Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS209391.roa
File:                     AS209391.roa (raw, json)
Hash identifier:          7YOE3ksHRcVw7OqC9JNFdkPi8NmVrRK+l6r8blpaIlY=
Subject key identifier:   5F:D8:0C:E7:F4:94:71:88:BC:1F:3E:3C:A9:0E:BC:DD:49:FC:2D:BF
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       17AF99ED0AA02DEC1CA10EE6E60B5085FE89D775
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS209391.roa
Signing time:             Mon 10 Apr 2023 03:31:38 +0000
ROA not before:           Mon 10 Apr 2023 03:26:38 +0000
ROA not after:            Mon 08 Apr 2024 03:31:38 +0000
asID:                     209391
IP address blocks:        2a12:dd47:8e40::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:af:99:ed:0a:a0:2d:ec:1c:a1:0e:e6:e6:0b:50:85:fe:89:d7:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:38 2023 GMT
            Not After : Apr  8 03:31:38 2024 GMT
        Subject: CN=5FD80CE7F4947188BC1F3E3CA90EBCDD49FC2DBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:16:08:3f:e5:85:62:69:ba:fb:d8:1a:42:71:
                    a8:d7:6d:4f:fe:fa:c6:ed:9e:93:92:27:0d:76:42:
                    9c:49:4c:50:17:72:0f:cb:22:8f:72:03:31:04:b7:
                    c8:37:68:b9:f7:f8:0f:e4:0d:27:5f:fd:ed:49:92:
                    eb:0c:cf:76:56:4c:0d:a9:c3:e5:4e:ee:1b:ad:8d:
                    14:07:c0:e7:da:d8:6a:6a:1a:7c:f7:f9:9d:98:ea:
                    6f:0c:8b:39:23:e6:33:d4:48:16:9e:7d:7d:c3:6a:
                    0d:40:70:3e:d9:28:af:76:be:30:52:66:17:cc:74:
                    6a:4f:44:4f:68:e4:c8:18:f8:75:cb:2a:3e:d9:28:
                    d7:f1:0c:da:54:93:42:98:a3:96:b5:6c:fc:83:ba:
                    42:a0:20:41:1e:80:49:c9:55:1d:cf:6f:e1:21:15:
                    13:bb:08:9e:65:8b:51:3f:54:8f:44:0f:ae:f4:6a:
                    5b:13:29:16:27:3d:f3:04:ad:90:2a:67:bf:dc:13:
                    4b:b7:fa:b8:89:32:1d:91:2d:cf:94:4f:33:df:7f:
                    b9:9b:48:57:b4:13:1e:07:7e:36:a5:89:49:b8:bd:
                    73:3c:ab:f4:52:85:53:05:20:be:a1:80:43:7d:10:
                    60:c1:78:16:40:6f:f9:7b:c5:7a:bd:da:ae:a5:b4:
                    d2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D8:0C:E7:F4:94:71:88:BC:1F:3E:3C:A9:0E:BC:DD:49:FC:2D:BF
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS209391.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e40::/44

    Signature Algorithm: sha256WithRSAEncryption
         16:75:2d:9b:a8:35:51:a7:13:ea:bd:01:77:7e:5b:d7:64:17:
         48:c1:36:e1:3c:e2:7c:3b:cf:8e:2e:8d:c6:34:fb:f2:1a:14:
         76:21:22:88:0f:a3:4f:9d:6b:40:78:43:91:45:9c:a5:8f:27:
         ea:25:9e:3d:b3:08:32:56:0d:99:a5:4e:a4:45:5b:19:7e:00:
         5a:1f:a1:df:53:69:13:cf:90:c7:91:8b:b7:41:1b:ce:50:49:
         ba:66:24:2c:fb:44:f5:e7:6d:08:48:a6:01:2f:fb:eb:60:f4:
         43:6b:e5:a8:45:d4:d5:ee:c2:b2:fd:29:da:c9:b6:59:b7:98:
         f7:a2:17:bf:2b:e0:a6:29:44:64:d2:70:1d:e5:b5:70:8c:85:
         c5:c5:4d:45:ca:6c:7f:cf:0f:dd:51:5f:79:c6:ed:6e:e2:54:
         3c:9c:8f:ec:40:03:b6:4e:c3:73:c2:82:4f:a7:15:38:27:2b:
         2d:d7:e8:e9:6a:50:a8:3d:46:f1:4b:cd:05:ab:8f:5a:26:b5:
         15:6b:a8:48:ac:fa:90:2c:81:93:28:a1:b8:a2:46:f6:8b:22:
         a1:35:1a:d1:a6:fe:c1:a5:8c:88:ef:75:5f:3d:21:54:7a:c9:
         9d:c6:35:90:32:52:58:a9:cb:72:3a:02:20:12:b4:eb:5a:32:
         b1:50:72:f6
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUF6+Z7QqgLewcoQ7m5gtQhf6J13UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2MzhaFw0yNDA0MDgwMzMxMzhaMDMxMTAvBgNV
BAMTKDVGRDgwQ0U3RjQ5NDcxODhCQzFGM0UzQ0E5MEVCQ0RENDlGQzJEQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvFgg/5YViabr72BpCcajXbU/+
+sbtnpOSJw12QpxJTFAXcg/LIo9yAzEEt8g3aLn3+A/kDSdf/e1JkusMz3ZWTA2p
w+VO7hutjRQHwOfa2GpqGnz3+Z2Y6m8Mizkj5jPUSBaefX3Dag1AcD7ZKK92vjBS
ZhfMdGpPRE9o5MgY+HXLKj7ZKNfxDNpUk0KYo5a1bPyDukKgIEEegEnJVR3Pb+Eh
FRO7CJ5li1E/VI9ED670alsTKRYnPfMErZAqZ7/cE0u3+riJMh2RLc+UTzPff7mb
SFe0Ex4HfjaliUm4vXM8q/RShVMFIL6hgEN9EGDBeBZAb/l7xXq92q6ltNKDAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUX9gM5/SUcYi8Hz48qQ683Un8Lb8wHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMDkzOTEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqEt1HjkAwDQYJKoZIhvcNAQEL
BQADggEBABZ1LZuoNVGnE+q9AXd+W9dkF0jBNuE84nw7z44ujcY0+/IaFHYhIogP
o0+da0B4Q5FFnKWPJ+olnj2zCDJWDZmlTqRFWxl+AFofod9TaRPPkMeRi7dBG85Q
SbpmJCz7RPXnbQhIpgEv++tg9ENr5ahF1NXuwrL9KdrJtlm3mPeiF78r4KYpRGTS
cB3ltXCMhcXFTUXKbH/PD91RX3nG7W7iVDycj+xAA7ZOw3PCgk+nFTgnKy3X6Olq
UKg9RvFLzQWrj1omtRVrqEis+pAsgZMoobiiRvaLIqE1GtGm/sGljIjvdV89IVR6
yZ3GNZAyUlipy3I6AiAStOtaMrFQcvY=
-----END CERTIFICATE-----