Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS945.roa
File:                     AS945.roa (raw, json)
Hash identifier:          vxbgccOZFsQXeITz5vCeIpG8kdUlZ7s6G2/FO3I6pvM=
Subject key identifier:   63:C1:D6:46:58:52:38:68:E3:3C:56:C7:C2:73:6F:D7:5B:00:CC:66
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       6D588FF3DC429343F82D5BF9DD9F88CD385AC16A
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS945.roa
Signing time:             Mon 14 Aug 2023 04:14:52 +0000
ROA not before:           Mon 14 Aug 2023 04:09:52 +0000
ROA not after:            Mon 12 Aug 2024 04:14:52 +0000
asID:                     945
IP address blocks:        194.116.227.0/24 maxlen: 24
                          2001:67c:a80::/48 maxlen: 48
                          2001:67c:a84::/48 maxlen: 48
                          2001:67c:a88::/48 maxlen: 48
                          2001:67c:a8c::/48 maxlen: 48
                          2001:67c:a90::/48 maxlen: 48
                          2001:67c:a94::/48 maxlen: 48
                          2001:67c:a98::/48 maxlen: 48
                          2001:67c:a9c::/48 maxlen: 48
                          2001:67c:aa0::/48 maxlen: 48
                          2a12:dd40::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:58:8f:f3:dc:42:93:43:f8:2d:5b:f9:dd:9f:88:cd:38:5a:c1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Aug 14 04:09:52 2023 GMT
            Not After : Aug 12 04:14:52 2024 GMT
        Subject: CN=63C1D64658523868E33C56C7C2736FD75B00CC66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:32:18:00:59:81:4b:dd:82:52:b9:1f:07:d0:
                    48:24:5f:7c:84:5a:dc:e6:cc:bd:bb:79:23:91:55:
                    af:00:57:84:a8:8e:60:e5:b3:07:19:f7:65:eb:4c:
                    ca:79:1f:e1:59:9f:39:aa:64:d4:85:2f:e4:b4:86:
                    b4:72:3f:00:02:05:ec:ac:a9:57:47:53:07:62:9f:
                    09:78:96:c6:8e:aa:96:e9:90:6f:45:bd:1f:fe:1a:
                    da:d0:05:6f:11:1d:2b:04:22:36:d8:60:5a:4b:74:
                    58:82:ed:dd:32:5d:9d:45:79:ce:bd:7d:47:1a:ee:
                    0d:5e:2b:13:bd:af:cc:69:fc:52:eb:78:09:37:22:
                    73:77:76:f0:33:66:b2:45:52:6c:c8:b3:7c:fe:30:
                    9d:10:a8:b9:e9:24:76:90:e7:e8:0a:38:c8:7d:3f:
                    5f:ad:12:8b:9b:c1:a0:02:ad:84:68:30:6d:47:9b:
                    9e:a6:3d:95:75:37:6b:98:a8:ac:1e:aa:5e:57:4c:
                    97:58:1c:a5:08:1a:94:f3:70:fa:b0:22:59:4a:1b:
                    91:8f:ca:70:14:83:ee:21:3d:60:c1:f9:63:bc:73:
                    d3:64:78:61:e9:34:8d:31:17:16:82:4f:82:23:9a:
                    72:4f:63:79:97:12:d9:38:6c:6d:36:b0:a8:94:9b:
                    56:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C1:D6:46:58:52:38:68:E3:3C:56:C7:C2:73:6F:D7:5B:00:CC:66
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS945.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.116.227.0/24
                IPv6:
                  2001:67c:a80::/48
                  2001:67c:a84::/48
                  2001:67c:a88::/48
                  2001:67c:a8c::/48
                  2001:67c:a90::/48
                  2001:67c:a94::/48
                  2001:67c:a98::/48
                  2001:67c:a9c::/48
                  2001:67c:aa0::/48
                  2a12:dd40::/29

    Signature Algorithm: sha256WithRSAEncryption
         20:98:b8:fa:8a:59:87:f0:33:fe:10:12:7a:4d:aa:ef:09:12:
         03:05:de:4c:ac:2d:f3:12:9a:66:76:39:ff:e4:7e:7e:1c:8a:
         c6:52:3e:40:87:2f:de:f1:df:ad:d1:c5:37:b4:e0:60:d8:9d:
         b9:32:0a:08:c3:2f:32:1c:a6:7a:c7:95:b6:87:34:b9:43:dd:
         74:81:30:ee:6b:c6:2c:ed:dc:b2:ad:ae:38:ad:08:4b:50:7f:
         84:98:fe:7f:3b:f6:aa:51:88:55:51:5f:63:f6:d9:cb:73:2d:
         d2:08:3b:31:a9:9e:44:7d:52:12:d2:a7:b0:91:af:0f:bd:a1:
         03:95:01:d8:57:6e:71:9f:b8:67:aa:54:63:c9:dc:8f:3b:93:
         2f:11:59:21:bb:8a:a5:b9:60:91:e7:37:eb:85:5b:7a:8a:8c:
         d4:36:52:00:3b:07:f8:c6:a9:f4:c0:ed:e5:da:41:cb:10:d9:
         c4:ae:ee:52:2e:be:38:a8:9b:e4:45:4b:fd:27:bc:72:6f:b2:
         bc:79:30:a0:ea:ab:08:b6:67:22:f6:42:ac:2b:dd:6e:86:fe:
         bc:d2:34:3a:49:e2:ff:31:4d:05:97:50:2f:47:92:d7:58:74:
         c8:2b:e6:21:c8:af:a3:ea:6a:48:75:98:1a:8f:9b:1d:db:7c:
         40:cf:ec:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----