Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS21738.roa
File:                     AS21738.roa (raw, json)
Hash identifier:          Xopppb3LFVgzTW9HEwIVgmWbgXQzJbdDljuA80jty6A=
Subject key identifier:   0B:FA:9E:CB:DF:69:70:1F:43:2F:26:CD:D2:48:27:D2:00:8E:23:E7
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       4DB3CFEF21CF56596B57620DFBC5F6174E8F71E7
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS21738.roa
Signing time:             Mon 10 Apr 2023 03:31:43 +0000
ROA not before:           Mon 10 Apr 2023 03:26:43 +0000
ROA not after:            Mon 08 Apr 2024 03:31:43 +0000
asID:                     21738
IP address blocks:        2a12:dd47:5f00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b3:cf:ef:21:cf:56:59:6b:57:62:0d:fb:c5:f6:17:4e:8f:71:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:43 2023 GMT
            Not After : Apr  8 03:31:43 2024 GMT
        Subject: CN=0BFA9ECBDF69701F432F26CDD24827D2008E23E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:62:86:4d:45:68:7c:90:86:83:48:21:50:2f:
                    6a:7a:48:63:de:9e:0a:0d:b2:d8:93:ce:2f:d4:1c:
                    fb:cd:21:4e:fe:5a:07:10:d7:25:39:51:fb:14:4f:
                    6d:7b:02:a7:77:02:b9:1c:02:c6:9c:33:33:57:a7:
                    92:9e:a8:c2:b3:bb:6d:b8:e3:f6:94:bf:4b:bc:e9:
                    b8:6e:c4:b3:a0:34:ca:3b:b7:e8:ac:38:79:d7:34:
                    7b:22:81:22:e9:cb:7f:cf:cd:63:03:79:94:45:de:
                    4a:dc:d0:0a:6c:bc:26:3c:d3:81:39:2e:97:98:2f:
                    44:8d:9f:1e:b9:bb:4b:00:03:f9:26:6d:ed:7e:59:
                    6f:a6:6d:72:32:98:9b:4f:3d:5a:c9:93:99:17:da:
                    c4:b9:63:60:0a:a9:14:17:3f:91:57:3d:ea:53:c5:
                    01:27:2a:f4:16:d4:fe:2d:90:9e:2f:f6:56:42:96:
                    ab:5f:c5:08:ae:56:ea:38:de:11:2d:a9:8e:c3:42:
                    a3:6d:fe:ad:f1:81:98:bd:58:79:5e:16:70:73:c9:
                    10:59:a0:71:45:9a:04:a5:8e:16:bb:50:e1:14:5f:
                    3c:13:ea:37:a1:da:11:93:2a:03:75:ff:d3:21:e3:
                    35:d8:13:f1:48:f8:e5:c0:64:54:8e:0e:7e:4e:8c:
                    04:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FA:9E:CB:DF:69:70:1F:43:2F:26:CD:D2:48:27:D2:00:8E:23:E7
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS21738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:f1:11:6f:1d:30:6d:b1:d5:bd:86:05:77:76:7f:b7:df:c7:
         b0:e1:42:0b:16:23:51:e8:e3:b7:b5:db:c2:25:eb:ad:9b:6f:
         21:c3:31:fa:a5:29:17:86:fe:49:24:57:06:63:30:32:12:f3:
         a8:54:78:01:19:35:57:d6:45:31:ef:83:7c:0a:bc:e2:48:a2:
         02:09:02:67:12:da:9e:4d:d6:88:7a:04:c5:81:8c:43:54:78:
         f7:ab:a0:9d:78:a7:de:f5:d0:db:4d:8c:f2:b8:39:0e:da:05:
         06:68:98:94:29:ea:84:c5:bd:6d:61:50:2a:89:dd:23:b5:4e:
         5c:ff:82:53:ae:d9:31:a5:03:ec:5d:8d:ea:11:a4:ca:04:34:
         3a:1b:52:d4:c4:b7:1f:08:82:37:3a:67:c0:7e:54:a6:fc:7e:
         c8:3a:f8:11:45:be:74:0f:b3:a9:55:2a:7b:2b:cc:d1:db:cc:
         04:7b:76:65:02:de:8a:3f:cf:d4:f7:98:4b:64:98:e4:78:34:
         a0:b0:b7:7a:0c:62:93:8b:2d:5a:72:6c:cd:ad:65:fa:81:21:
         df:76:d3:93:c8:46:a3:48:66:cb:1b:a9:1d:11:48:16:67:5f:
         07:80:32:cb:46:e2:75:df:7a:8e:49:3f:ee:03:5e:97:40:23:
         c1:1f:92:5f
-----BEGIN CERTIFICATE-----
MIIEkTCCA3mgAwIBAgIUTbPP7yHPVllrV2IN+8X2F06PcecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2NDNaFw0yNDA0MDgwMzMxNDNaMDMxMTAvBgNV
BAMTKDBCRkE5RUNCREY2OTcwMUY0MzJGMjZDREQyNDgyN0QyMDA4RTIzRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVYoZNRWh8kIaDSCFQL2p6SGPe
ngoNstiTzi/UHPvNIU7+WgcQ1yU5UfsUT217Aqd3ArkcAsacMzNXp5KeqMKzu224
4/aUv0u86bhuxLOgNMo7t+isOHnXNHsigSLpy3/PzWMDeZRF3krc0ApsvCY804E5
LpeYL0SNnx65u0sAA/kmbe1+WW+mbXIymJtPPVrJk5kX2sS5Y2AKqRQXP5FXPepT
xQEnKvQW1P4tkJ4v9lZClqtfxQiuVuo43hEtqY7DQqNt/q3xgZi9WHleFnBzyRBZ
oHFFmgSljha7UOEUXzwT6jeh2hGTKgN1/9Mh4zXYE/FI+OXAZFSODn5OjASHAgMB
AAGjggGbMIIBlzAdBgNVHQ4EFgQUC/qey99pcB9DLybN0kgn0gCOI+cwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBE
BggrBgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMTczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoS3UdfMA0GCSqGSIb3DQEBCwUA
A4IBAQAj8RFvHTBtsdW9hgV3dn+338ew4UILFiNR6OO3tdvCJeutm28hwzH6pSkX
hv5JJFcGYzAyEvOoVHgBGTVX1kUx74N8CrziSKICCQJnEtqeTdaIegTFgYxDVHj3
q6CdeKfe9dDbTYzyuDkO2gUGaJiUKeqExb1tYVAqid0jtU5c/4JTrtkxpQPsXY3q
EaTKBDQ6G1LUxLcfCII3OmfAflSm/H7IOvgRRb50D7OpVSp7K8zR28wEe3ZlAt6K
P8/U95hLZJjkeDSgsLd6DGKTiy1acmzNrWX6gSHfdtOTyEajSGbLG6kdEUgWZ18H
gDLLRuJ133qOST/uA16XQCPBH5Jf
-----END CERTIFICATE-----