Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS212983.roa
File:                     AS212983.roa (raw, json)
Hash identifier:          FvfiPLIG+/E8hlVUTf3w1wLTzpM9CyjbKUjtjwoDLK0=
Subject key identifier:   1D:28:80:9B:A0:DC:A9:CA:C0:B6:36:E0:8A:C9:61:A5:3C:73:FF:5B
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       470B83CA69747B29A9E87A8ACAA643C774EF83B6
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS212983.roa
Signing time:             Mon 10 Apr 2023 03:31:37 +0000
ROA not before:           Mon 10 Apr 2023 03:26:37 +0000
ROA not after:            Mon 08 Apr 2024 03:31:37 +0000
asID:                     212983
IP address blocks:        2a12:dd47:8169::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0b:83:ca:69:74:7b:29:a9:e8:7a:8a:ca:a6:43:c7:74:ef:83:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:37 2023 GMT
            Not After : Apr  8 03:31:37 2024 GMT
        Subject: CN=1D28809BA0DCA9CAC0B636E08AC961A53C73FF5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:91:70:f4:57:81:07:a5:9b:0b:96:90:15:b8:
                    06:47:7e:ca:49:d4:5d:3c:43:29:eb:64:2f:24:e5:
                    f6:1f:09:c9:18:66:0d:59:dc:3f:fb:4c:20:12:6e:
                    69:db:8b:31:a1:a8:33:f9:36:ac:69:74:dc:8f:dd:
                    4a:0c:5e:28:ef:95:20:67:97:cb:2e:7e:46:98:13:
                    9c:6a:81:a0:f4:f6:01:65:21:0b:c1:d5:f6:61:4d:
                    09:8a:dc:70:d2:40:04:fb:9f:01:1e:51:56:04:50:
                    c6:9f:90:67:dc:fc:a0:bf:f1:f1:a7:ec:f7:32:c3:
                    35:bd:7e:78:48:9d:ec:e1:d1:05:b3:13:6e:0d:4c:
                    b1:8a:7e:20:05:af:6f:88:67:38:2c:1d:2a:08:e9:
                    9d:75:a3:72:de:8f:75:26:fa:0a:02:34:2f:55:72:
                    ea:5a:ea:e4:29:86:b3:bc:14:53:65:51:fe:8b:58:
                    73:0d:00:eb:ab:ad:e8:31:b2:4b:d2:ba:f9:b4:ed:
                    ba:4f:2f:4e:f1:67:4f:17:52:8f:ba:04:a5:dd:42:
                    53:2e:20:75:86:3a:e2:25:de:9b:97:de:47:85:e7:
                    97:7c:58:ca:92:e0:b3:2c:08:6c:4c:64:86:69:5a:
                    a2:14:7f:b1:78:74:af:d7:69:3d:63:3c:2a:9b:79:
                    43:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:28:80:9B:A0:DC:A9:CA:C0:B6:36:E0:8A:C9:61:A5:3C:73:FF:5B
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS212983.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8169::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:4e:1e:c9:47:df:f2:f7:fe:c9:c9:69:02:de:29:36:54:4e:
         8c:3b:5b:7b:3d:7e:18:84:84:77:05:10:4e:7f:06:98:8f:9a:
         b3:1b:d9:6c:19:78:c6:e8:65:f3:de:c5:b3:70:0f:c8:05:0b:
         30:40:d4:3b:9e:4a:69:0e:21:0c:82:5c:73:fa:2b:22:26:4e:
         3b:c2:a8:10:af:c6:9a:20:a1:33:c4:3d:8c:26:4d:a4:58:cd:
         bc:a6:3a:83:75:5f:57:6e:6c:c1:07:2b:87:7b:19:57:31:6a:
         ac:51:91:b9:b6:f6:0e:5e:f8:31:e8:19:97:a6:95:12:c2:8d:
         54:1c:b2:72:5a:e5:a1:00:4c:59:a0:2a:24:b5:27:ac:a6:d9:
         51:57:41:4c:cb:ab:61:32:14:79:87:c0:3c:4f:2f:fe:16:3c:
         ab:cc:8e:68:b8:1b:fd:b4:a7:ee:c2:60:a1:a2:55:42:5f:17:
         59:69:b6:db:2e:1d:ed:72:4d:60:db:5a:b7:4f:99:ee:b7:ab:
         c9:56:40:7f:52:74:e2:ca:7d:c5:9d:08:d7:0f:a3:af:07:3d:
         51:34:10:77:be:ab:20:c8:27:64:0f:34:fc:5f:60:0a:46:18:
         e3:9b:b5:47:8e:eb:79:6a:f1:20:45:f8:ce:28:c3:0d:2c:4e:
         ee:51:ee:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----