Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS201751.roa
File:                     AS201751.roa (raw, json)
Hash identifier:          HBGQYtQ8oRWlkKRI7l75eWy87ckwEOmH785ZkCJa1ps=
Subject key identifier:   3D:1E:F4:A0:67:BD:76:28:3A:98:EF:B7:E1:D0:0F:C9:0C:42:A3:47
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       3A952D6EB06A0E10E2BF201CFC49E3BAF42FDBBF
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS201751.roa
Signing time:             Mon 10 Apr 2023 03:31:45 +0000
ROA not before:           Mon 10 Apr 2023 03:26:45 +0000
ROA not after:            Mon 08 Apr 2024 03:31:45 +0000
asID:                     201751
IP address blocks:        2a12:dd47:83a0::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:95:2d:6e:b0:6a:0e:10:e2:bf:20:1c:fc:49:e3:ba:f4:2f:db:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:45 2023 GMT
            Not After : Apr  8 03:31:45 2024 GMT
        Subject: CN=3D1EF4A067BD76283A98EFB7E1D00FC90C42A347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:af:7c:ff:7f:e5:2e:fa:8b:79:39:0e:af:8a:
                    07:87:76:53:c2:4d:f6:dd:90:f9:78:70:06:74:78:
                    a0:92:05:fb:8e:21:d5:30:5d:a4:97:f7:53:4d:41:
                    84:68:2b:4c:41:5f:46:f1:73:ba:bb:13:0c:03:bd:
                    e6:87:99:d9:d8:44:b3:fa:9e:c2:94:32:29:d1:3d:
                    49:e6:60:96:ad:ba:63:23:42:cd:b7:12:3d:64:e6:
                    f8:2a:df:9d:d3:52:dd:4b:04:9a:a8:a9:41:b2:91:
                    5c:a4:bf:86:02:fb:51:8e:fe:8f:1b:d4:23:1e:bd:
                    e7:da:b7:c2:e5:86:7b:11:05:16:4e:91:76:84:f0:
                    82:be:78:5a:9a:e8:de:c8:55:46:79:1d:1d:71:64:
                    cf:81:3b:03:fa:ae:b3:8c:9d:b5:10:80:44:6c:2a:
                    ce:7d:e7:56:a6:ae:c9:cc:ce:2c:e8:8c:b9:3a:df:
                    ad:ba:4e:19:10:cd:d8:2b:a5:9c:5f:d1:10:6b:b7:
                    68:b6:92:84:ef:a5:61:ef:ab:a9:a3:7c:cb:e0:25:
                    d5:f2:1a:7f:88:6e:9f:96:22:1d:b7:50:54:a8:bb:
                    a2:58:49:60:9e:7f:ec:67:2b:3d:30:07:da:5b:c0:
                    ef:71:ce:6f:e5:b1:1f:dc:3d:a6:da:12:bc:80:b6:
                    c5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1E:F4:A0:67:BD:76:28:3A:98:EF:B7:E1:D0:0F:C9:0C:42:A3:47
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS201751.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:83a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         9a:0f:cb:48:8a:6b:b6:64:30:e2:c4:37:26:d0:02:62:95:f6:
         e6:c6:cc:ea:28:37:76:91:af:0d:d3:2a:9b:66:6d:7e:69:91:
         80:9d:9d:e7:97:f8:27:a1:3b:0f:33:2f:3a:b5:f6:fd:33:ec:
         cb:1a:9b:ae:17:ee:d3:67:e5:07:c9:a5:24:f3:b2:27:5c:3a:
         ee:fb:6e:f0:59:43:57:8b:79:cc:e3:29:16:07:75:32:95:13:
         5b:dc:86:b4:54:e3:89:45:83:38:1c:4f:39:97:02:12:8e:40:
         f3:14:00:5f:5f:15:9a:96:ef:eb:da:13:e5:5d:a3:c9:2a:f7:
         ef:26:e5:bc:1e:28:4a:9c:98:cf:7e:cd:e4:88:0b:55:30:cc:
         2b:79:66:19:d9:b2:91:9b:36:e9:99:42:36:0d:78:01:92:85:
         9d:c3:0a:bc:ce:6d:bc:28:75:be:0b:bd:af:28:32:2d:e3:db:
         8f:61:71:28:02:7d:1a:3b:f1:9b:b5:70:8f:b5:00:c8:88:30:
         24:e0:58:3d:8d:0b:a8:b3:51:b3:42:78:f6:b2:e7:ce:c9:a9:
         00:cd:2f:eb:19:0e:9f:63:bd:57:34:28:f5:69:ef:75:82:05:
         f3:54:4e:a5:1f:a8:44:7a:dd:de:44:19:7b:33:d5:d5:28:9f:
         f9:bc:f4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----