Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/John/1/326131323a646434373a336530303a3a2f34382d3438203d3e20323030383739.roa
File:                     326131323a646434373a336530303a3a2f34382d3438203d3e20323030383739.roa (raw, json)
Hash identifier:          Aqq877I79cXIylnvVcM3wHBT+mhRWGg8f0n37JTXvt8=
Subject key identifier:   CE:26:42:EC:3E:66:C9:2E:68:A4:C4:E1:7E:F0:61:03:EA:29:42:EE
Certificate issuer:       /CN=9788ACA0CB104D300847BED012FAF8E3269E8A01
Certificate serial:       22B110194FDA4D874F05DDDD1A886D5469DF8F47
Authority key identifier: 97:88:AC:A0:CB:10:4D:30:08:47:BE:D0:12:FA:F8:E3:26:9E:8A:01
Authority info access:    rsync://rpki.co/repo/AS945/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.cer
Subject info access:      rsync://rpki.co/repo/John/1/326131323a646434373a336530303a3a2f34382d3438203d3e20323030383739.roa
Signing time:             Sat 22 Apr 2023 14:58:32 +0000
ROA not before:           Sat 22 Apr 2023 14:53:32 +0000
ROA not after:            Sat 20 Apr 2024 14:58:32 +0000
asID:                     200879
IP address blocks:        2a12:dd47:3e00::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b1:10:19:4f:da:4d:87:4f:05:dd:dd:1a:88:6d:54:69:df:8f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9788ACA0CB104D300847BED012FAF8E3269E8A01
        Validity
            Not Before: Apr 22 14:53:32 2023 GMT
            Not After : Apr 20 14:58:32 2024 GMT
        Subject: CN=CE2642EC3E66C92E68A4C4E17EF06103EA2942EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:9b:d4:fe:7b:9c:3b:2e:7c:7d:53:c1:08:
                    99:64:7d:b2:da:40:a2:46:bc:20:2f:03:dd:88:ba:
                    46:14:72:1d:c9:13:66:74:ec:74:e8:d2:2a:c9:dd:
                    f0:e2:58:ac:c6:c6:6d:84:21:05:23:f3:e2:07:ca:
                    6c:a9:ea:f8:23:3d:1c:cb:5a:7b:51:56:be:d5:08:
                    39:dc:ec:57:18:cd:0c:12:24:c8:c0:09:73:d5:15:
                    8f:77:56:20:ee:9a:b3:b5:79:b0:8a:62:b3:9d:44:
                    58:29:67:44:b5:1d:f6:a1:1f:dc:7c:01:bd:50:d2:
                    fd:47:fe:c0:43:d7:ca:01:ce:df:90:13:98:6e:01:
                    c0:c9:c5:90:89:14:4e:29:ae:81:7b:c6:3b:dd:1f:
                    d6:ee:52:be:6e:32:bc:39:44:7c:1a:3e:78:42:87:
                    3e:4a:b8:c3:fe:fb:65:73:5d:99:e6:ac:fa:e0:90:
                    b4:1b:5b:6c:ed:2b:da:54:c8:a5:c3:35:8c:a0:96:
                    62:5b:75:93:ad:c3:d0:9f:85:f3:b0:1d:9b:1e:85:
                    71:ca:3f:b8:9d:b4:b0:1d:21:17:1d:5f:c0:1a:0b:
                    ca:b7:03:39:2f:dc:b4:bb:65:c7:20:e8:fa:40:3d:
                    ba:d2:98:9b:41:95:59:ce:4a:7c:7e:e1:21:3f:b3:
                    39:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:26:42:EC:3E:66:C9:2E:68:A4:C4:E1:7E:F0:61:03:EA:29:42:EE
            X509v3 Authority Key Identifier:
                keyid:97:88:AC:A0:CB:10:4D:30:08:47:BE:D0:12:FA:F8:E3:26:9E:8A:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/John/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/John/1/326131323a646434373a336530303a3a2f34382d3438203d3e20323030383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:4e:15:60:cc:4b:fe:d3:56:e5:ce:b0:7a:3e:2d:de:0c:7e:
         22:22:c4:87:6f:a9:12:6e:aa:7a:8d:96:86:0e:80:71:52:e9:
         53:ee:5c:fd:ac:fe:21:96:48:67:b0:35:29:3a:b5:6e:bf:bd:
         38:80:28:ba:92:4b:a3:80:ff:41:95:18:06:3c:0f:66:16:7e:
         3f:a2:92:51:13:90:3b:90:ee:6b:f9:4c:86:2a:32:11:2c:bb:
         54:12:28:61:d6:b5:5e:61:b5:b2:8a:09:95:19:1f:81:3d:d6:
         f1:b1:bc:d8:39:72:2d:e4:32:a8:dc:71:01:b3:55:f5:71:00:
         09:fe:dd:14:bd:4f:2b:1f:24:14:21:02:26:6c:dd:78:96:2e:
         f4:e9:33:da:60:7c:ea:02:dc:67:ce:31:27:cf:27:e9:29:f3:
         a3:aa:c6:7a:bc:ce:41:f7:ce:61:f4:f2:74:75:1d:a6:69:47:
         8d:b5:b8:96:0b:e8:e6:ac:4f:b1:1d:26:6c:7a:1c:39:ba:06:
         8f:92:3b:4e:86:de:7e:f6:e1:cf:9b:19:7e:06:22:e4:72:fa:
         4a:ec:3a:41:00:99:a1:8a:14:b4:ec:4a:3c:01:a9:9d:26:ca:
         5e:66:c4:36:95:59:c9:92:19:cd:e9:d8:d4:d3:01:52:84:ed:
         a9:63:7b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----