Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS211604.roa
File:                     AS211604.roa (raw, json)
Hash identifier:          Jgjc1tsQF2VuozYrpcdxXZwdRW1iw78FCsmdPC2i1uU=
Subject key identifier:   0D:99:DF:70:5C:BD:23:C0:17:71:67:AC:A9:68:40:A3:75:7E:26:B1
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       60008D4020CAC1FC2E65E5E00662AB6FC82F5A9D
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS211604.roa
Signing time:             Mon 10 Apr 2023 03:31:35 +0000
ROA not before:           Mon 10 Apr 2023 03:26:35 +0000
ROA not after:            Mon 08 Apr 2024 03:31:35 +0000
asID:                     211604
IP address blocks:        2a12:dd47:8072::/48 maxlen: 48
                          2a12:dd47:807e::/47 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:00:8d:40:20:ca:c1:fc:2e:65:e5:e0:06:62:ab:6f:c8:2f:5a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:35 2023 GMT
            Not After : Apr  8 03:31:35 2024 GMT
        Subject: CN=0D99DF705CBD23C0177167ACA96840A3757E26B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d1:28:4f:9a:d7:67:32:a2:cd:f5:d2:1f:fb:
                    c9:35:96:c9:42:32:94:1e:bf:33:f0:8b:88:d2:68:
                    da:60:a0:a4:1d:dc:03:d9:9b:ec:81:ac:ea:1c:89:
                    f1:80:83:39:d9:5c:1e:6e:a4:db:66:ad:8d:c6:b8:
                    58:c3:9b:ec:c0:b8:38:0e:15:a5:61:ec:30:36:63:
                    f7:93:53:e8:92:e9:0e:4f:14:37:3f:a8:6a:a7:a1:
                    3b:32:67:05:db:3e:0b:6a:fc:f5:0b:7a:5b:f0:c5:
                    fc:4b:79:74:ff:c3:f5:69:e0:53:60:fb:48:6e:c9:
                    a1:70:4b:e0:71:e0:dc:05:79:5f:ea:0d:bf:91:32:
                    a1:54:f4:59:e1:ea:74:b7:b9:52:a2:9c:31:7f:fd:
                    0b:e4:3a:17:33:a8:07:97:bf:0a:66:3a:bd:05:06:
                    fd:a8:f6:b8:ae:f1:40:51:bf:c1:52:c7:a3:fe:0f:
                    f5:3f:5c:65:ab:38:05:48:1f:5d:8b:e4:32:e9:18:
                    f6:55:76:cc:9f:b2:42:36:65:22:34:53:d5:01:75:
                    43:25:42:99:6d:e3:5d:bb:73:eb:01:e2:ca:7a:9a:
                    78:19:4c:d3:7b:10:0a:02:80:ce:7a:8b:e2:53:d1:
                    b7:53:a8:0a:77:c9:86:9c:14:2e:fe:7c:5e:a0:31:
                    1d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:99:DF:70:5C:BD:23:C0:17:71:67:AC:A9:68:40:A3:75:7E:26:B1
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS211604.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8072::/48
                  2a12:dd47:807e::/47

    Signature Algorithm: sha256WithRSAEncryption
         44:f4:35:e6:94:38:cb:40:6d:16:99:b5:f0:1a:d9:48:9f:e4:
         1a:84:93:d6:75:82:b0:57:9b:ad:73:30:75:bd:5f:30:ff:fa:
         98:01:00:e4:8c:ec:e1:ab:e5:98:2f:4b:16:77:1d:ee:12:24:
         73:e3:ab:17:b5:7f:c4:52:ea:37:c7:54:65:f6:ec:7e:21:ed:
         cd:7d:86:b1:41:98:e0:5a:29:93:18:d6:f5:1f:66:f3:63:b8:
         22:ab:1b:d5:6e:02:4e:6d:89:d8:85:b8:68:87:54:37:2a:e5:
         1d:dc:ce:e6:cd:86:b3:90:59:9a:4c:66:b9:af:6f:df:e9:40:
         f0:18:61:9f:f9:c6:de:ba:25:a2:93:81:2c:fa:17:d3:ac:fc:
         5a:0f:85:29:10:ed:2c:a7:0a:e1:de:ee:ce:96:d2:bd:df:df:
         62:b4:e2:66:f7:40:75:a6:96:2c:6d:a2:a4:0b:84:76:4e:6d:
         c3:68:4a:9b:02:79:2a:29:bb:83:47:e0:96:e4:87:50:91:dc:
         e8:f3:ca:72:e4:09:01:ff:59:5c:f4:b4:7a:53:10:25:39:e2:
         f1:9c:41:4f:6a:4b:f2:82:ab:47:04:cf:b4:02:f1:41:ba:6c:
         f2:1f:fd:6e:20:9e:1f:98:1b:27:86:81:89:22:e5:83:14:fc:
         67:62:11:3c
-----BEGIN CERTIFICATE-----
MIIEnDCCA4SgAwIBAgIUYACNQCDKwfwuZeXgBmKrb8gvWp0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2MzVaFw0yNDA0MDgwMzMxMzVaMDMxMTAvBgNV
BAMTKDBEOTlERjcwNUNCRDIzQzAxNzcxNjdBQ0E5Njg0MEEzNzU3RTI2QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb0ShPmtdnMqLN9dIf+8k1lslC
MpQevzPwi4jSaNpgoKQd3APZm+yBrOocifGAgznZXB5upNtmrY3GuFjDm+zAuDgO
FaVh7DA2Y/eTU+iS6Q5PFDc/qGqnoTsyZwXbPgtq/PULelvwxfxLeXT/w/Vp4FNg
+0huyaFwS+Bx4NwFeV/qDb+RMqFU9Fnh6nS3uVKinDF//QvkOhczqAeXvwpmOr0F
Bv2o9riu8UBRv8FSx6P+D/U/XGWrOAVIH12L5DLpGPZVdsyfskI2ZSI0U9UBdUMl
Qplt4127c+sB4sp6mngZTNN7EAoCgM56i+JT0bdTqAp3yYacFC7+fF6gMR3bAgMB
AAGjggGmMIIBojAdBgNVHQ4EFgQUDZnfcFy9I8AXcWesqWhAo3V+JrEwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMTE2MDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
KwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAqEt1HgHIDBwEqEt1HgH4wDQYJ
KoZIhvcNAQELBQADggEBAET0NeaUOMtAbRaZtfAa2Uif5BqEk9Z1grBXm61zMHW9
XzD/+pgBAOSM7OGr5ZgvSxZ3He4SJHPjqxe1f8RS6jfHVGX27H4h7c19hrFBmOBa
KZMY1vUfZvNjuCKrG9VuAk5tidiFuGiHVDcq5R3czubNhrOQWZpMZrmvb9/pQPAY
YZ/5xt66JaKTgSz6F9Os/FoPhSkQ7SynCuHe7s6W0r3f32K04mb3QHWmlixtoqQL
hHZObcNoSpsCeSopu4NH4Jbkh1CR3OjzynLkCQH/WVz0tHpTECU54vGcQU9qS/KC
q0cEz7QC8UG6bPIf/W4gnh+YGyeGgYki5YMU/GdiETw=
-----END CERTIFICATE-----