Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS210537.roa
File:                     AS210537.roa (raw, json)
Hash identifier:          jeegs5sNH6S97FjuHiLxcd8Vcq659oBuQ+VdAF+1rl0=
Subject key identifier:   2B:F2:E9:82:6E:97:33:6F:E8:F5:C2:AF:4C:49:D9:B7:F5:0F:6B:78
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       238145D43BD5CF9153BE6D006DC969FE0DFC130C
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS210537.roa
Signing time:             Wed 17 May 2023 20:10:18 +0000
ROA not before:           Wed 17 May 2023 20:05:18 +0000
ROA not after:            Wed 15 May 2024 20:10:18 +0000
asID:                     210537
IP address blocks:        2a12:dd47:8a00::/39 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:81:45:d4:3b:d5:cf:91:53:be:6d:00:6d:c9:69:fe:0d:fc:13:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: May 17 20:05:18 2023 GMT
            Not After : May 15 20:10:18 2024 GMT
        Subject: CN=2BF2E9826E97336FE8F5C2AF4C49D9B7F50F6B78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3d:cf:da:ea:df:03:63:ed:e0:b1:e8:60:e8:
                    89:93:b0:39:b2:f0:b2:8d:7a:0d:16:d6:df:ca:36:
                    f8:71:5a:10:b0:17:ce:7d:e5:72:61:0c:e6:07:ef:
                    a3:1a:2a:08:15:fa:15:ba:8c:69:29:49:9b:67:95:
                    07:58:78:59:16:18:2f:4f:3b:0a:8f:3b:65:10:01:
                    52:81:0e:fe:a9:95:55:73:dd:97:50:5e:b8:27:8f:
                    89:02:16:ff:60:03:82:2a:39:91:ef:c0:b0:34:9c:
                    95:55:55:0a:60:2b:32:65:80:e6:ec:ca:be:49:a1:
                    39:d9:1a:e2:52:d9:bf:cd:04:fd:09:ec:fd:24:8e:
                    78:66:e8:23:69:38:49:da:c9:96:a2:36:cb:75:e7:
                    e6:a4:7e:37:95:09:a7:17:ac:9e:40:a2:57:ff:5e:
                    b9:6d:ba:c7:cb:39:5d:a0:8f:7e:f6:55:b4:0b:46:
                    04:6c:8e:fb:47:cb:2b:32:ba:00:c9:33:85:cf:cf:
                    3f:e7:ea:5b:3b:62:4b:46:c1:f4:a6:37:19:8f:12:
                    1e:7c:5b:af:bf:a8:7f:ce:05:2d:fb:35:31:78:ff:
                    26:eb:2c:6d:9e:34:97:e9:07:7b:93:44:41:d3:1c:
                    02:dd:e4:a1:c6:28:d9:40:db:56:95:b9:0b:4e:c7:
                    a5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F2:E9:82:6E:97:33:6F:E8:F5:C2:AF:4C:49:D9:B7:F5:0F:6B:78
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS210537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8a00::/39

    Signature Algorithm: sha256WithRSAEncryption
         3f:cd:63:32:8c:7d:2a:ce:65:d7:41:88:fd:ac:77:12:9e:25:
         b4:81:74:f0:a5:44:fd:9c:05:ff:ad:c7:cb:3c:fd:f6:13:4a:
         23:6e:c7:a7:25:cb:43:c6:61:3d:86:84:80:f4:82:40:c4:4f:
         9a:ae:57:50:d0:18:6a:29:cb:95:78:c6:bc:4b:01:83:18:16:
         39:85:f0:98:ac:54:20:4a:62:64:15:44:e4:46:82:36:02:72:
         7f:4e:a2:93:12:da:bd:43:0e:92:4b:48:df:45:18:6d:68:6f:
         71:ed:ad:fd:be:0a:10:e7:2a:11:ec:e5:c3:82:08:ac:e6:4e:
         cd:40:4c:8e:1f:d8:30:ec:1c:d5:45:9b:16:8a:6a:c6:27:07:
         b6:1c:fb:c5:69:0f:b3:90:af:cd:f8:ee:dd:af:64:e4:26:56:
         14:16:c5:f9:ca:7f:b6:13:09:80:3e:ae:39:5f:c1:12:ee:85:
         31:47:ea:28:10:8e:d4:77:5d:69:dd:53:7f:7c:2a:c4:cb:e8:
         cf:fb:db:dd:f2:2f:d6:0d:54:8d:42:a2:fa:0e:69:50:16:a8:
         93:0d:39:08:f2:07:7e:bf:12:93:f2:07:56:12:15:82:e9:1e:
         4f:29:40:c9:d6:89:5b:36:f5:17:8a:fc:94:4e:c4:a8:68:62:
         28:77:1e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----