Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS205432.roa
File:                     AS205432.roa (raw, json)
Hash identifier:          z76A6Fs/iglT15eCLuJm432uakm5epKZU07hLBrG/W0=
Subject key identifier:   13:93:91:37:74:A7:E2:16:ED:E7:24:BA:B8:29:5E:7C:1D:78:BC:29
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       2A99231D96C4FA2AC9ED0472B450BB3DB937FFA2
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS205432.roa
Signing time:             Mon 10 Apr 2023 03:31:49 +0000
ROA not before:           Mon 10 Apr 2023 03:26:49 +0000
ROA not after:            Mon 08 Apr 2024 03:31:49 +0000
asID:                     205432
IP address blocks:        2a12:dd47:84fe::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:99:23:1d:96:c4:fa:2a:c9:ed:04:72:b4:50:bb:3d:b9:37:ff:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:49 2023 GMT
            Not After : Apr  8 03:31:49 2024 GMT
        Subject: CN=1393913774A7E216EDE724BAB8295E7C1D78BC29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:50:fb:98:55:48:dc:de:9c:23:2f:e6:fb:
                    fc:58:84:55:2a:8f:ee:c6:5b:e1:91:58:77:eb:30:
                    59:ad:4f:2f:4b:04:90:c4:0a:02:73:51:ba:aa:87:
                    77:54:6a:1e:73:fc:5c:78:55:ab:ef:a0:21:69:af:
                    85:f2:d2:20:b1:62:fc:5d:69:22:b2:9d:63:ea:f4:
                    77:79:8a:9a:8b:fb:7a:d2:fd:0a:d2:7d:1d:00:19:
                    0e:9c:a6:4d:8d:b8:b0:97:44:bb:62:63:62:87:81:
                    e0:fc:d4:3d:04:0a:6e:5a:21:bf:0f:bc:a9:2a:e0:
                    2c:20:ef:1c:47:f9:78:38:8a:94:35:28:ae:fb:4d:
                    5b:ff:39:38:b6:07:bb:f0:02:d1:12:0b:2d:1a:26:
                    ff:59:fe:12:a8:56:83:cd:2d:a0:da:27:2b:60:68:
                    54:4d:9b:0c:6d:ab:1b:51:94:e1:54:73:45:7c:92:
                    8b:c8:16:a8:f9:c3:5a:d0:a3:08:de:5c:56:a1:ae:
                    f0:35:1a:5f:2e:24:8d:4c:43:cb:32:86:c4:a3:48:
                    93:b3:54:41:35:fb:16:dd:6d:51:cc:89:5c:bc:d3:
                    68:ae:35:73:c9:86:ae:45:c1:8b:3f:2a:8f:b6:1f:
                    da:0b:d1:f2:9b:dc:d9:f3:e9:ae:c9:ad:eb:08:f1:
                    71:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:93:91:37:74:A7:E2:16:ED:E7:24:BA:B8:29:5E:7C:1D:78:BC:29
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS205432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:84fe::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:e8:28:d6:ba:ce:9e:fd:3f:14:02:c4:c8:b6:91:ad:d4:b9:
         69:8a:9e:e1:30:4a:1a:ca:8b:e8:18:d8:54:6f:dc:c5:52:69:
         43:ba:64:c0:7b:ab:05:c3:26:a4:3a:d1:56:57:f1:11:25:36:
         60:2b:cc:db:d1:0a:f4:e1:84:44:d5:50:09:66:2c:4a:2f:a2:
         75:31:37:8e:05:dd:85:5b:87:e6:24:39:82:b3:0e:b0:9d:4b:
         70:9d:de:15:c1:42:3a:6e:5c:2d:78:09:ed:c5:7f:35:bb:b4:
         7f:74:2d:99:90:36:bc:b1:9a:d0:c1:2f:51:0c:59:d6:46:c0:
         2a:63:fb:c2:a8:8a:f5:77:c8:6f:e1:b2:4a:5f:2b:ca:31:a1:
         f5:c4:4f:72:46:53:90:db:6a:a8:3f:1c:58:53:57:2c:7f:b9:
         93:82:04:4a:e4:93:32:77:6e:95:94:59:e2:35:3d:b9:a3:75:
         65:36:b2:76:af:7c:67:ef:bb:78:d5:1c:d6:0a:f8:a9:42:c8:
         b9:e5:eb:72:4f:ed:47:e4:96:b0:c7:fe:5f:04:68:e4:0e:44:
         86:74:bd:f4:e4:58:a3:8d:f6:3c:1a:a2:3b:78:75:bd:2b:14:
         6d:25:c1:ff:68:dc:c7:05:59:b2:62:3e:fe:24:07:e7:2e:55:
         8b:a4:66:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----