Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS204466.roa
File:                     AS204466.roa (raw, json)
Hash identifier:          tgPDUEsoTVTDXe/M1l4D7SS/jgGJW13u3MWtK3WU9q0=
Subject key identifier:   48:36:1E:F7:97:1F:40:63:6F:0C:FF:3C:E1:BC:B0:38:BB:1C:BD:ED
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       1AA7A15FCD7E410A4E9C0F6649EEADE6DE4348A3
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS204466.roa
Signing time:             Mon 10 Apr 2023 03:31:40 +0000
ROA not before:           Mon 10 Apr 2023 03:26:40 +0000
ROA not after:            Mon 08 Apr 2024 03:31:40 +0000
asID:                     204466
IP address blocks:        2a12:dd47:8040::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a7:a1:5f:cd:7e:41:0a:4e:9c:0f:66:49:ee:ad:e6:de:43:48:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:40 2023 GMT
            Not After : Apr  8 03:31:40 2024 GMT
        Subject: CN=48361EF7971F40636F0CFF3CE1BCB038BB1CBDED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3d:7c:36:bf:b3:b1:8c:8d:33:d7:80:b8:60:
                    88:8e:37:b9:4e:eb:74:63:72:48:5a:0c:7d:9e:48:
                    25:50:1f:d7:72:6e:99:5b:97:3c:c5:8f:b3:ec:6e:
                    2a:76:e0:3b:03:ed:20:c8:78:d5:07:d0:70:92:3a:
                    41:50:52:7b:d5:cd:0c:e6:41:d5:05:ab:4a:00:2c:
                    25:b5:94:c9:28:50:7a:8e:1c:f7:ef:2e:38:30:98:
                    2f:37:af:60:6b:8a:3d:81:4d:61:66:99:6f:bf:98:
                    da:ba:87:1e:26:15:48:ff:b6:87:67:3a:6e:30:bf:
                    ed:8b:72:91:ef:8b:3c:3d:4f:29:1f:f1:0c:45:c5:
                    f9:c6:e6:ac:3e:b9:92:8f:5a:98:89:7b:b1:94:84:
                    73:a3:6b:55:85:e6:7f:31:eb:cc:33:a5:d6:65:b5:
                    c5:f4:84:92:08:e4:db:2e:6a:d0:9a:2e:a3:18:a4:
                    b6:9b:7f:8d:1c:ee:6a:15:06:66:73:45:d9:5e:0d:
                    af:e8:4d:60:41:ed:10:7b:64:4d:46:df:73:17:78:
                    5c:23:cb:67:5e:e1:1d:41:06:34:8c:ff:d1:18:47:
                    d1:5c:c0:cf:bf:5b:ca:d6:a9:bf:61:02:d9:fc:be:
                    f7:27:79:7a:22:b7:42:96:59:82:95:6a:31:20:37:
                    94:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:36:1E:F7:97:1F:40:63:6F:0C:FF:3C:E1:BC:B0:38:BB:1C:BD:ED
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS204466.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8040::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:1b:21:04:84:e6:da:79:b5:4c:c2:a4:74:6c:6c:e6:de:25:
         f9:bc:47:b4:f8:96:56:e2:19:04:35:d5:60:a7:5c:9c:39:33:
         3e:6b:51:35:cb:66:66:22:72:4f:48:93:b1:55:9b:ec:63:8d:
         4c:96:3d:23:1f:bf:b8:bc:57:ce:94:a4:e7:3f:43:27:05:1d:
         d0:a3:ca:e4:54:b9:a4:fc:37:f9:ce:92:c9:26:d1:4e:24:e1:
         d9:5a:61:96:92:cc:32:ef:30:32:d6:65:a6:d7:0d:c8:38:08:
         f6:99:0e:5a:d2:70:ee:f7:e8:b6:ee:df:4b:ae:49:10:d8:cc:
         18:89:37:e3:9a:24:2c:63:6c:dd:6a:88:b1:2c:df:3f:49:71:
         a0:93:3f:fc:45:d7:bd:1e:92:b9:24:93:59:a0:a6:45:09:a7:
         3a:ef:fe:73:78:4b:84:f8:e2:67:d3:c0:49:43:0d:ef:fd:84:
         1a:cb:37:67:f5:5f:fd:3a:98:0a:c2:2d:84:b5:40:4a:e2:98:
         bc:df:ea:cc:b0:09:9f:e5:54:c1:46:a2:0a:9b:5e:95:20:91:
         ba:2f:d5:eb:98:7f:a4:be:a0:8e:5a:29:21:d0:7e:7d:e7:56:
         73:ea:6e:60:2b:09:87:c0:4c:1a:6d:7a:1f:a4:50:05:12:c7:
         53:75:aa:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----