Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/John/1/326131323a646434373a336530303a3a2f34302d3430203d3e20323030383739.roa
File:                     326131323a646434373a336530303a3a2f34302d3430203d3e20323030383739.roa (raw, json)
Hash identifier:          OuaUdXB+S1eKBLx8F7eDc0BJxfjMDae5//dVU2wgBck=
Subject key identifier:   25:91:61:1D:80:29:A0:C5:D5:50:92:E9:DA:2C:01:B3:73:20:E9:A4
Certificate issuer:       /CN=9788ACA0CB104D300847BED012FAF8E3269E8A01
Certificate serial:       4EE0CE361C4C08E364EABE4AB5034648896213E1
Authority key identifier: 97:88:AC:A0:CB:10:4D:30:08:47:BE:D0:12:FA:F8:E3:26:9E:8A:01
Authority info access:    rsync://rpki.co/repo/AS945/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.cer
Subject info access:      rsync://rpki.co/repo/John/1/326131323a646434373a336530303a3a2f34302d3430203d3e20323030383739.roa
Signing time:             Sat 22 Apr 2023 22:03:28 +0000
ROA not before:           Sat 22 Apr 2023 21:58:28 +0000
ROA not after:            Sat 20 Apr 2024 22:03:28 +0000
asID:                     200879
IP address blocks:        2a12:dd47:3e00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e0:ce:36:1c:4c:08:e3:64:ea:be:4a:b5:03:46:48:89:62:13:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9788ACA0CB104D300847BED012FAF8E3269E8A01
        Validity
            Not Before: Apr 22 21:58:28 2023 GMT
            Not After : Apr 20 22:03:28 2024 GMT
        Subject: CN=2591611D8029A0C5D55092E9DA2C01B37320E9A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8c:0a:cb:f0:f5:73:cb:1a:8c:45:f0:c0:d4:
                    a8:02:e2:c3:95:40:a3:09:65:1c:9c:11:3c:e5:2f:
                    d0:dd:38:be:38:ff:87:f2:db:7a:fa:3b:df:10:c5:
                    5d:e4:b9:12:b2:cc:b2:c6:c7:bf:dd:db:fe:6a:54:
                    02:13:1a:bc:bb:30:4e:d8:01:ec:c9:12:43:45:3a:
                    c7:cb:3e:4d:00:d1:44:83:ae:0a:a0:f6:c4:ab:78:
                    7c:e5:23:9a:7a:b5:30:d2:61:41:12:8e:60:a1:45:
                    bd:4f:c2:1e:6e:a3:c6:3e:16:64:23:8b:d1:1f:29:
                    d0:61:d1:ae:98:eb:af:76:15:09:bc:b4:11:06:ed:
                    6a:37:77:8f:fd:2a:e7:27:e1:2b:c1:23:7a:b7:02:
                    4b:fe:20:07:b0:ca:96:ce:cb:c8:5b:39:2f:29:d5:
                    76:76:49:5b:63:bd:47:f0:bb:a3:87:73:58:b9:d4:
                    92:28:b6:4a:93:17:e6:67:9a:7c:e2:09:05:74:be:
                    51:73:1e:97:f6:43:ee:ee:bf:ae:a0:94:15:a0:79:
                    1d:09:e9:7b:69:e2:b2:49:c3:a4:44:80:24:c9:ea:
                    79:a0:bb:5f:a3:d8:3a:40:06:93:50:68:8a:03:e1:
                    88:b5:bd:9c:8a:c3:c8:8e:33:c8:a5:67:94:1e:b6:
                    9c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:91:61:1D:80:29:A0:C5:D5:50:92:E9:DA:2C:01:B3:73:20:E9:A4
            X509v3 Authority Key Identifier:
                keyid:97:88:AC:A0:CB:10:4D:30:08:47:BE:D0:12:FA:F8:E3:26:9E:8A:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/John/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/John/1/326131323a646434373a336530303a3a2f34302d3430203d3e20323030383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b7:71:64:6c:c7:67:13:d0:3f:a9:06:0f:90:f8:8e:49:c7:52:
         13:ef:b5:ff:9d:5d:25:f8:f0:c2:da:aa:0b:36:32:0b:b8:2b:
         f9:fd:12:28:34:11:40:a1:71:76:be:30:48:97:c1:88:f6:11:
         d3:e7:6d:f6:0d:8a:6e:09:8e:6e:a3:3e:20:36:4e:46:aa:03:
         dd:b1:19:9c:1b:1b:f0:f9:8b:61:bb:53:bb:bd:0d:9f:9d:39:
         17:33:e3:6d:bd:7c:00:e5:fa:b6:1d:1e:42:ea:ff:9a:80:51:
         4f:31:11:d7:4b:34:9d:f2:71:23:da:a2:1a:c2:b2:32:d9:8a:
         7b:3e:17:f5:8d:56:29:96:f2:92:dd:79:4a:99:68:f1:67:d6:
         b3:f4:c6:3c:0e:41:d7:43:25:a0:be:a0:06:bb:04:e8:6a:09:
         b6:d0:93:d4:78:61:b5:5e:ae:fc:ef:ff:58:87:79:af:43:27:
         27:4c:7d:85:56:2a:25:a6:14:7c:59:ae:94:02:fe:5f:39:03:
         8d:e8:49:64:d5:ed:de:f0:6d:df:75:43:10:fb:78:c4:ad:26:
         c5:1a:38:27:48:d7:c2:d3:d1:3e:8c:ac:d5:d5:24:05:98:67:
         7a:49:16:e0:6c:4a:8a:ff:45:d5:9c:01:15:d2:0e:62:e3:9a:
         cc:20:be:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----