Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS47449.roa
File:                     AS47449.roa (raw, json)
Hash identifier:          xf8rdgrvX/qqhy0KbJmk7V2iGSj0McKDJPIyXsdULtE=
Subject key identifier:   5E:14:5D:8F:DB:7E:ED:0D:E0:30:E8:CE:EA:80:53:21:40:62:A9:FD
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       7567C375B1A183580D068622EA64B602437082A1
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS47449.roa
Signing time:             Mon 10 Apr 2023 03:31:33 +0000
ROA not before:           Mon 10 Apr 2023 03:26:33 +0000
ROA not after:            Mon 08 Apr 2024 03:31:33 +0000
asID:                     47449
IP address blocks:        2a12:dd47:8010::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:67:c3:75:b1:a1:83:58:0d:06:86:22:ea:64:b6:02:43:70:82:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:33 2023 GMT
            Not After : Apr  8 03:31:33 2024 GMT
        Subject: CN=5E145D8FDB7EED0DE030E8CEEA8053214062A9FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f0:e1:d6:42:ec:4c:aa:67:b4:6e:a6:80:6d:
                    8b:47:1a:86:9c:40:15:ae:4f:6b:d6:7b:78:b1:e2:
                    9e:44:19:45:9a:58:7e:b8:d9:ad:f8:3d:4d:8c:b1:
                    4f:fd:3c:09:61:37:40:ba:3e:e5:f9:1a:07:98:00:
                    1d:1c:1d:d8:4b:bf:77:5a:4c:42:e6:9c:73:95:6d:
                    94:30:fc:5a:93:ed:2d:d8:94:b5:68:f8:c1:da:46:
                    61:1a:60:1a:9e:74:48:49:33:53:df:f9:e2:f5:e2:
                    45:f9:f6:03:de:e0:76:cd:0e:6c:ff:92:53:d4:c7:
                    1b:9d:12:2c:2b:09:c7:cd:38:f6:40:f2:c7:cb:4b:
                    fb:c2:06:36:36:b5:9e:73:19:6c:85:7d:76:11:5f:
                    53:ba:5f:bb:d6:fc:e1:98:f3:a7:43:2a:e7:6d:ae:
                    76:db:37:4f:12:71:19:4f:52:8d:02:f6:b3:98:d0:
                    38:c3:7d:49:e7:b0:ec:7b:a1:f7:2b:37:2f:66:42:
                    49:ea:78:df:ff:24:23:be:7a:4f:06:65:3b:e6:de:
                    76:98:c4:61:64:e9:95:1e:39:37:6c:be:b4:67:ca:
                    52:15:2f:f3:85:be:df:3d:39:ca:c7:db:d0:f5:05:
                    67:d2:ba:45:6e:61:8e:eb:48:eb:3a:b3:76:38:d2:
                    44:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:14:5D:8F:DB:7E:ED:0D:E0:30:E8:CE:EA:80:53:21:40:62:A9:FD
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS47449.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8010::/44

    Signature Algorithm: sha256WithRSAEncryption
         47:27:df:48:0a:c3:f7:ef:fe:1e:eb:52:f6:c7:a2:f6:78:8e:
         73:05:3c:ca:1b:35:77:35:3f:4d:cf:69:b7:da:d6:6f:f3:83:
         da:59:3c:f3:bb:70:55:d5:0f:26:bc:78:e1:3d:dd:35:bc:2e:
         92:3e:40:49:d0:f3:1b:78:f1:a2:84:c7:c2:4f:00:2f:b9:d5:
         1b:06:23:01:9e:8d:02:28:48:28:f7:eb:ed:ff:26:76:9f:eb:
         2b:37:97:8f:3e:fe:d0:68:79:f8:bc:5c:53:6e:9b:e6:b3:79:
         52:ac:b8:23:67:12:87:e8:5e:cd:5f:cb:be:6f:fe:d1:25:aa:
         6a:f2:c8:ef:96:90:f6:f5:e1:e3:60:6f:db:c7:d0:2f:cb:ec:
         b6:36:1f:22:79:97:24:23:80:0f:34:63:7e:05:bc:8a:ac:34:
         49:5a:cc:86:f6:ed:58:f3:00:5d:e3:93:26:fd:b7:66:2b:21:
         a9:e7:47:54:ec:bc:ab:5a:31:f5:04:ab:1f:f6:24:51:af:fe:
         69:34:fc:dc:77:f6:b8:0e:5e:99:a6:38:1f:3d:db:78:54:9d:
         07:19:b5:12:cc:37:c9:20:a2:8b:44:d3:84:8e:cb:8d:8f:24:
         16:62:a9:50:95:d4:88:c5:cf:48:5e:36:48:94:b1:10:ea:d7:
         d0:fc:99:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 17:02:15 2023 by rpki-client on console-ams.rpki-client.org