Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS57401.roa
File:                     AS57401.roa (raw, json)
Hash identifier:          4iV3n6TmArzWtBiN5+IRK+q+DOGyZQFG8lkEon53GrU=
Subject key identifier:   6D:19:46:97:35:61:58:E8:6B:FE:D0:2D:18:2E:21:83:F7:72:BD:15
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       26FFDEDA571A70269241B8668705488D0D9B61A4
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS57401.roa
Signing time:             Mon 10 Apr 2023 03:31:43 +0000
ROA not before:           Mon 10 Apr 2023 03:26:43 +0000
ROA not after:            Mon 08 Apr 2024 03:31:43 +0000
asID:                     57401
IP address blocks:        2a12:dd47:8001::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ff:de:da:57:1a:70:26:92:41:b8:66:87:05:48:8d:0d:9b:61:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:43 2023 GMT
            Not After : Apr  8 03:31:43 2024 GMT
        Subject: CN=6D194697356158E86BFED02D182E2183F772BD15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6c:80:bc:81:5d:3b:04:81:67:ab:ee:fb:f9:
                    5f:e5:2b:17:04:50:0a:7c:35:22:f0:15:df:8a:57:
                    91:ec:ee:06:76:39:9b:9b:49:8d:84:3d:df:ba:f4:
                    7c:6e:59:6f:63:65:98:31:8c:e9:91:1b:40:88:7e:
                    d8:8b:46:78:8b:fa:3e:2b:2d:82:60:f1:f8:6d:f9:
                    47:13:92:e0:c9:1c:4e:26:8e:79:26:17:fa:f2:ce:
                    d9:3b:32:15:bc:8a:f4:c4:65:6e:61:d4:7c:a9:8d:
                    f0:7b:d0:f9:25:86:d2:3c:ce:a0:05:5d:25:a2:49:
                    88:f4:27:5a:7c:54:4a:3d:22:3f:cc:b4:a6:ec:37:
                    85:33:db:e2:44:d0:04:ef:21:04:fd:ab:0d:47:fd:
                    ac:d6:21:d3:0f:0a:2d:d8:ee:31:d5:cc:4f:d7:05:
                    97:7c:1a:3d:e7:ec:7f:53:41:85:cb:62:30:dc:c0:
                    fd:97:a7:ac:29:d6:e9:db:f1:48:9f:09:64:7e:af:
                    1d:e9:33:66:99:90:59:3f:04:00:d8:cd:fe:fa:ff:
                    97:c3:50:6a:1b:1a:1c:3f:12:97:5b:8c:de:82:c4:
                    e6:9f:3a:ed:c1:18:77:41:a1:36:f5:74:f2:e5:d8:
                    c9:62:a6:44:e8:ed:ab:f1:90:ce:40:77:e2:0f:b5:
                    90:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:19:46:97:35:61:58:E8:6B:FE:D0:2D:18:2E:21:83:F7:72:BD:15
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS57401.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8001::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:40:f8:ed:44:2c:57:47:85:b1:23:be:79:18:5a:d3:06:9f:
         b3:5e:2b:81:18:bf:4b:0a:c7:3d:e4:3e:c8:0c:7a:b1:0f:4c:
         2a:2f:35:9a:45:93:6a:f7:a9:95:95:cc:d5:88:d1:e1:a5:16:
         1a:74:eb:d4:a7:cb:3f:04:a4:76:ab:2a:70:bb:04:de:b2:4b:
         74:62:1b:3e:2c:bb:99:ca:03:ba:36:89:eb:46:03:a8:e9:2b:
         cf:90:5a:b1:ff:40:cf:7d:35:8e:04:36:8b:3a:bf:13:3c:89:
         f8:92:75:f6:f7:24:bc:42:78:ba:6b:40:83:b1:3f:94:6c:42:
         b0:ac:49:9a:c7:7e:51:0b:9f:28:fa:66:61:8a:2c:af:8f:74:
         bc:8f:f2:0d:51:bc:90:49:61:53:79:17:1d:95:f2:d3:2b:6d:
         af:5a:5c:a1:73:86:93:03:80:8d:df:18:04:0b:07:ac:02:ba:
         bb:e8:60:26:26:da:52:27:39:91:aa:37:6e:c6:af:db:0e:60:
         e2:e8:30:23:c9:0b:68:44:da:1c:df:d2:e7:3b:5e:bc:7f:af:
         42:07:c3:ec:32:d3:c9:3f:81:87:0b:43:ed:a1:ee:32:fa:6a:
         03:93:b3:bd:01:6a:58:51:54:ff:51:21:0e:4c:8c:68:c7:d6:
         32:78:7d:c1
-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIUJv/e2lcacCaSQbhmhwVIjQ2bYaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2NDNaFw0yNDA0MDgwMzMxNDNaMDMxMTAvBgNV
BAMTKDZEMTk0Njk3MzU2MTU4RTg2QkZFRDAyRDE4MkUyMTgzRjc3MkJEMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMbIC8gV07BIFnq+77+V/lKxcE
UAp8NSLwFd+KV5Hs7gZ2OZubSY2EPd+69HxuWW9jZZgxjOmRG0CIftiLRniL+j4r
LYJg8fht+UcTkuDJHE4mjnkmF/ryztk7MhW8ivTEZW5h1HypjfB70PklhtI8zqAF
XSWiSYj0J1p8VEo9Ij/MtKbsN4Uz2+JE0ATvIQT9qw1H/azWIdMPCi3Y7jHVzE/X
BZd8Gj3n7H9TQYXLYjDcwP2Xp6wp1unb8UifCWR+rx3pM2aZkFk/BADYzf76/5fD
UGobGhw/EpdbjN6CxOafOu3BGHdBoTb1dPLl2MlipkTo7avxkM5Ad+IPtZA7AgMB
AAGjggGcMIIBmDAdBgNVHQ4EFgQUbRlGlzVhWOhr/tAtGC4hg/dyvRUwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBE
BggrBgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVM1NzQwMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoS3UeAATANBgkqhkiG9w0BAQsF
AAOCAQEAfED47UQsV0eFsSO+eRha0wafs14rgRi/SwrHPeQ+yAx6sQ9MKi81mkWT
aveplZXM1YjR4aUWGnTr1KfLPwSkdqsqcLsE3rJLdGIbPiy7mcoDujaJ60YDqOkr
z5Basf9Az301jgQ2izq/EzyJ+JJ19vckvEJ4umtAg7E/lGxCsKxJmsd+UQufKPpm
YYosr490vI/yDVG8kElhU3kXHZXy0yttr1pcoXOGkwOAjd8YBAsHrAK6u+hgJiba
Uic5kao3bsav2w5g4ugwI8kLaETaHN/S5ztevH+vQgfD7DLTyT+BhwtD7aHuMvpq
A5OzvQFqWFFU/1EhDkyMaMfWMnh9wQ==
-----END CERTIFICATE-----