Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS205980.roa
File:                     AS205980.roa (raw, json)
Hash identifier:          sMqdYxLPZ7NOClkwWTErwV6mfbDFv/Vx9BRy+K0oRhY=
Subject key identifier:   56:71:2B:5C:50:62:9A:F9:FE:BD:32:C6:7A:7B:30:28:22:08:80:E5
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       2191B835B47D5D0D28B4AB42DB269A2C4372183D
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS205980.roa
Signing time:             Mon 10 Apr 2023 03:31:31 +0000
ROA not before:           Mon 10 Apr 2023 03:26:31 +0000
ROA not after:            Mon 08 Apr 2024 03:31:31 +0000
asID:                     205980
IP address blocks:        2a12:dd47:80c0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:91:b8:35:b4:7d:5d:0d:28:b4:ab:42:db:26:9a:2c:43:72:18:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:31 2023 GMT
            Not After : Apr  8 03:31:31 2024 GMT
        Subject: CN=56712B5C50629AF9FEBD32C67A7B3028220880E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:53:22:9c:ca:6e:5c:7a:a5:94:97:94:03:5a:
                    15:1c:3b:3b:3d:f2:e5:65:09:c6:03:5f:c4:eb:7a:
                    9c:c5:af:bf:18:3c:1c:f0:2e:90:3a:21:33:5c:ec:
                    01:d1:77:c0:d9:7e:84:8c:2c:bc:1a:27:cc:d8:08:
                    d2:03:f7:10:38:c0:df:d3:3d:33:ba:df:0f:88:ff:
                    54:01:13:6a:02:48:8a:6d:f6:1e:97:ee:a5:ee:a2:
                    f0:8c:37:a2:81:02:29:f0:b4:69:cf:bc:57:66:b4:
                    ad:34:9b:8d:f8:67:3e:4f:80:06:0c:dc:78:c5:3a:
                    9b:7f:76:f0:a3:70:73:8d:fc:80:09:ab:c3:8e:59:
                    ad:8c:74:d9:ca:81:63:d5:12:4e:cb:2d:d4:9d:53:
                    d2:27:40:6b:10:f1:c7:2a:ef:80:24:55:0e:dd:8f:
                    d7:b6:b7:32:c0:69:fd:95:c2:26:27:00:5d:99:0b:
                    fd:cf:1f:c3:00:1e:d2:24:d1:14:f5:b8:50:f0:3e:
                    f5:49:a2:85:54:5b:f9:fd:96:c5:0e:6e:8b:63:cc:
                    89:43:f8:d6:40:85:f8:d1:30:4f:5c:15:79:f4:2d:
                    af:1b:42:fd:67:9d:89:44:aa:15:7d:87:9b:b2:95:
                    ae:ab:f0:e1:8d:49:10:71:b3:26:08:2a:85:8a:77:
                    28:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:71:2B:5C:50:62:9A:F9:FE:BD:32:C6:7A:7B:30:28:22:08:80:E5
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS205980.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         c7:79:85:e1:8a:f3:99:b0:42:b0:b2:69:d3:d5:1b:b0:bf:c6:
         4d:00:f3:44:02:64:9e:33:80:05:4f:04:77:d9:1d:cb:dc:a7:
         2e:ae:f0:01:9b:a4:4b:26:be:36:81:be:1a:fe:cf:5e:41:87:
         d7:91:17:f0:ad:27:a3:72:ff:e2:1e:c7:c3:90:d1:66:02:99:
         6e:ee:66:ab:87:b9:3a:78:4f:4c:58:de:cf:9f:e4:94:58:f3:
         ae:49:03:3e:7e:35:b3:16:88:24:ff:f2:29:ea:03:2c:c0:cf:
         b8:fc:f7:a8:86:57:3e:13:98:51:c0:8b:4f:7f:bc:a9:a8:71:
         23:96:3b:86:52:77:69:44:f5:a4:b3:29:ae:36:66:d0:40:4b:
         8c:05:30:bb:87:6a:bd:aa:78:4b:65:6d:b6:db:f6:4b:1a:5e:
         06:53:2d:91:2a:6a:80:03:72:14:61:58:08:81:0b:4f:1c:2e:
         5f:bd:f0:22:56:06:ea:06:e4:4a:ed:07:da:d9:af:e1:c1:80:
         03:74:d9:78:1a:00:74:85:12:5e:ea:a7:01:64:5b:cd:55:48:
         1e:30:37:06:ef:2b:52:cc:79:67:c6:74:8a:6d:42:df:0d:5e:
         3a:5a:f9:f3:bf:57:45:47:22:1a:6b:bc:ff:6b:4e:a5:79:78:
         1e:b7:f0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----