Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS210445.roa
File:                     AS210445.roa (raw, json)
Hash identifier:          oXkTwlXfKJe5S/jXOa6wOowMdQ+mTk5OpD9BX6Z9Elg=
Subject key identifier:   56:64:25:60:F8:84:A9:45:61:85:9C:F1:60:C1:E3:F5:2B:3B:DB:29
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       43C815D0DAF6C3806D74482575DDAFDA6B8F48C1
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS210445.roa
Signing time:             Mon 10 Apr 2023 03:31:38 +0000
ROA not before:           Mon 10 Apr 2023 03:26:38 +0000
ROA not after:            Mon 08 Apr 2024 03:31:38 +0000
asID:                     210445
IP address blocks:        2a12:dd47:804d::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c8:15:d0:da:f6:c3:80:6d:74:48:25:75:dd:af:da:6b:8f:48:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:38 2023 GMT
            Not After : Apr  8 03:31:38 2024 GMT
        Subject: CN=56642560F884A94561859CF160C1E3F52B3BDB29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f2:0b:c2:df:42:bf:6d:a5:e9:e9:56:36:1d:
                    ef:91:07:7a:e4:3b:55:b7:42:c2:66:e2:48:79:f3:
                    ec:07:09:78:1a:ed:5d:5b:23:cb:ba:8e:e9:58:59:
                    ce:48:de:de:44:fb:8d:41:09:85:2c:52:26:ce:d5:
                    53:4a:df:2a:a5:44:c5:66:5c:e2:a9:29:5a:ff:fb:
                    17:0f:55:09:b4:31:59:72:6e:0e:38:7d:41:79:89:
                    6c:ce:ce:de:b0:4f:34:65:e8:6e:de:cc:28:a3:f3:
                    fd:06:24:6a:f9:7c:c5:ea:fa:af:59:f2:1b:0d:24:
                    e5:c9:94:e7:5c:5c:ee:2b:be:e5:9c:0e:b2:ae:45:
                    4b:06:dd:6d:62:f1:89:5d:a1:54:f5:96:c4:17:82:
                    6a:02:a8:d6:41:17:8d:4a:18:fa:44:a1:28:91:b1:
                    f6:9d:43:71:54:a5:7c:c3:06:03:2c:0c:c5:06:8c:
                    43:ca:6c:8b:56:c5:9f:4f:a9:14:8a:48:ab:58:04:
                    f3:5e:9a:36:97:25:48:0e:6f:37:d7:49:df:a6:f2:
                    f3:4a:e4:1e:6f:d8:b9:59:f2:14:d9:0a:e7:f8:ae:
                    11:26:7f:35:5e:d1:81:c2:c8:e4:5a:e8:84:bc:30:
                    71:ee:4c:ca:38:75:a9:0d:5d:84:19:f1:c5:c3:eb:
                    45:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:64:25:60:F8:84:A9:45:61:85:9C:F1:60:C1:E3:F5:2B:3B:DB:29
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS210445.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804d::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:02:30:d3:7e:49:cb:b0:56:36:24:57:c8:a4:2a:96:2a:c2:
         ed:d0:5b:c4:75:a9:1e:56:a1:8c:41:53:38:03:4c:28:2c:a7:
         57:a1:fe:ea:18:38:9d:1f:1d:2d:74:71:fe:b3:a2:f4:68:d9:
         e9:fb:af:00:56:3b:3f:13:84:07:6e:e8:84:62:2b:a5:ce:d5:
         87:4e:cb:88:de:c9:4b:6c:ac:98:04:3e:2f:1b:de:d0:ee:4a:
         48:cb:20:6a:cc:65:91:b7:a5:07:07:6f:d3:4a:34:89:0a:9d:
         b8:2b:d9:a5:92:74:eb:e7:69:af:16:8f:15:67:ac:41:03:f7:
         28:4c:76:52:fe:32:7b:c5:7d:da:f4:5d:61:23:10:88:03:37:
         50:b0:b6:72:1d:d0:11:17:2d:8c:4a:fa:e2:f6:44:58:84:eb:
         c0:12:2c:8f:e4:a6:a0:3b:94:fb:fb:2e:3b:e0:c5:63:1d:e2:
         d3:13:ee:48:9b:a8:e2:3b:27:16:56:cf:ed:f0:29:ac:a8:0e:
         81:c9:7c:8a:2e:e1:95:1f:a6:24:3a:e8:8e:c7:80:75:ce:94:
         4b:8a:b8:62:15:3a:fb:08:55:0d:70:39:a0:06:ad:32:b0:cd:
         f9:a8:f3:d3:65:83:43:15:e5:83:c5:70:ff:e5:fc:98:71:2e:
         3d:d5:ee:cc
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUQ8gV0Nr2w4BtdEgldd2v2muPSMEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2MzhaFw0yNDA0MDgwMzMxMzhaMDMxMTAvBgNV
BAMTKDU2NjQyNTYwRjg4NEE5NDU2MTg1OUNGMTYwQzFFM0Y1MkIzQkRCMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE8gvC30K/baXp6VY2He+RB3rk
O1W3QsJm4kh58+wHCXga7V1bI8u6julYWc5I3t5E+41BCYUsUibO1VNK3yqlRMVm
XOKpKVr/+xcPVQm0MVlybg44fUF5iWzOzt6wTzRl6G7ezCij8/0GJGr5fMXq+q9Z
8hsNJOXJlOdcXO4rvuWcDrKuRUsG3W1i8YldoVT1lsQXgmoCqNZBF41KGPpEoSiR
sfadQ3FUpXzDBgMsDMUGjEPKbItWxZ9PqRSKSKtYBPNemjaXJUgObzfXSd+m8vNK
5B5v2LlZ8hTZCuf4rhEmfzVe0YHCyORa6IS8MHHuTMo4dakNXYQZ8cXD60VjAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUVmQlYPiEqUVhhZzxYMHj9Ss72ykwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMTA0NDUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEt1HgE0wDQYJKoZIhvcNAQEL
BQADggEBAKoCMNN+ScuwVjYkV8ikKpYqwu3QW8R1qR5WoYxBUzgDTCgsp1eh/uoY
OJ0fHS10cf6zovRo2en7rwBWOz8ThAdu6IRiK6XO1YdOy4jeyUtsrJgEPi8b3tDu
SkjLIGrMZZG3pQcHb9NKNIkKnbgr2aWSdOvnaa8WjxVnrEED9yhMdlL+MnvFfdr0
XWEjEIgDN1CwtnId0BEXLYxK+uL2RFiE68ASLI/kpqA7lPv7LjvgxWMd4tMT7kib
qOI7JxZWz+3wKayoDoHJfIou4ZUfpiQ66I7HgHXOlEuKuGIVOvsIVQ1wOaAGrTKw
zfmo89Nlg0MV5YPFcP/l/JhxLj3V7sw=
-----END CERTIFICATE-----