Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS7018.roa
File:                     AS7018.roa (raw, json)
Hash identifier:          martZfSvlNmnsZGEj53li5iOxYKkbwS8fNLXxxsPyyg=
Subject key identifier:   B7:89:FE:66:47:E3:B1:6E:60:FD:67:A9:73:AC:CB:BB:7A:B6:A1:E6
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       31BFEDD288C550F86DA2DC51D38D94C58DEA70CD
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS7018.roa
Signing time:             Sat 24 Jun 2023 00:21:41 +0000
ROA not before:           Sat 24 Jun 2023 00:16:41 +0000
ROA not after:            Sat 22 Jun 2024 00:21:41 +0000
asID:                     7018
IP address blocks:        2a12:dd47:3c00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:bf:ed:d2:88:c5:50:f8:6d:a2:dc:51:d3:8d:94:c5:8d:ea:70:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Jun 24 00:16:41 2023 GMT
            Not After : Jun 22 00:21:41 2024 GMT
        Subject: CN=B789FE6647E3B16E60FD67A973ACCBBB7AB6A1E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d9:d1:54:8f:b2:19:02:81:98:46:04:bc:e9:
                    59:79:19:e7:2f:c1:c6:54:c7:6c:1b:a8:2b:2e:2b:
                    b8:a8:93:e3:c7:69:5c:42:fc:67:8a:11:a3:fd:98:
                    ce:42:07:65:e2:f5:06:f1:46:b1:9f:8d:92:77:f2:
                    80:f4:53:ad:ae:06:5e:db:d0:e4:12:7d:e6:5a:a7:
                    9a:cf:c2:c1:39:54:6c:30:d6:17:37:0e:a5:54:71:
                    8e:e0:53:53:14:62:a7:8c:ac:cc:a7:6c:c0:71:3f:
                    0e:07:a4:21:25:48:1c:81:2d:64:9a:10:c6:14:b9:
                    8e:e8:74:d3:5f:80:42:6c:71:66:0c:8e:ba:fe:19:
                    3b:a9:99:44:75:6e:57:3d:4c:40:66:75:a0:80:28:
                    b9:9c:ef:69:18:4f:e7:05:65:c4:26:69:50:ba:25:
                    a5:44:3d:49:71:96:8d:ef:d0:d8:de:dc:02:1e:ae:
                    4b:9f:e5:e6:56:0f:0c:44:ea:23:f3:d7:e6:5d:8c:
                    22:a2:cf:ea:da:cc:d5:cc:92:75:d7:a3:11:a6:b2:
                    05:7f:73:7d:94:03:c7:5b:f3:03:0b:2d:0e:01:9d:
                    d5:d8:3c:1d:b3:75:b6:d5:36:a6:3e:7c:72:c9:72:
                    85:66:d2:5c:36:28:32:ae:68:e5:24:ac:ab:37:c6:
                    b5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:89:FE:66:47:E3:B1:6E:60:FD:67:A9:73:AC:CB:BB:7A:B6:A1:E6
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS7018.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         32:34:f5:d4:4d:02:f5:22:c8:2c:06:3a:17:45:6a:2d:35:fa:
         eb:42:19:a6:30:2c:7e:35:82:e7:cb:fe:7f:90:53:a2:1e:f3:
         1c:1c:9f:a5:5d:f7:93:1c:c4:be:38:ae:aa:17:d9:b3:c4:3b:
         65:eb:60:bd:4f:34:2e:b0:92:d1:75:1f:78:ee:7c:4b:a7:7a:
         96:73:16:de:8e:55:e5:a9:2f:35:7f:e8:27:b2:1c:84:8e:91:
         00:16:10:ad:d1:83:da:f1:6d:a6:6a:45:ff:58:76:ca:ac:6f:
         c8:07:a9:3d:44:95:a2:a4:47:37:cb:75:5c:a7:df:c5:7f:ea:
         3d:0c:ec:19:18:ca:44:df:93:33:04:03:e4:c7:ce:24:44:32:
         6a:da:56:82:e7:90:c2:d6:24:39:b1:a5:59:02:06:a8:72:83:
         84:a8:80:70:42:09:51:05:be:40:d8:ce:eb:50:72:f1:f7:33:
         3b:ff:37:5d:49:c1:8b:0f:a2:a1:56:d9:ca:25:1d:fb:75:fc:
         fd:d9:2e:bc:31:c7:c6:5c:c5:c4:af:f7:bc:8a:a3:32:81:e1:
         95:58:29:35:63:1b:37:78:31:0e:b7:ab:0d:a2:68:8d:3d:2c:
         a9:1a:b3:84:6d:04:74:da:68:a1:5a:e0:5f:e0:af:fd:63:f0:
         2c:cd:9d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----