Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS213036.roa
File:                     AS213036.roa (raw, json)
Hash identifier:          /Xthwz6qp95D98UzlS0COx0opeFa+CrxuJmFwet6Ej8=
Subject key identifier:   96:63:FB:4A:35:66:2D:A0:9B:9C:81:94:F6:D6:5B:EB:C3:B3:BF:9F
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       616F286CA402AFA383DEE6CB55232A80A9AAC3CD
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS213036.roa
Signing time:             Mon 10 Apr 2023 03:31:36 +0000
ROA not before:           Mon 10 Apr 2023 03:26:36 +0000
ROA not after:            Mon 08 Apr 2024 03:31:36 +0000
asID:                     213036
IP address blocks:        2a12:dd47:8330::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6f:28:6c:a4:02:af:a3:83:de:e6:cb:55:23:2a:80:a9:aa:c3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:36 2023 GMT
            Not After : Apr  8 03:31:36 2024 GMT
        Subject: CN=9663FB4A35662DA09B9C8194F6D65BEBC3B3BF9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e5:50:f6:a4:b0:7c:c8:98:92:4f:47:c0:08:
                    ee:6f:b6:e7:98:40:bf:bb:6a:8a:93:9a:9a:40:b1:
                    11:e9:bf:c6:c4:65:dd:31:d6:2b:16:0f:fa:08:a1:
                    8f:8d:9d:6b:f8:bf:fa:5f:89:96:d9:31:8c:ce:f6:
                    b0:97:f7:79:95:a4:d1:fa:b6:3d:15:40:fb:9a:c6:
                    06:37:6b:2e:7f:43:fc:b5:c5:ba:36:cd:43:1b:74:
                    0e:0a:0b:12:51:74:da:50:68:c5:2f:0d:07:c8:f7:
                    62:9a:b8:98:1d:57:4a:79:7b:7e:41:8b:e1:e1:ca:
                    c1:26:db:4d:f2:46:4c:04:79:36:fc:08:0c:ad:92:
                    f3:cd:f7:83:36:0d:62:8a:2a:67:da:a3:ef:cb:da:
                    b0:ca:2f:97:8b:c8:6b:1a:60:b3:44:6c:c1:33:5f:
                    0d:0c:86:5d:f7:8b:7f:9e:fc:16:10:70:10:dc:f7:
                    a6:fb:54:c0:62:a0:b0:03:0b:ae:bd:41:3d:92:1f:
                    80:fd:b6:7c:f2:cf:2a:3d:cf:26:4f:05:28:3c:7e:
                    9d:90:d0:ff:9f:30:7a:d8:40:14:4c:37:03:e8:f6:
                    26:6a:af:ca:e9:b3:87:09:c8:2c:1e:61:0d:5d:2c:
                    e8:64:5d:e8:03:9d:c0:20:04:67:df:da:f8:99:04:
                    f3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:63:FB:4A:35:66:2D:A0:9B:9C:81:94:F6:D6:5B:EB:C3:B3:BF:9F
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS213036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8330::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:45:4a:11:55:bb:22:21:e0:b4:0e:01:cf:f6:78:bb:30:9a:
         4c:ec:01:9e:d3:a0:b0:45:f2:3e:86:ca:f7:35:24:ca:af:73:
         74:28:a4:57:75:98:cd:e3:ec:d8:64:2b:1b:b5:10:f3:f9:8f:
         b7:7a:8d:23:88:d9:b4:b2:2b:c0:aa:0d:ac:be:5b:0d:cb:f5:
         e1:c1:fa:0e:b8:93:93:1a:51:b5:67:b3:7e:27:76:59:c6:9d:
         00:40:b0:99:29:80:f5:f8:bb:ab:21:3f:6d:d8:f8:68:f1:d1:
         c5:0e:4c:f7:2f:4d:83:53:93:9f:1e:e5:49:36:1f:b1:56:1e:
         ca:68:80:2b:c3:8e:c6:56:03:ee:ed:8f:cd:26:a8:6c:31:c7:
         25:fa:24:0d:64:d0:38:44:0d:2d:d7:dd:e7:b3:a5:95:93:e1:
         7d:90:35:58:51:77:e1:11:05:b2:b9:47:4b:b7:2b:9d:f2:c6:
         13:f2:5c:c1:49:88:e4:f2:f2:2a:22:f9:5a:a8:cc:59:38:00:
         00:4e:b6:ef:fd:d5:cf:58:53:33:50:03:d2:a3:1e:34:a5:f3:
         e2:b8:66:f1:61:3a:6d:18:54:20:dc:91:99:03:8a:60:fa:b3:
         83:55:15:4a:dc:af:25:f9:15:02:fe:9a:66:90:41:88:4e:7b:
         6b:c4:20:db
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUYW8obKQCr6OD3ubLVSMqgKmqw80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2MzZaFw0yNDA0MDgwMzMxMzZaMDMxMTAvBgNV
BAMTKDk2NjNGQjRBMzU2NjJEQTA5QjlDODE5NEY2RDY1QkVCQzNCM0JGOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC75VD2pLB8yJiST0fACO5vtueY
QL+7aoqTmppAsRHpv8bEZd0x1isWD/oIoY+NnWv4v/pfiZbZMYzO9rCX93mVpNH6
tj0VQPuaxgY3ay5/Q/y1xbo2zUMbdA4KCxJRdNpQaMUvDQfI92KauJgdV0p5e35B
i+HhysEm203yRkwEeTb8CAytkvPN94M2DWKKKmfao+/L2rDKL5eLyGsaYLNEbMEz
Xw0Mhl33i3+e/BYQcBDc96b7VMBioLADC669QT2SH4D9tnzyzyo9zyZPBSg8fp2Q
0P+fMHrYQBRMNwPo9iZqr8rps4cJyCweYQ1dLOhkXegDncAgBGff2viZBPPrAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUlmP7SjVmLaCbnIGU9tZb68Ozv58wHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMTMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEt1HgzAwDQYJKoZIhvcNAQEL
BQADggEBAHxFShFVuyIh4LQOAc/2eLswmkzsAZ7ToLBF8j6Gyvc1JMqvc3QopFd1
mM3j7NhkKxu1EPP5j7d6jSOI2bSyK8CqDay+Ww3L9eHB+g64k5MaUbVns34ndlnG
nQBAsJkpgPX4u6shP23Y+Gjx0cUOTPcvTYNTk58e5Uk2H7FWHspogCvDjsZWA+7t
j80mqGwxxyX6JA1k0DhEDS3X3eezpZWT4X2QNVhRd+ERBbK5R0u3K53yxhPyXMFJ
iOTy8ioi+VqozFk4AABOtu/91c9YUzNQA9KjHjSl8+K4ZvFhOm0YVCDckZkDimD6
s4NVFUrcryX5FQL+mmaQQYhOe2vEINs=
-----END CERTIFICATE-----