Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS50058.roa
File:                     AS50058.roa (raw, json)
Hash identifier:          5iTv3cTXFL9obxe/NG8Nci94IEWiCOUuz2Sk3HhZOss=
Subject key identifier:   D0:AF:0A:B3:7D:DC:07:11:37:A4:EE:0C:09:C7:43:63:8C:32:25:92
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       44987EC37E6E09660E979058C00793F92DD06EB4
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS50058.roa
Signing time:             Tue 17 Oct 2023 16:06:56 +0000
ROA not before:           Tue 17 Oct 2023 16:01:56 +0000
ROA not after:            Tue 15 Oct 2024 16:06:56 +0000
asID:                     50058
IP address blocks:        2a12:dd40::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:98:7e:c3:7e:6e:09:66:0e:97:90:58:c0:07:93:f9:2d:d0:6e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Oct 17 16:01:56 2023 GMT
            Not After : Oct 15 16:06:56 2024 GMT
        Subject: CN=D0AF0AB37DDC071137A4EE0C09C743638C322592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:d4:2e:bb:1c:d0:8f:b7:14:c6:35:29:c1:
                    f4:b5:5d:28:fb:35:73:78:fc:bd:aa:f8:cd:65:a6:
                    9e:0a:e9:61:5b:ec:5e:60:36:3c:df:e8:37:c6:a1:
                    17:53:47:e9:45:87:5e:bd:88:45:c1:30:a2:20:3d:
                    14:17:b0:95:24:58:6f:a2:ad:de:3a:72:e5:2f:8b:
                    bd:be:9a:e4:6e:5b:96:a5:4c:43:bf:b2:34:b6:2e:
                    bb:fa:88:c2:53:47:4d:2d:b4:82:d0:19:b9:2f:91:
                    85:24:a9:6e:04:6b:e2:28:dd:89:d4:97:1c:0f:d7:
                    c4:68:81:bf:4f:1b:31:6c:10:b9:ba:be:c1:0f:7e:
                    f5:99:20:d5:e7:51:ec:8e:04:70:d0:0a:82:28:3a:
                    fc:81:71:52:71:d8:23:7a:7b:3f:ce:1c:c9:a7:92:
                    23:d7:4a:9b:ff:4c:cf:4e:47:02:cf:0c:30:14:a6:
                    bb:92:53:9d:fe:ad:d9:31:05:3a:0a:d0:82:2a:84:
                    82:28:00:26:d1:9b:46:f3:5f:d1:ae:06:ac:dc:f8:
                    38:7c:87:00:6b:b9:8d:66:0e:4b:5f:13:ab:94:63:
                    d8:3b:bd:52:4b:3d:05:7e:52:1b:5b:5e:51:12:e7:
                    43:74:aa:27:4e:3b:ff:fb:52:03:c6:9a:bd:e5:a3:
                    ad:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AF:0A:B3:7D:DC:07:11:37:A4:EE:0C:09:C7:43:63:8C:32:25:92
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS50058.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd40::/29

    Signature Algorithm: sha256WithRSAEncryption
         3e:4b:a1:4c:2c:1b:b3:83:2d:76:46:30:70:bf:fc:62:2a:ee:
         50:a3:fd:f7:f1:44:05:e1:70:ba:5e:1a:0b:e5:a5:74:51:19:
         f2:c1:d7:76:2a:e6:a5:57:a7:0d:12:d6:aa:82:a6:ae:71:25:
         9b:ef:4f:37:82:c9:27:cf:81:f7:b7:d2:c3:e4:3c:31:d4:be:
         6a:82:8b:99:1f:74:85:49:08:fa:d5:b7:bc:af:4d:18:eb:a9:
         2a:f1:c2:c3:f9:d1:dc:a8:6e:0c:4b:ad:3d:c1:d0:1d:06:f6:
         1e:d2:f8:6f:b8:e8:4f:c2:20:d7:ec:bf:d5:c3:7a:c0:66:5f:
         04:b7:01:93:b4:9d:81:7a:4c:5f:d2:9b:31:23:18:b8:78:0d:
         65:96:74:e9:c2:f6:a0:a1:d9:e1:4c:c1:a7:41:88:3f:40:61:
         85:e8:b4:45:8b:32:88:ba:23:c5:30:27:18:90:22:04:cf:8f:
         7e:9b:6c:d3:c9:13:dc:17:b1:c7:00:2c:19:9e:1d:4a:15:73:
         bb:e2:20:66:67:a1:11:c8:02:cb:2c:a4:a3:23:56:c8:e3:2a:
         23:1d:09:51:48:54:0f:8f:83:5d:ce:56:99:0f:2a:7c:73:b2:
         7d:16:5b:f7:95:4c:f2:6b:51:fd:ae:d7:31:e3:0a:bb:24:3b:
         d2:98:0a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----