Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS211358.roa
File:                     AS211358.roa (raw, json)
Hash identifier:          hnG2mAWrKS9UGwaP/QbM50dZFmKP2kS0C2wy7Bw3iVY=
Subject key identifier:   ED:60:66:BE:81:D5:74:BA:0E:A7:C8:7A:DF:1A:C3:3D:12:0F:3E:B5
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       5352DE5CE512DE060BFF31FCF5A14B6FE92FB1F5
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS211358.roa
Signing time:             Sun 07 May 2023 04:28:48 +0000
ROA not before:           Sun 07 May 2023 04:23:48 +0000
ROA not after:            Sun 05 May 2024 04:28:48 +0000
asID:                     211358
IP address blocks:        2a12:dd47:8e30::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:52:de:5c:e5:12:de:06:0b:ff:31:fc:f5:a1:4b:6f:e9:2f:b1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: May  7 04:23:48 2023 GMT
            Not After : May  5 04:28:48 2024 GMT
        Subject: CN=ED6066BE81D574BA0EA7C87ADF1AC33D120F3EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cd:e6:7d:c2:cd:d2:9a:3b:e5:37:2b:c2:cf:
                    b5:21:3f:b2:9f:34:6c:d8:ac:40:e0:05:02:e6:12:
                    5d:13:fa:05:30:80:71:5e:88:ac:e9:08:a3:3d:2f:
                    1e:01:b7:e2:a0:50:f0:2a:29:4d:6b:e9:84:c1:e8:
                    e4:06:3a:72:35:98:b5:fd:e8:47:70:60:90:41:a6:
                    f6:5f:56:8a:ff:77:c1:ba:37:85:13:e5:f2:e0:c0:
                    da:75:e2:b9:7d:e1:99:a1:d4:18:52:59:69:90:7b:
                    f2:4e:69:e3:70:97:9c:e3:92:ea:6f:30:09:b1:c3:
                    ea:25:d6:f9:5a:34:cf:22:ec:d9:c1:30:92:56:e0:
                    68:11:d4:43:74:ad:ae:5d:40:53:63:f2:b8:ad:d8:
                    1d:31:af:b6:b9:ca:e0:53:30:16:5f:d8:ae:a6:8c:
                    f1:48:12:44:cf:c0:a1:dd:8f:0c:e3:15:aa:cb:a5:
                    ed:af:91:58:fe:34:61:88:90:53:4c:7a:e8:62:39:
                    e8:26:2c:bd:0b:3a:48:04:68:37:5c:48:90:62:85:
                    90:d3:2f:5e:2c:6e:18:6d:d8:fe:a7:10:36:92:a3:
                    8f:b7:13:4c:4b:1a:11:b9:6f:66:3a:4e:a3:31:26:
                    a9:72:b2:67:8c:2e:38:46:1e:69:8e:22:6e:5d:4c:
                    eb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:60:66:BE:81:D5:74:BA:0E:A7:C8:7A:DF:1A:C3:3D:12:0F:3E:B5
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS211358.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e30::/44

    Signature Algorithm: sha256WithRSAEncryption
         8e:91:24:8f:3a:43:2d:44:f7:98:0e:c3:a5:e6:d1:2d:21:6f:
         56:a7:ad:23:48:ef:71:0b:04:b9:8e:42:52:fb:75:1a:95:5c:
         d2:da:72:69:88:ba:4f:51:eb:83:8b:50:95:c1:dc:7e:67:de:
         2a:50:66:2e:ec:5b:4e:12:30:d1:d6:cb:65:53:4a:6d:eb:8e:
         8f:2b:d0:0b:12:5f:fb:99:d8:84:0a:16:1d:c5:9e:c9:46:f6:
         cb:6f:24:6e:ab:54:01:ae:82:36:8d:68:3b:02:62:3a:f0:89:
         91:62:ac:d9:56:4b:96:4d:92:78:7c:19:61:71:74:fb:27:76:
         c2:10:f7:62:d4:3b:0a:cd:09:63:b1:02:8a:03:1e:e9:79:43:
         84:8a:13:0c:7f:fe:4f:fe:55:29:c3:ff:ba:9a:ba:e5:c5:6e:
         66:c6:e4:ff:b2:5b:35:3b:8f:1e:a6:73:73:f1:ce:7c:69:7c:
         0e:59:b3:48:36:c7:84:6a:c5:a4:a0:84:b4:dd:a0:f3:f8:7c:
         ef:a7:39:76:21:72:65:de:1b:12:a2:82:a5:82:d2:1d:f3:f1:
         c2:dd:aa:50:6f:1b:cb:28:6d:f5:85:a5:08:02:f8:c0:31:27:
         36:3b:04:1e:68:5a:53:1d:c5:76:ac:39:4e:46:71:9f:9a:b1:
         93:ea:ce:c3
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUU1LeXOUS3gYL/zH89aFLb+kvsfUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA1MDcwNDIzNDhaFw0yNDA1MDUwNDI4NDhaMDMxMTAvBgNV
BAMTKEVENjA2NkJFODFENTc0QkEwRUE3Qzg3QURGMUFDMzNEMTIwRjNFQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpzeZ9ws3SmjvlNyvCz7UhP7Kf
NGzYrEDgBQLmEl0T+gUwgHFeiKzpCKM9Lx4Bt+KgUPAqKU1r6YTB6OQGOnI1mLX9
6EdwYJBBpvZfVor/d8G6N4UT5fLgwNp14rl94Zmh1BhSWWmQe/JOaeNwl5zjkupv
MAmxw+ol1vlaNM8i7NnBMJJW4GgR1EN0ra5dQFNj8rit2B0xr7a5yuBTMBZf2K6m
jPFIEkTPwKHdjwzjFarLpe2vkVj+NGGIkFNMeuhiOegmLL0LOkgEaDdcSJBihZDT
L14sbhht2P6nEDaSo4+3E0xLGhG5b2Y6TqMxJqlysmeMLjhGHmmOIm5dTOsnAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQU7WBmvoHVdLoOp8h63xrDPRIPPrUwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMTEzNTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqEt1HjjAwDQYJKoZIhvcNAQEL
BQADggEBAI6RJI86Qy1E95gOw6Xm0S0hb1anrSNI73ELBLmOQlL7dRqVXNLacmmI
uk9R64OLUJXB3H5n3ipQZi7sW04SMNHWy2VTSm3rjo8r0AsSX/uZ2IQKFh3FnslG
9stvJG6rVAGugjaNaDsCYjrwiZFirNlWS5ZNknh8GWFxdPsndsIQ92LUOwrNCWOx
AooDHul5Q4SKEwx//k/+VSnD/7qauuXFbmbG5P+yWzU7jx6mc3PxznxpfA5Zs0g2
x4RqxaSghLTdoPP4fO+nOXYhcmXeGxKigqWC0h3z8cLdqlBvG8sobfWFpQgC+MAx
JzY7BB5oWlMdxXasOU5GcZ+asZPqzsM=
-----END CERTIFICATE-----