Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS205848.roa
File:                     AS205848.roa (raw, json)
Hash identifier:          QDWpC9T3m57lM+HO/QxTMOCSJAsizYwMO0WTFtysiUY=
Subject key identifier:   49:DB:02:ED:BE:FA:F1:28:5C:1A:F1:86:47:7B:0F:28:B1:81:13:1B
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       05F5EF91182E08B5D07DF41B5F90EE03D34CD4B8
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS205848.roa
Signing time:             Mon 10 Apr 2023 03:31:35 +0000
ROA not before:           Mon 10 Apr 2023 03:26:35 +0000
ROA not after:            Mon 08 Apr 2024 03:31:35 +0000
asID:                     205848
IP address blocks:        2a12:dd47:8049::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f5:ef:91:18:2e:08:b5:d0:7d:f4:1b:5f:90:ee:03:d3:4c:d4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:35 2023 GMT
            Not After : Apr  8 03:31:35 2024 GMT
        Subject: CN=49DB02EDBEFAF1285C1AF186477B0F28B181131B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e6:9a:22:86:57:40:d9:78:57:8c:00:3d:2d:
                    30:fa:c3:ff:88:3c:48:8e:42:29:8d:76:a6:21:f4:
                    7e:ba:d4:93:c8:61:eb:a5:05:1a:98:a2:3f:6a:b1:
                    ec:5b:77:b9:74:32:27:90:2c:c7:8f:b6:15:e9:cd:
                    09:bc:2b:07:9f:69:6c:f0:1e:5f:ca:dd:ef:25:06:
                    76:d8:3a:27:e4:bf:f3:56:27:db:9d:6c:93:14:84:
                    ab:4c:23:5e:fc:94:d6:15:7c:6a:f0:2a:40:a7:7a:
                    50:1b:0a:17:fa:45:98:d2:24:ea:a7:e3:e7:fc:bd:
                    63:07:f8:27:aa:d3:0e:d0:2e:77:62:47:aa:8d:bb:
                    4b:e6:cf:ab:12:1f:dd:19:12:e5:48:20:c0:b9:1a:
                    11:84:39:55:d0:25:32:5f:00:14:9e:d7:0c:92:52:
                    c5:92:f7:25:90:27:ff:03:55:22:d0:9a:8a:f4:61:
                    a7:56:55:4b:0e:f4:0f:8f:d7:87:f0:38:eb:6d:3a:
                    43:db:06:92:6b:94:26:3f:8e:69:b9:b0:27:03:b1:
                    f5:2e:21:9b:c3:7f:f9:fe:8d:71:b5:9c:35:ae:c2:
                    6e:4e:c1:77:9e:50:37:d2:cc:d2:6f:a2:d0:e0:1c:
                    5f:ea:56:2a:c1:b8:18:f1:b3:d7:97:88:56:c8:65:
                    6c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DB:02:ED:BE:FA:F1:28:5C:1A:F1:86:47:7B:0F:28:B1:81:13:1B
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS205848.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8049::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:b1:f7:ef:c9:ea:eb:7d:11:35:15:48:a7:4a:d2:ec:e0:d6:
         e6:00:2f:47:86:32:bd:0e:0f:cc:8b:87:dc:66:6f:c2:b0:2c:
         a9:9a:91:70:19:4b:60:c7:a6:6c:cd:9f:0a:57:4b:5b:4a:0b:
         33:90:f3:bb:f5:9b:c1:c7:63:d6:92:fb:e1:eb:ba:1e:94:5e:
         18:79:2e:09:da:2c:78:90:e8:bd:d8:62:6b:b2:9a:93:19:ba:
         33:2c:47:28:7c:56:82:f4:4c:b3:c1:36:b0:29:a4:be:e6:7c:
         0e:16:c3:8f:98:e6:e7:66:a9:68:4c:1b:bc:4b:ca:7b:93:9c:
         e4:98:2b:26:de:5c:d1:d0:3c:19:87:93:01:a5:d0:37:6b:34:
         fb:03:c2:40:e0:57:5d:a8:bf:ed:91:b6:d0:c4:57:07:35:e7:
         b1:f8:f3:ce:1d:ac:63:90:01:9f:47:d2:56:c0:e2:f5:5b:c2:
         6c:a5:26:6b:81:f4:6a:f3:35:d7:a1:99:74:3b:b7:a5:8d:8b:
         21:9a:d2:dd:47:1e:5a:27:22:fa:44:ce:0a:ff:cd:1c:17:75:
         44:5e:01:42:3d:31:70:f1:ee:37:79:21:84:71:46:da:f2:b4:
         ef:86:29:81:2e:0d:15:96:7c:d4:d8:6a:02:59:f6:d3:bd:84:
         05:b1:f0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----