Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS213327.roa
File:                     AS213327.roa (raw, json)
Hash identifier:          ktS3UDr2UxmxxTmGql3WcNfP8HKT8JSbf3LyzzyA2LY=
Subject key identifier:   39:29:2F:A0:84:AB:81:7B:E3:60:8A:06:FD:E0:DA:4B:34:82:A6:CC
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       38B69B8F826DA82AA5F5535837BC6FE4178C64CA
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS213327.roa
Signing time:             Mon 10 Apr 2023 03:31:44 +0000
ROA not before:           Mon 10 Apr 2023 03:26:44 +0000
ROA not after:            Mon 08 Apr 2024 03:31:44 +0000
asID:                     213327
IP address blocks:        2a12:dd47:804f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b6:9b:8f:82:6d:a8:2a:a5:f5:53:58:37:bc:6f:e4:17:8c:64:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:44 2023 GMT
            Not After : Apr  8 03:31:44 2024 GMT
        Subject: CN=39292FA084AB817BE3608A06FDE0DA4B3482A6CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:f3:a5:e5:16:24:6f:91:66:8b:f6:bf:c4:
                    7d:e7:a0:5b:09:ce:2e:ac:1a:8c:c7:bc:64:7c:e4:
                    17:b7:21:bc:e4:69:9a:c7:f4:92:b1:9f:6d:2a:3a:
                    21:59:2e:4b:e8:e7:fd:44:8f:a4:e8:a6:b8:01:ae:
                    b9:60:00:84:86:e1:26:1f:4d:a2:43:fb:49:6a:63:
                    fa:55:ff:0f:ba:71:0d:7b:d2:67:f9:26:24:10:5f:
                    6e:98:87:cb:f2:25:3c:fd:fa:7e:94:43:f3:5e:05:
                    50:b6:64:79:9e:32:f6:50:2c:90:44:01:c6:e3:a1:
                    1f:69:64:8a:25:c2:b8:77:fd:66:c5:8a:5b:99:9d:
                    b7:0d:74:64:6f:f2:7d:93:2d:fc:dd:fe:ce:c6:98:
                    51:f2:72:18:c1:3d:0b:cb:31:c9:7f:39:12:50:95:
                    4e:15:59:80:55:d2:8a:46:2c:6b:47:e2:06:f7:06:
                    cf:d0:65:48:e7:6a:c5:c5:a2:5b:59:68:8e:2a:51:
                    d9:42:d9:f9:7b:58:40:5e:69:34:ce:9d:aa:87:92:
                    95:92:a0:2c:62:25:f1:49:8f:9d:fe:c1:10:d4:27:
                    d8:aa:b1:5c:31:e7:c1:bf:96:c4:d5:d5:7b:50:06:
                    4a:e6:f8:fb:d9:36:27:e0:30:46:2e:61:1a:c8:00:
                    af:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:29:2F:A0:84:AB:81:7B:E3:60:8A:06:FD:E0:DA:4B:34:82:A6:CC
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS213327.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804f::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:15:5b:b1:71:e2:d1:fc:1b:a9:c2:c6:98:3b:63:39:f1:70:
         cb:a7:ad:4d:aa:c1:0a:74:02:fe:c4:98:60:05:a7:ac:de:e9:
         2c:11:31:9b:75:7c:a3:e1:d4:30:e3:9f:14:f5:62:0f:15:eb:
         84:f7:e4:e7:0b:04:bb:c8:65:3b:e8:fa:1a:c9:8e:6b:23:f4:
         9b:dd:7a:e2:b1:58:d8:36:c3:07:18:90:69:12:3c:11:15:67:
         61:3d:07:8c:0d:0c:ac:62:ab:cf:66:04:94:13:a4:b4:c8:5a:
         24:f2:10:38:ec:fa:61:b4:dc:f2:8e:f4:6b:81:98:60:9d:88:
         57:78:69:3c:fe:4b:c9:6c:0e:5d:9a:72:83:75:10:27:d7:7f:
         31:5e:a7:42:37:c5:b7:ac:c9:c3:13:a0:5d:61:3e:2b:ea:9c:
         4a:b5:4e:5c:fe:27:63:a6:7d:5a:22:0c:42:0b:55:a2:d3:5a:
         a1:f7:58:4c:91:c0:79:c8:ef:83:33:58:14:38:c4:2b:2a:cd:
         53:9b:81:46:c3:99:8d:2e:d3:c1:2d:8b:47:d7:26:c2:02:a7:
         03:cc:e9:ab:d3:72:95:6c:02:ea:77:af:34:26:e9:42:24:04:
         9f:69:7b:e6:44:4e:c8:75:75:87:5a:10:3f:e0:d4:4b:62:1c:
         ea:b6:b3:38
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUOLabj4JtqCql9VNYN7xv5BeMZMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2NDRaFw0yNDA0MDgwMzMxNDRaMDMxMTAvBgNV
BAMTKDM5MjkyRkEwODRBQjgxN0JFMzYwOEEwNkZERTBEQTRCMzQ4MkE2Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2KPOl5RYkb5Fmi/a/xH3noFsJ
zi6sGozHvGR85Be3IbzkaZrH9JKxn20qOiFZLkvo5/1Ej6ToprgBrrlgAISG4SYf
TaJD+0lqY/pV/w+6cQ170mf5JiQQX26Yh8vyJTz9+n6UQ/NeBVC2ZHmeMvZQLJBE
AcbjoR9pZIolwrh3/WbFiluZnbcNdGRv8n2TLfzd/s7GmFHychjBPQvLMcl/ORJQ
lU4VWYBV0opGLGtH4gb3Bs/QZUjnasXFoltZaI4qUdlC2fl7WEBeaTTOnaqHkpWS
oCxiJfFJj53+wRDUJ9iqsVwx58G/lsTV1XtQBkrm+PvZNifgMEYuYRrIAK/NAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUOSkvoISrgXvjYIoG/eDaSzSCpswwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMTMzMjcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEt1HgE8wDQYJKoZIhvcNAQEL
BQADggEBADQVW7Fx4tH8G6nCxpg7YznxcMunrU2qwQp0Av7EmGAFp6ze6SwRMZt1
fKPh1DDjnxT1Yg8V64T35OcLBLvIZTvo+hrJjmsj9JvdeuKxWNg2wwcYkGkSPBEV
Z2E9B4wNDKxiq89mBJQTpLTIWiTyEDjs+mG03PKO9GuBmGCdiFd4aTz+S8lsDl2a
coN1ECfXfzFep0I3xbesycMToF1hPivqnEq1Tlz+J2OmfVoiDEILVaLTWqH3WEyR
wHnI74MzWBQ4xCsqzVObgUbDmY0u08Eti0fXJsICpwPM6avTcpVsAup3rzQm6UIk
BJ9pe+ZETsh1dYdaED/g1EtiHOq2szg=
-----END CERTIFICATE-----