Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS212164.roa
File:                     AS212164.roa (raw, json)
Hash identifier:          98JdYfu5stXuI6FfPEgnanY6eJ6p24smZ52bKX60jxk=
Subject key identifier:   D5:52:75:47:40:B3:1B:F6:A6:6C:E7:EF:72:D1:BB:A7:5D:39:43:CB
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       3B993A45A7C344D1B805963416FF1CD0810FB0E8
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS212164.roa
Signing time:             Mon 10 Apr 2023 03:31:32 +0000
ROA not before:           Mon 10 Apr 2023 03:26:32 +0000
ROA not after:            Mon 08 Apr 2024 03:31:32 +0000
asID:                     212164
IP address blocks:        2a12:dd47:df20::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:99:3a:45:a7:c3:44:d1:b8:05:96:34:16:ff:1c:d0:81:0f:b0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:32 2023 GMT
            Not After : Apr  8 03:31:32 2024 GMT
        Subject: CN=D552754740B31BF6A66CE7EF72D1BBA75D3943CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9a:cb:ee:c8:74:dc:33:51:ef:26:65:78:6b:
                    8b:46:fa:37:53:8d:ef:54:7b:cd:ca:59:3f:7f:b6:
                    3a:48:1e:72:88:de:08:e9:3a:93:45:0d:0b:94:a7:
                    3d:64:76:72:39:f9:bb:1b:2d:f7:ac:77:d2:ee:15:
                    5f:ca:d0:92:a2:b0:cf:e6:d2:9f:13:c1:ee:8c:79:
                    0d:db:e4:37:37:96:ee:c5:1e:7d:7d:81:4e:60:11:
                    19:40:f9:d9:88:4a:f3:c4:ab:81:73:a6:74:7f:50:
                    bd:56:48:f4:12:62:87:fd:5c:89:1e:89:f6:fc:6c:
                    52:06:d1:8b:aa:24:0e:e9:ba:19:e3:83:1d:0a:b4:
                    a9:5e:c2:eb:8d:1f:8f:8f:0b:a4:b8:79:bf:e9:41:
                    c4:ec:e5:f0:f5:95:e5:c4:04:21:91:62:df:29:46:
                    56:31:92:d1:5b:ae:43:df:b8:25:6e:de:c0:a6:3a:
                    74:d3:3d:16:d3:99:84:c6:dd:a0:ce:5a:12:c2:6f:
                    aa:e8:f5:d1:09:23:f6:bc:53:fb:e2:a1:b0:80:63:
                    e0:21:60:55:5a:4f:72:80:b9:c5:38:a9:62:e4:ee:
                    80:16:90:2a:91:f7:39:95:b9:31:d3:71:de:6f:95:
                    45:5a:c0:03:c3:d0:1b:8d:86:20:4d:44:e4:e7:da:
                    6d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:52:75:47:40:B3:1B:F6:A6:6C:E7:EF:72:D1:BB:A7:5D:39:43:CB
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS212164.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:df20::/44

    Signature Algorithm: sha256WithRSAEncryption
         57:8d:5c:da:20:10:25:c8:ff:ae:38:ca:ab:ee:11:18:f3:0c:
         ee:74:9a:66:0c:5d:80:14:c3:d5:ae:75:22:85:85:72:69:48:
         31:25:97:c1:78:85:de:a9:83:1c:df:8e:26:b9:8e:9f:eb:02:
         79:d8:42:8a:33:f7:16:14:89:78:b4:d0:7f:0f:3e:34:58:9d:
         5f:30:30:71:05:8e:bb:89:7d:4a:a8:f8:4e:6d:a8:4e:1b:a4:
         bf:9f:d6:1b:18:5f:d2:75:bb:22:e5:d8:de:04:07:1a:4b:d2:
         8d:f8:04:e3:6a:ac:3a:27:4b:f1:6d:c0:b9:d6:7c:c9:59:df:
         ce:6f:10:b7:82:01:12:30:99:13:f5:74:77:c6:2b:55:9c:b6:
         3b:dd:75:d7:7e:65:d8:8e:44:e9:3c:e8:72:3c:46:f0:3a:e6:
         35:60:ed:03:c8:cb:dc:6f:8e:ed:67:c9:9a:2a:af:98:ae:91:
         10:59:b1:a6:99:64:93:5a:00:07:3f:d9:89:62:8b:26:96:4c:
         66:9f:ac:86:99:44:4a:f1:ec:78:20:90:10:4d:f1:86:74:15:
         0a:1b:81:93:a9:93:53:81:a4:9b:85:34:a6:fd:33:e8:b3:30:
         3b:aa:10:f9:66:5c:1c:1d:49:ea:73:64:f4:6d:e9:82:43:46:
         fc:08:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----