:60:62:74:08:1e:95:12:f2:81:8e:d9:
                    ea:3f:e2:f1:a9:0d:0e:16:83:16:e4:bc:de:2a:9e:
                    f9:1a:be:3c:13:d6:4d:69:cf:0b:cf:f4:aa:c2:24:
                    36:e0:78:53:fc:a7:c7:ed:0a:34:31:b5:4e:11:be:
                    28:53:d3:d7:85:a2:f1:07:2f:3b:5a:6c:62:29:cc:
                    fa:a2:47:7d:db:ce:81:dd:59:1a:c4:5c:0d:64:a1:
                    6c:f2:1b:ff:ec:bf:0f:4f:6a:48:52:55:ee:a7:fa:
                    07:b6:99:cc:9f:78:2c:2b:23:0c:b3:89:f3:91:15:
                    f5:45:24:c5:55:0c:fb:61:e5:01:2d:43:b8:0e:be:
                    cd:14:4a:f3:8d:06:12:dd:bc:47:09:11:10:ae:4f:
                    af:33:33:de:8c:cf:e7:12:cf:4e:d7:9f:d8:79:b9:
                    70:92:31:b1:f1:7b:76:0f:fe:4e:7f:54:6c:b3:6d:
                    a9:6e:44:3a:fe:2d:c0:3f:51:32:3d:91:0f:a0:88:
                    28:c1:86:d7:6a:ee:1b:b7:0f:a9:72:4e:01:d2:98:
                    b9:ce:25:94:31:2c:2d:04:e3:df:2d:11:c6:37:fe:
                    06:20:a6:a5:f1:5e:bf:b4:cc:26:96:b4:a3:d8:92:
                    b1:99:9f:33:27:b7:bb:f3:65:e4:21:13:f4:ca:f9:
                    e8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5C:AA:F7:6F:31:CC:51:C4:1B:2F:31:DD:5E:AD:A8:4B:39:60:F3
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS207941.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8005::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:fa:66:4f:45:ee:f1:87:b8:bd:f2:17:b0:dd:02:f5:90:c7:
         7b:69:77:07:6d:76:36:20:cb:88:08:dd:db:d0:16:ca:8c:a3:
         44:86:00:9b:6f:b7:5b:66:54:84:b8:c6:ef:76:fb:26:cd:ea:
         e1:00:1c:bf:99:a6:5d:78:04:bf:6b:f0:e0:74:1c:5a:0a:5b:
         c5:27:b5:8f:35:5f:d5:72:35:8a:cf:e6:ea:09:26:dc:de:f5:
         ad:f3:21:0f:9a:1f:16:24:7b:c5:bc:df:91:b7:e1:c9:a6:5d:
         1c:22:09:be:ae:86:3e:d0:6f:76:12:6e:8f:b0:02:a8:d9:84:
         5b:d3:7d:e1:dd:df:52:cd:aa:fc:f9:39:d8:a7:ff:93:93:16:
         63:97:d7:1d:fc:38:a8:71:81:ed:5a:51:32:de:0e:89:8c:7a:
         23:ab:37:48:27:7b:f4:b9:a7:52:8b:e3:c3:01:78:df:3b:63:
         f4:1c:d7:a8:a2:4e:61:59:eb:99:ac:f8:87:1a:f9:6c:61:b8:
         0e:ea:20:d4:78:81:41:d7:00:b3:52:a7:f3:eb:86:c0:80:57:
         d2:f8:40:05:58:53:f6:96:c6:82:8a:c7:6f:e6:7a:23:90:60:
         e1:5b:ea:0f:d3:f2:19:47:58:dc:d6:18:79:12:e4:d0:58:e0:
         e3:1b:67:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----