Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS210912.roa
File:                     AS210912.roa (raw, json)
Hash identifier:          93v09DhqeXn2X/K6ruZuC2nF0KSgyFtEberKc7NIOck=
Subject key identifier:   A5:97:C3:37:28:1B:AA:9D:0C:62:E6:2C:85:AF:04:2B:00:08:39:20
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       5077258862B236C729234978DC93029EBE73D257
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS210912.roa
Signing time:             Mon 10 Apr 2023 03:31:40 +0000
ROA not before:           Mon 10 Apr 2023 03:26:40 +0000
ROA not after:            Mon 08 Apr 2024 03:31:40 +0000
asID:                     210912
IP address blocks:        2a12:dd47:8e60::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:77:25:88:62:b2:36:c7:29:23:49:78:dc:93:02:9e:be:73:d2:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:40 2023 GMT
            Not After : Apr  8 03:31:40 2024 GMT
        Subject: CN=A597C337281BAA9D0C62E62C85AF042B00083920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:95:24:f9:2c:85:93:8c:70:32:b2:a1:1a:90:
                    99:81:06:35:c9:90:bc:96:d4:00:9c:b9:47:f9:79:
                    82:f3:b2:f0:39:99:e3:9a:2f:69:1b:17:ad:88:fa:
                    6c:cf:ef:9e:c9:44:7e:56:56:f7:8e:df:af:c1:7c:
                    70:21:6a:54:d2:41:b7:8a:d9:41:4f:55:04:2f:f0:
                    ee:c9:d9:26:9d:c7:72:72:91:cc:dc:f2:38:ce:44:
                    82:73:7e:cc:8e:bd:3e:b3:ac:fb:d6:2a:ea:78:6e:
                    50:57:b4:8c:14:7c:e7:56:93:6a:7e:90:0a:c4:f4:
                    91:cf:67:60:34:be:e0:1b:82:62:a1:de:d9:2f:56:
                    8e:49:e5:7a:11:59:30:66:e3:41:9c:db:ea:19:9f:
                    f3:e7:53:d3:21:a7:cc:90:c2:43:70:aa:73:dc:3d:
                    6c:b4:f5:02:b1:f5:f0:c4:1d:03:6c:05:4c:22:9d:
                    25:5d:79:da:08:35:1c:bf:56:cd:72:a5:1a:29:b2:
                    b2:98:1b:fe:1e:42:dc:3d:06:29:8d:aa:7a:05:e1:
                    a2:4a:84:c7:83:4d:bb:41:70:06:6a:6d:0f:51:1a:
                    aa:4e:de:d1:4f:82:35:ec:e4:23:8d:b2:58:33:13:
                    f2:75:5a:50:76:01:c8:fe:8b:6b:e5:fd:23:53:81:
                    56:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:97:C3:37:28:1B:AA:9D:0C:62:E6:2C:85:AF:04:2B:00:08:39:20
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS210912.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e60::/44

    Signature Algorithm: sha256WithRSAEncryption
         57:fa:77:7f:4c:b1:0e:35:7f:39:fc:56:5b:1b:5d:f6:a6:b7:
         cc:1d:d4:cf:c4:31:16:e6:42:e7:32:d6:9b:4c:14:e8:c8:19:
         54:57:1b:1f:b2:76:2d:dc:2f:1b:90:5c:c2:85:47:bc:d8:80:
         88:a4:16:cc:7c:ca:32:9a:a2:cc:20:63:98:a2:78:11:48:32:
         69:97:f8:04:97:c8:d4:51:b6:bf:4e:c0:45:20:41:76:51:f8:
         cf:9d:b9:aa:5e:a8:45:06:3e:ac:16:32:7d:2d:3e:b7:05:a1:
         4c:64:53:07:e1:19:7d:f3:cd:f3:b4:d5:0c:c8:42:e9:7c:98:
         ab:9d:6d:f9:27:38:5d:0c:0c:98:c4:17:37:9e:bb:18:6b:70:
         19:75:39:f3:57:35:a6:53:2f:d9:73:2c:cc:6f:3f:3a:fc:ef:
         c8:44:57:a2:45:13:12:fb:e6:5b:9d:51:94:85:02:e8:44:82:
         7b:f8:41:7c:8d:bd:bd:62:30:5c:d4:ad:09:b9:9c:21:28:58:
         4e:d6:e6:30:0b:0e:9a:92:98:c0:e1:94:25:b6:ed:dc:16:7b:
         b8:45:13:d2:ba:ed:b6:67:6c:20:de:aa:b3:db:30:b5:f0:08:
         14:fb:25:1c:3a:c2:bf:b0:ba:a8:6f:aa:9d:99:c7:a7:74:ce:
         f9:c6:06:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----