Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS208690.roa
File:                     AS208690.roa (raw, json)
Hash identifier:          II8zbMyb6ghKYBcu/lF/NtTBpwGfvBiqzncAVHBqIAU=
Subject key identifier:   A3:CA:52:3C:B5:31:F8:C3:92:DC:D2:FB:B2:99:99:40:55:51:8E:44
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       05D6F25550BA821FB557B8BAD21AF6DD91FCF7D4
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS208690.roa
Signing time:             Mon 10 Apr 2023 03:31:45 +0000
ROA not before:           Mon 10 Apr 2023 03:26:45 +0000
ROA not after:            Mon 08 Apr 2024 03:31:45 +0000
asID:                     208690
IP address blocks:        2a12:dd47:fa00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d6:f2:55:50:ba:82:1f:b5:57:b8:ba:d2:1a:f6:dd:91:fc:f7:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:45 2023 GMT
            Not After : Apr  8 03:31:45 2024 GMT
        Subject: CN=A3CA523CB531F8C392DCD2FBB299994055518E44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:6c:72:da:37:81:48:ea:04:de:53:6d:00:ab:
                    67:81:00:9d:30:21:34:85:ac:c9:77:e4:4e:5d:39:
                    e8:cd:0b:c8:1b:1c:f0:1f:9e:7f:7f:42:51:b3:ee:
                    7e:27:a4:c8:89:32:c2:fc:ad:59:eb:30:9b:8c:b6:
                    7b:84:ea:57:b6:e8:a1:fb:28:b5:dd:a8:3a:4c:3d:
                    9d:41:a1:70:13:77:ff:07:89:b2:8d:13:9f:1a:af:
                    57:a9:07:be:d1:ff:19:af:45:16:12:c5:e3:71:b9:
                    36:0a:d2:10:19:8e:66:90:17:bd:c8:b1:cb:31:fd:
                    29:d1:9c:d0:38:cd:c6:60:13:ff:3c:e7:7d:e5:da:
                    57:e8:4c:4c:8f:0b:2a:fc:d0:7d:d3:60:de:17:24:
                    9d:e8:34:fd:71:6b:fb:2b:e4:4b:ad:ac:80:2d:3f:
                    b4:7a:08:3d:33:2a:d2:85:6e:7e:b1:5e:ea:c4:7c:
                    8b:27:4b:f8:0f:7e:79:97:de:b3:3e:c5:22:a3:6c:
                    9b:72:d6:0f:eb:79:5e:81:a0:0c:0e:b5:7f:89:a4:
                    2f:f7:9f:a6:53:c5:29:4d:79:76:1b:73:ff:88:c3:
                    7d:70:c5:1b:50:45:3b:f1:14:10:26:25:cf:8d:84:
                    5f:ba:92:e2:52:f8:87:1a:6a:b9:6a:41:a8:2c:d1:
                    a7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CA:52:3C:B5:31:F8:C3:92:DC:D2:FB:B2:99:99:40:55:51:8E:44
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS208690.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:82:60:c4:47:66:2c:ae:03:46:90:e7:da:8b:bf:13:f6:7f:
         58:4e:7f:27:1c:ec:97:64:fc:30:ba:39:6a:44:d8:e5:8a:f8:
         ae:a6:2f:7d:c3:b7:52:bb:c3:a4:61:12:c9:31:e4:2e:cd:8b:
         ef:87:31:a3:92:1d:e6:ca:36:5b:13:12:f7:e0:40:a1:4a:bb:
         26:dd:72:4c:ac:eb:cd:1b:c9:14:c2:2a:a7:eb:7a:55:e3:47:
         ec:e6:3d:a5:bc:3a:ef:c3:e2:b4:87:84:5c:07:f4:27:4a:67:
         32:88:ac:3c:00:0a:6a:aa:0a:b0:43:ea:d1:16:ed:67:89:ff:
         09:d0:82:e0:f6:13:02:61:5b:0a:60:da:ce:38:e3:06:a6:66:
         53:07:cc:a2:9b:06:72:91:bd:6a:ba:de:10:da:a0:df:b1:96:
         b4:5c:9f:e4:b3:6e:25:1c:8d:a5:01:b0:dd:9c:e1:37:a4:16:
         af:7b:cb:85:c4:8d:de:0d:6c:c7:e5:ff:c5:e8:a8:14:6e:49:
         24:ef:ad:42:0f:f2:e2:14:2a:e9:9a:42:12:64:da:35:82:62:
         19:f1:7c:2e:5b:53:3a:f4:79:d9:9a:2c:10:5b:20:b4:80:4b:
         0b:10:5c:cf:42:b0:8c:09:a7:a7:97:11:5c:2c:66:55:07:51:
         f5:f1:99:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----