Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS213267.roa
File:                     AS213267.roa (raw, json)
Hash identifier:          yprauh7csPyr8SbMwvpfXGOXPEC3aI5t7qvhRDAOtPc=
Subject key identifier:   6C:06:A8:A6:37:50:4F:FA:CA:AB:E9:E7:BF:51:AC:5D:B0:D5:4E:9A
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       0571DD621B9C1BBDC1D6962D9283B512F083B966
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS213267.roa
Signing time:             Mon 10 Apr 2023 03:31:36 +0000
ROA not before:           Mon 10 Apr 2023 03:26:36 +0000
ROA not after:            Mon 08 Apr 2024 03:31:36 +0000
asID:                     213267
IP address blocks:        2a12:dd47:de00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:71:dd:62:1b:9c:1b:bd:c1:d6:96:2d:92:83:b5:12:f0:83:b9:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:36 2023 GMT
            Not After : Apr  8 03:31:36 2024 GMT
        Subject: CN=6C06A8A637504FFACAABE9E7BF51AC5DB0D54E9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:25:d7:37:02:63:f9:46:8f:cc:07:7e:c6:3d:
                    55:7f:21:e9:02:1b:04:0d:4d:b7:b1:ec:9a:09:1e:
                    3e:c5:e4:e6:06:5d:85:8f:6d:d3:28:81:ca:95:ce:
                    08:c0:63:25:23:53:db:f2:d2:cd:e9:0b:e4:f6:61:
                    35:63:b2:bb:95:69:83:df:ae:af:08:48:11:0e:29:
                    da:aa:03:c8:da:4b:fe:8f:98:ea:37:61:42:c4:18:
                    c0:7e:59:30:4f:5b:86:be:64:91:08:0c:68:c1:8e:
                    2b:f2:d8:34:d0:e5:59:38:ce:3e:33:bf:bb:62:db:
                    38:ed:f4:33:fe:64:1c:ae:ff:c5:47:ae:7f:53:8d:
                    88:f4:5d:12:9b:a1:f7:bf:d3:ac:1b:bb:87:1e:1f:
                    d3:be:69:fb:c0:3c:64:e4:f3:ab:b1:a4:89:56:36:
                    5c:de:70:23:52:60:f5:53:01:aa:06:12:73:74:7a:
                    e8:85:01:d8:98:34:0d:a1:d4:3f:5a:da:2e:ab:27:
                    a1:29:6c:be:ab:4d:60:8c:6e:ca:a2:1c:74:20:e1:
                    a5:79:b6:92:44:76:44:3d:53:c5:9b:15:8e:50:36:
                    22:14:48:f9:16:fc:34:7a:1f:39:55:6e:c0:7a:ee:
                    3d:9a:ab:82:4c:3b:66:dc:bb:f3:b4:79:99:3e:8a:
                    37:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:06:A8:A6:37:50:4F:FA:CA:AB:E9:E7:BF:51:AC:5D:B0:D5:4E:9A
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS213267.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:de00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ad:2e:39:07:b0:f7:dd:3c:a0:8a:3a:2b:7d:12:18:f9:c2:bd:
         46:47:f0:3c:c5:12:d3:bb:48:a0:26:4a:50:de:4d:47:49:c4:
         dc:0e:f0:20:a9:0f:87:f9:4b:ec:e6:3a:d0:92:7e:68:e9:c8:
         4a:41:22:a2:11:62:a9:54:3e:6c:2b:2e:6d:d8:50:ed:c3:6d:
         d4:c0:38:a4:31:a6:fe:15:01:a7:31:3d:4d:c6:53:58:f5:e5:
         48:c0:3c:2a:fe:ec:07:10:bc:15:c0:25:a5:8d:10:ce:87:2a:
         78:56:8f:e2:29:78:62:33:37:86:f4:92:50:45:f1:41:d1:1f:
         6d:07:d9:7a:05:df:11:f2:8a:39:1c:02:44:b4:55:09:17:d9:
         63:e4:09:79:3a:10:10:74:99:97:5a:b3:20:40:98:eb:bb:f2:
         eb:f5:22:96:2b:19:53:a1:2b:51:fa:95:c0:a6:fd:97:55:f5:
         04:4f:f4:45:a6:5a:75:8d:f9:dd:1a:59:bc:fe:b4:92:f7:04:
         fe:7f:90:2f:47:9e:68:ce:00:c9:b2:ea:02:77:78:3c:35:d5:
         d9:d3:98:b6:c4:7b:c5:fb:f6:4a:77:85:e9:c1:54:e2:ab:59:
         ff:6c:24:04:2c:1c:e1:e2:f8:02:66:06:f0:6e:da:64:e4:49:
         a3:74:33:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----