Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS212071.roa
File:                     AS212071.roa (raw, json)
Hash identifier:          QfTEaDt79xlJoB+JsdaMaX+ps9+yOPeevHdgpgwsThs=
Subject key identifier:   AA:42:64:7C:32:75:7E:ED:82:FB:16:78:82:4F:36:BF:28:C6:DF:47
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       4EC5CDBE176AE83CFC17C3B03908B299CD6EDCAD
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS212071.roa
Signing time:             Mon 10 Apr 2023 03:31:39 +0000
ROA not before:           Mon 10 Apr 2023 03:26:39 +0000
ROA not after:            Mon 08 Apr 2024 03:31:39 +0000
asID:                     212071
IP address blocks:        2a12:dd47:8190::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c5:cd:be:17:6a:e8:3c:fc:17:c3:b0:39:08:b2:99:cd:6e:dc:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:39 2023 GMT
            Not After : Apr  8 03:31:39 2024 GMT
        Subject: CN=AA42647C32757EED82FB1678824F36BF28C6DF47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b7:c9:b4:78:c3:22:f9:fe:2b:6d:7c:ec:7c:
                    92:12:e2:53:cc:9c:55:f4:27:20:2b:b2:44:a4:eb:
                    0f:35:98:7e:30:88:8b:8a:24:d4:83:a2:83:a4:63:
                    39:d3:54:62:51:a4:22:48:a8:4b:ca:e1:b7:a1:43:
                    84:8a:7d:4c:98:c8:09:46:75:71:73:6d:80:bb:6a:
                    c3:19:ad:f3:33:83:a4:b3:d7:f4:61:a7:6c:a6:9e:
                    45:ed:9e:49:9d:67:1a:29:41:21:bc:7c:32:a7:14:
                    81:17:62:75:ab:52:e7:57:67:21:ed:f0:94:ef:84:
                    a1:e2:a5:48:92:31:1a:59:81:7e:4f:eb:db:9f:4d:
                    07:43:e0:10:86:c5:ba:a3:0e:2f:7c:90:ed:fb:ed:
                    0d:ee:bc:8a:9b:0c:d1:0e:b8:08:9e:d7:9a:7a:9d:
                    9f:14:7b:9f:ca:69:8a:db:3a:a5:e6:26:ad:88:de:
                    fb:a2:2c:19:9b:ba:f4:1e:88:ff:df:9f:1c:35:b9:
                    e1:f6:2b:95:45:04:79:c9:3f:35:76:eb:2a:aa:fe:
                    68:31:4a:7c:f1:00:21:89:59:d8:a9:d4:97:75:c4:
                    ce:d6:80:88:9b:03:25:1e:12:8a:c4:96:ea:ec:88:
                    d4:80:6f:76:69:05:15:12:b7:c0:7b:7b:43:1b:b3:
                    7a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:42:64:7C:32:75:7E:ED:82:FB:16:78:82:4F:36:BF:28:C6:DF:47
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS212071.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8190::/44

    Signature Algorithm: sha256WithRSAEncryption
         d5:f6:ae:86:4b:8b:e6:f3:eb:cc:1b:dd:a8:eb:53:55:ac:1f:
         02:bc:96:f4:41:fc:d0:52:9f:62:70:49:08:9c:73:d8:c5:24:
         a8:f2:a0:dc:24:f1:92:1d:c1:9d:a6:96:ca:43:32:da:21:4a:
         8f:ac:78:ee:3d:8c:2e:16:3a:1e:36:26:40:84:c2:c7:ce:d0:
         8c:14:59:ff:bc:c4:7e:20:da:98:4b:1b:06:be:21:04:75:1e:
         98:c3:9d:89:0c:5b:a2:5e:af:2a:68:e0:87:52:56:3a:4b:99:
         08:02:6c:09:3c:3e:3c:01:66:69:81:5b:11:dd:05:b3:83:47:
         65:31:a4:ae:14:43:0e:a9:41:ca:9c:b2:ba:d3:df:66:cf:8b:
         fe:b8:d8:d8:85:66:88:41:7e:dd:5e:c5:d8:aa:0d:76:05:82:
         75:85:2b:3b:e2:7d:81:29:42:7e:c6:ea:e6:5b:98:93:35:2f:
         08:bb:a9:e3:1c:44:b7:a5:6c:05:8a:d0:9d:57:d4:f5:69:5d:
         88:fa:d4:47:da:a8:3a:90:a0:59:3b:43:74:33:6d:d4:dc:57:
         f9:e7:7e:d7:c5:58:a7:9b:b9:cd:e0:c2:67:53:4c:ac:7f:30:
         e0:57:9e:b0:30:18:99:f4:45:cc:54:53:52:78:b2:b7:c4:e3:
         63:84:f0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----