Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS208548.roa
File:                     AS208548.roa (raw, json)
Hash identifier:          jJb0DhzD3Y6CBKxzFr8U6jmxl5Ki6ocILxuwBAowY/w=
Subject key identifier:   DA:45:E5:43:C8:10:FE:E3:A3:64:FE:CF:E6:FE:EF:F5:58:90:35:B7
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       5B5436E42F1A86AFEFDE1EE2DFCD8EA41FEB84F0
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS208548.roa
Signing time:             Mon 10 Apr 2023 03:36:02 +0000
ROA not before:           Mon 10 Apr 2023 03:31:02 +0000
ROA not after:            Mon 08 Apr 2024 03:36:02 +0000
asID:                     208548
IP address blocks:        2a12:dd47:84fd::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:54:36:e4:2f:1a:86:af:ef:de:1e:e2:df:cd:8e:a4:1f:eb:84:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:31:02 2023 GMT
            Not After : Apr  8 03:36:02 2024 GMT
        Subject: CN=DA45E543C810FEE3A364FECFE6FEEFF5589035B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7c:6f:ee:aa:bb:74:6f:45:3b:68:65:46:cf:
                    3e:ab:b7:a8:ba:45:ac:42:f2:af:b4:71:79:20:a0:
                    14:a2:3a:f9:45:6d:ba:dc:b0:98:ae:25:cf:d7:19:
                    58:55:ac:a1:38:2a:dc:8f:26:36:2d:72:63:21:e6:
                    a9:3d:9c:d8:1f:6b:cc:27:a5:4d:bf:5e:1d:f8:79:
                    f9:e9:1f:45:48:e9:9f:a7:7a:ff:f7:64:21:85:24:
                    3e:7f:db:99:b3:be:80:ae:49:e6:78:d1:62:c5:37:
                    9d:56:62:ea:9c:b9:60:28:fd:50:2d:9d:f9:9a:1f:
                    04:31:05:c6:3f:4e:20:90:53:ca:59:1c:ed:d8:56:
                    2b:06:98:9a:07:6d:80:47:84:45:07:dd:02:94:f0:
                    9e:93:1b:5b:6a:82:d5:1b:ae:1b:b4:20:fa:c8:bb:
                    29:f0:55:ad:bc:60:a3:34:9a:be:ce:61:66:35:a1:
                    7a:84:21:62:cd:1b:d4:f6:89:70:a9:ce:af:ca:a1:
                    ab:d6:d2:26:8c:9a:0d:34:08:52:b9:a6:96:1c:97:
                    e2:20:ea:69:8f:48:e2:3b:0e:76:b9:f4:11:64:4b:
                    84:73:ab:e4:fd:f6:03:b5:95:7f:7e:30:ab:0b:27:
                    ec:bf:ce:35:7a:b9:f1:d4:90:b2:d9:fc:3b:24:44:
                    28:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:45:E5:43:C8:10:FE:E3:A3:64:FE:CF:E6:FE:EF:F5:58:90:35:B7
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS208548.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:84fd::/48

    Signature Algorithm: sha256WithRSAEncryption
         d1:ba:b6:c9:a1:a2:8d:69:92:bb:d7:77:df:2c:4f:d4:43:be:
         db:3d:6c:15:01:96:5d:98:18:41:2e:12:07:98:30:53:54:5e:
         45:98:b1:50:49:a2:99:2b:d2:6e:4e:ff:45:e1:0b:1f:0f:d3:
         36:bd:b1:a6:54:12:a5:02:cb:e1:fa:9d:42:30:93:85:21:9c:
         b5:c8:dd:c8:ed:fa:f5:4a:d9:6c:e2:9c:1e:ec:23:48:cb:c2:
         e4:da:08:df:eb:24:d7:a7:d4:5a:1a:d0:d1:0a:70:fe:7b:95:
         79:c1:54:24:1a:73:de:e1:d7:21:8a:1c:b0:cd:1a:68:b0:07:
         b7:01:91:f1:ff:3f:40:a6:b5:ad:08:50:1b:2e:ec:87:c7:f0:
         89:44:1a:96:14:f8:ad:d9:c4:7b:74:98:78:21:1b:ba:cd:3e:
         0f:66:85:ed:b3:45:85:3a:5a:99:68:97:6f:13:78:73:bb:f1:
         31:66:cf:f7:76:53:48:8d:a9:cb:aa:af:52:71:93:d4:57:d9:
         cf:f4:7d:0f:cc:7b:84:80:45:2a:bd:81:f2:ad:4b:a7:b7:4e:
         8d:48:40:98:c9:b7:ee:b0:a6:a4:df:d4:1f:9f:ac:de:22:38:
         0b:13:70:e9:05:83:90:2f:0f:de:4b:65:bc:ec:33:00:2c:9d:
         07:d0:bc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----