Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS47924.roa
File:                     AS47924.roa (raw, json)
Hash identifier:          xjNkF9vobq2dIefAAVKgepxwmuaiHrcm0SGYc5Qz/Jc=
Subject key identifier:   78:A1:B9:0C:C8:5A:24:71:90:74:0C:E9:A8:93:08:D0:66:9A:DA:CC
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       3C6E29B63B85EBC35AFC20BD8AAAF7B5F7BB2381
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS47924.roa
Signing time:             Mon 10 Apr 2023 03:31:44 +0000
ROA not before:           Mon 10 Apr 2023 03:26:44 +0000
ROA not after:            Mon 08 Apr 2024 03:31:44 +0000
asID:                     47924
IP address blocks:        2a12:dd47:8110::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6e:29:b6:3b:85:eb:c3:5a:fc:20:bd:8a:aa:f7:b5:f7:bb:23:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:44 2023 GMT
            Not After : Apr  8 03:31:44 2024 GMT
        Subject: CN=78A1B90CC85A247190740CE9A89308D0669ADACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1a:80:99:4b:44:0a:91:c4:97:83:c3:9a:94:
                    76:e7:23:99:4b:3b:dd:e5:b0:9e:5c:68:e9:56:24:
                    ed:0d:89:c5:e3:8e:58:73:1e:b6:15:b7:bf:bd:fa:
                    73:ec:f2:d6:d5:49:6b:72:2a:e9:6d:f6:2b:f9:98:
                    e4:83:79:c0:5e:dc:c9:81:57:86:b0:2a:fd:0b:92:
                    f5:1a:a1:8a:c9:5e:98:1c:dd:ce:22:74:35:72:8f:
                    54:57:ee:e1:18:11:ac:fa:38:e6:b3:71:7d:c4:21:
                    4d:6d:da:be:21:e0:0f:bc:ce:4a:f8:65:fa:47:48:
                    0e:ed:f3:c3:0e:0e:bb:36:5f:b8:35:7c:68:b6:47:
                    5f:59:b5:9c:39:c5:f4:28:89:08:f8:0a:67:36:7a:
                    cd:e5:64:60:b1:07:af:2a:25:ca:7d:87:a6:20:37:
                    ad:73:10:d7:07:f4:e9:4b:fe:b6:a1:a6:be:08:0a:
                    66:04:30:aa:6c:2b:fe:ab:f6:60:ae:47:b5:aa:df:
                    8a:b0:ad:06:3f:7b:5c:c6:ce:ec:5c:da:72:ae:5b:
                    c2:aa:1c:9b:c4:cf:87:c8:e1:08:22:6f:cb:26:5b:
                    f7:2c:a8:43:a1:68:df:55:52:9d:37:e3:03:cd:94:
                    5a:23:5f:b4:36:9a:c5:e6:36:d8:b0:c0:1d:39:0f:
                    2b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A1:B9:0C:C8:5A:24:71:90:74:0C:E9:A8:93:08:D0:66:9A:DA:CC
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS47924.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8110::/44

    Signature Algorithm: sha256WithRSAEncryption
         60:0d:4c:a3:85:73:65:85:a5:92:e6:87:88:de:d0:47:a6:a7:
         15:c6:9b:69:78:9a:2f:25:29:b4:4a:ca:cb:56:8b:6b:a3:02:
         cd:9a:6f:c8:6f:e7:8b:f6:f8:13:c0:fd:83:c6:b2:e1:87:93:
         39:75:84:47:f3:d5:19:2a:16:35:f0:56:14:30:90:1c:e5:9e:
         e2:2d:41:11:74:9b:92:c6:a4:84:0d:fe:53:fd:ce:0a:79:d4:
         7d:3a:45:5e:79:bb:51:e2:3c:78:48:ab:61:51:7a:d9:60:7f:
         c4:1f:74:06:7c:23:39:a2:d2:af:a0:98:a3:a6:66:13:41:7e:
         c3:a4:96:d1:a7:fa:de:b1:d8:8d:69:5d:73:c7:21:00:54:f3:
         57:de:8f:47:2d:c2:d4:9b:75:28:5c:3e:42:4d:ce:a7:c7:59:
         8f:3a:d7:bf:61:ea:eb:fc:ae:40:51:8b:2d:d9:74:9f:49:84:
         53:59:f7:b1:95:d0:7e:7f:26:c1:56:22:e9:3c:88:17:3c:9f:
         b4:44:3e:7f:90:b1:dd:a5:8f:59:42:1b:af:17:36:ae:50:7c:
         af:94:23:39:5d:1c:a0:86:81:d0:ff:77:46:15:8a:c7:f7:92:
         88:e4:ec:d9:41:aa:05:00:72:25:96:81:df:5c:48:15:1b:73:
         c3:e1:cb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----