Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS211390.roa
File:                     AS211390.roa (raw, json)
Hash identifier:          bOY78xZXPqlYszyJFqGUj7oJQBjiGd08Pun3NpDPdVc=
Subject key identifier:   75:E2:4A:88:59:05:12:45:59:36:87:A6:37:AB:06:CB:CC:D2:B2:E1
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       1C2114F57E386F05425B047CCBD4250861383F42
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS211390.roa
Signing time:             Mon 10 Apr 2023 03:31:35 +0000
ROA not before:           Mon 10 Apr 2023 03:26:35 +0000
ROA not after:            Mon 08 Apr 2024 03:31:35 +0000
asID:                     211390
IP address blocks:        2a12:dd47:83e0::/44 maxlen: 48
                          2a12:dd47:f600::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:21:14:f5:7e:38:6f:05:42:5b:04:7c:cb:d4:25:08:61:38:3f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:35 2023 GMT
            Not After : Apr  8 03:31:35 2024 GMT
        Subject: CN=75E24A8859051245593687A637AB06CBCCD2B2E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:46:61:dd:7f:cc:23:ac:a6:28:19:ed:2d:43:
                    55:05:ec:fe:d2:e9:af:34:f9:db:e5:2f:ac:16:ec:
                    dd:ab:83:6b:e7:f4:29:d9:98:c5:9d:0c:a1:d2:ea:
                    8f:73:b2:40:64:23:35:8b:30:f7:f1:47:a8:76:52:
                    1d:75:de:f6:fd:51:c3:de:75:8f:22:e0:83:ae:f9:
                    93:45:7e:8d:89:f1:ba:c7:55:32:12:7c:03:37:f3:
                    4b:3e:eb:c1:ea:f3:60:cf:81:38:a4:73:fd:87:0b:
                    0a:ed:39:e2:83:78:be:c1:a2:09:f9:cc:74:52:29:
                    79:6d:31:c1:98:44:00:9a:17:41:d2:8e:ad:2d:76:
                    6c:1f:0c:f2:25:df:58:6e:66:cd:06:7a:3e:c9:10:
                    31:26:bf:df:44:46:22:0a:12:7b:59:d1:73:6e:f9:
                    a9:e1:40:1f:d7:73:cd:4e:13:7e:34:c7:61:5e:b5:
                    80:36:59:58:27:0c:dc:4e:29:8d:e0:54:d9:62:49:
                    1c:e8:bd:f5:42:5f:6c:64:85:59:bc:3f:f8:96:6f:
                    79:bd:66:a0:16:7b:a7:cb:9f:30:13:85:d2:f1:d1:
                    69:87:06:c0:e4:23:b0:2f:62:86:52:f4:ea:e8:9d:
                    4c:24:5a:bc:ef:f3:e2:21:bc:d3:e5:f4:9d:85:3c:
                    01:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E2:4A:88:59:05:12:45:59:36:87:A6:37:AB:06:CB:CC:D2:B2:E1
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS211390.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:83e0::/44
                  2a12:dd47:f600::/40

    Signature Algorithm: sha256WithRSAEncryption
         9e:d6:16:b6:29:e4:8a:8c:d7:d5:f9:43:f4:22:6a:23:72:ad:
         8b:e2:10:be:52:cc:ba:01:b1:26:79:3f:c6:32:65:66:72:bf:
         15:4a:2b:8b:33:f4:8b:74:cd:5d:a6:f8:9f:dc:f6:6c:d3:4e:
         89:40:8f:37:d4:90:44:1f:52:8f:1e:eb:21:17:f3:c2:fb:39:
         d8:49:f1:5a:ad:9e:c5:f7:ac:23:08:97:e9:a1:97:69:0d:9d:
         99:e6:98:0e:cc:92:c5:a0:67:0e:51:41:12:34:a6:d0:0c:61:
         31:54:66:98:3e:ed:ee:87:9c:c7:f7:85:11:f1:7d:cc:16:3f:
         c2:13:b8:5c:c6:3e:a7:8b:d6:56:23:a9:63:96:4f:07:0b:c3:
         5f:db:a9:0a:86:25:42:be:4c:2a:a2:fd:17:44:91:23:de:9e:
         b8:bc:be:28:f3:fc:aa:99:e3:1e:3f:e1:25:54:1d:d6:d6:60:
         51:31:5e:dd:16:9e:7c:50:06:99:d8:63:fd:57:fc:ac:d4:dd:
         4a:19:b0:30:47:7e:f3:99:83:ec:4e:f7:b8:6d:64:8d:47:65:
         c2:10:d8:05:78:12:f9:64:80:95:f3:de:43:16:60:d7:de:e2:
         b6:7b:88:8a:b0:00:ec:c6:ab:4d:c6:80:92:e3:cb:89:6e:89:
         57:e4:9a:5b
-----BEGIN CERTIFICATE-----
MIIEmzCCA4OgAwIBAgIUHCEU9X44bwVCWwR8y9QlCGE4P0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2MzVaFw0yNDA0MDgwMzMxMzVaMDMxMTAvBgNV
BAMTKDc1RTI0QTg4NTkwNTEyNDU1OTM2ODdBNjM3QUIwNkNCQ0NEMkIyRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDRmHdf8wjrKYoGe0tQ1UF7P7S
6a80+dvlL6wW7N2rg2vn9CnZmMWdDKHS6o9zskBkIzWLMPfxR6h2Uh113vb9UcPe
dY8i4IOu+ZNFfo2J8brHVTISfAM380s+68Hq82DPgTikc/2HCwrtOeKDeL7Bogn5
zHRSKXltMcGYRACaF0HSjq0tdmwfDPIl31huZs0Gej7JEDEmv99ERiIKEntZ0XNu
+anhQB/Xc81OE340x2FetYA2WVgnDNxOKY3gVNliSRzovfVCX2xkhVm8P/iWb3m9
ZqAWe6fLnzAThdLx0WmHBsDkI7AvYoZS9OronUwkWrzv8+IhvNPl9J2FPAGlAgMB
AAGjggGlMIIBoTAdBgNVHQ4EFgQUdeJKiFkFEkVZNoemN6sGy8zSsuEwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMTEzOTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
KgYIKwYBBQUHAQcBAf8EGzAZMBcEAgACMBEDBwQqEt1Hg+ADBgAqEt1H9jANBgkq
hkiG9w0BAQsFAAOCAQEAntYWtinkiozX1flD9CJqI3Kti+IQvlLMugGxJnk/xjJl
ZnK/FUorizP0i3TNXab4n9z2bNNOiUCPN9SQRB9Sjx7rIRfzwvs52EnxWq2exfes
IwiX6aGXaQ2dmeaYDsySxaBnDlFBEjSm0AxhMVRmmD7t7oecx/eFEfF9zBY/whO4
XMY+p4vWViOpY5ZPBwvDX9upCoYlQr5MKqL9F0SRI96euLy+KPP8qpnjHj/hJVQd
1tZgUTFe3RaefFAGmdhj/Vf8rNTdShmwMEd+85mD7E73uG1kjUdlwhDYBXgS+WSA
lfPeQxZg197itnuIirAA7MarTcaAkuPLiW6JV+SaWw==
-----END CERTIFICATE-----