Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS51129.roa
File:                     AS51129.roa (raw, json)
Hash identifier:          RF0W2R4pOoOY8AYsvdSv1m9Xrzzhoc5NLXnFJR2i8g8=
Subject key identifier:   4B:AC:59:E5:7C:98:DE:AD:D6:F3:A9:76:AC:A0:5D:09:42:83:12:0D
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       70460E7B754D500FE5ACF48B981165E28C6CAEC5
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS51129.roa
Signing time:             Mon 10 Apr 2023 03:31:35 +0000
ROA not before:           Mon 10 Apr 2023 03:26:35 +0000
ROA not after:            Mon 08 Apr 2024 03:31:35 +0000
asID:                     51129
IP address blocks:        2a12:dd47:8e10::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:46:0e:7b:75:4d:50:0f:e5:ac:f4:8b:98:11:65:e2:8c:6c:ae:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:35 2023 GMT
            Not After : Apr  8 03:31:35 2024 GMT
        Subject: CN=4BAC59E57C98DEADD6F3A976ACA05D094283120D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a8:0d:45:5f:8e:46:13:92:7f:2c:57:82:ca:
                    30:da:cf:15:3a:83:f9:73:71:d8:6a:8d:83:f3:79:
                    e5:0c:c2:1d:0f:cb:66:ba:ac:68:65:91:18:4a:fe:
                    31:65:d5:8e:f3:96:fe:33:c9:5e:5d:07:5f:5b:4c:
                    91:04:47:e9:e3:e3:ed:11:f7:80:54:db:36:6d:c2:
                    cb:6f:c2:98:58:00:bb:86:c0:d8:3b:a1:50:dd:e8:
                    54:84:e3:f4:58:64:4a:aa:52:b0:82:d1:f7:28:de:
                    15:b7:03:ca:fc:7b:5a:7a:8b:45:61:80:52:58:a9:
                    e7:b7:ae:28:28:75:4a:04:21:f8:45:cb:1d:5f:0a:
                    5c:6e:e6:a6:c8:5f:dd:21:05:75:a2:fa:b3:39:a3:
                    63:1b:5c:01:29:03:fc:99:7a:3c:62:85:8e:13:c9:
                    c0:7a:76:1e:d3:12:4c:3e:d1:70:24:84:12:4c:3a:
                    5d:dd:cf:cf:c5:5e:ab:d6:ea:f9:c4:0c:66:78:1c:
                    ab:4f:ac:40:85:08:51:8c:98:f6:39:5b:ef:07:e7:
                    2c:7d:95:b3:16:e5:33:1c:b3:81:77:6f:94:bd:3c:
                    d6:7a:44:bf:49:34:f2:6a:cb:d8:9e:96:02:2e:f7:
                    f2:ca:09:31:a3:95:aa:a0:6b:1d:73:cb:62:93:71:
                    80:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AC:59:E5:7C:98:DE:AD:D6:F3:A9:76:AC:A0:5D:09:42:83:12:0D
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS51129.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e10::/44

    Signature Algorithm: sha256WithRSAEncryption
         c1:ef:fb:a4:7d:25:ae:b7:8e:f4:75:14:b3:60:2d:7a:cd:0b:
         17:76:26:9c:c9:45:51:26:b7:11:cc:36:fb:2c:77:2d:07:e9:
         47:06:fc:c4:ad:ab:64:c8:d2:3e:4b:df:dd:64:84:fc:4f:fc:
         e1:d4:ea:5a:5f:c5:85:a5:e8:ab:02:21:1d:72:22:52:55:95:
         cf:97:1d:3e:79:b4:f4:a1:de:35:c3:2d:b8:60:3c:22:a6:5d:
         ea:96:14:87:44:7e:f7:95:05:42:11:87:61:6b:cc:59:28:06:
         c3:06:93:84:a5:c9:ac:7d:4a:6d:d5:8c:9d:9d:b2:81:6f:b8:
         d5:46:da:82:df:43:92:87:5a:df:71:8d:f6:8d:f3:d2:19:4c:
         c2:6e:a3:22:a0:11:aa:dc:07:2a:e3:62:d7:7f:0f:24:60:39:
         f2:0a:0c:2b:b3:77:9b:d1:36:24:df:e3:a4:5d:64:c9:ac:dd:
         72:0e:78:db:84:3c:ba:30:1c:20:33:c1:2f:b0:89:5c:35:81:
         8c:41:39:3b:b9:62:2d:ea:d5:49:ed:3d:ce:2e:2e:0c:e5:47:
         ba:4d:04:85:e0:81:0a:42:b4:56:19:da:7e:d3:d8:52:1c:d7:
         73:6c:d2:42:cf:13:a9:bc:54:ba:49:8a:df:7b:82:fc:d6:7e:
         be:78:f0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----