Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS56328.roa
File:                     AS56328.roa (raw, json)
Hash identifier:          cPlQwiWcnK2vt+eaWlPzXPuRdxAs0n46eQdOH/qmQvI=
Subject key identifier:   E0:3B:78:37:B0:CC:4E:79:A8:CF:BA:A1:8D:F1:37:F2:11:70:81:67
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       2CB89D04A12C3856FD47C040BBB4BAAD2B872B8A
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS56328.roa
Signing time:             Mon 10 Apr 2023 03:31:51 +0000
ROA not before:           Mon 10 Apr 2023 03:26:51 +0000
ROA not after:            Mon 08 Apr 2024 03:31:51 +0000
asID:                     56328
IP address blocks:        2a12:dd47:8c00::/39 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b8:9d:04:a1:2c:38:56:fd:47:c0:40:bb:b4:ba:ad:2b:87:2b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:51 2023 GMT
            Not After : Apr  8 03:31:51 2024 GMT
        Subject: CN=E03B7837B0CC4E79A8CFBAA18DF137F211708167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b1:4b:de:3d:c8:04:65:81:b6:15:5c:44:44:
                    92:19:ee:0e:7c:28:ca:02:86:ef:00:ff:d6:55:a7:
                    6d:c2:0c:56:3e:53:dd:10:d1:cd:1c:ce:07:74:d4:
                    f1:e6:df:e5:3f:db:16:d3:16:ed:c9:84:1a:a1:82:
                    5f:47:32:b8:5a:f3:7f:bd:31:35:07:4c:a5:16:e0:
                    6d:c5:d9:3e:f5:49:e5:a2:0f:73:3d:43:34:9f:08:
                    4d:74:c8:60:1a:45:a4:7b:c5:2c:8a:d2:89:b3:de:
                    fe:6d:9a:21:91:fa:02:1a:66:72:f6:66:bc:98:53:
                    66:fd:e8:f0:02:a5:78:bd:69:37:67:50:87:99:49:
                    4e:93:b4:56:fd:55:e6:f7:2a:02:53:be:e2:59:a6:
                    13:c8:14:88:f8:eb:a5:8b:cf:07:a5:a5:63:3d:79:
                    59:cd:8c:16:56:5c:55:74:a9:02:15:5c:c3:cb:15:
                    d8:dd:f6:dc:31:75:00:c7:d3:41:7e:77:b9:5c:ec:
                    55:90:78:3e:db:91:0d:90:27:5d:34:21:cb:00:54:
                    71:73:3d:b9:9a:d3:0f:7f:05:42:ce:a8:4a:f5:35:
                    46:99:9a:8a:0b:1f:94:96:8a:5f:e5:f1:76:2e:83:
                    89:d4:1c:b1:4c:d6:30:72:ce:2b:8b:13:cc:d1:da:
                    c4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3B:78:37:B0:CC:4E:79:A8:CF:BA:A1:8D:F1:37:F2:11:70:81:67
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS56328.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8c00::/39

    Signature Algorithm: sha256WithRSAEncryption
         24:76:d9:9e:5c:3e:10:05:5b:0a:f2:d6:30:4e:b0:00:95:66:
         44:d7:67:de:8c:cc:19:4d:e3:05:04:b4:f0:6d:97:61:1e:81:
         b4:f8:4e:25:43:76:10:e8:a7:77:79:16:3e:e6:db:81:d1:47:
         2e:30:6f:e6:b1:bf:ac:88:96:12:fa:62:15:49:ad:17:f2:3e:
         bf:14:37:78:a4:31:c4:c8:2b:6f:1a:1f:3f:3c:dc:98:35:5c:
         97:31:36:53:f2:b3:0e:28:57:7d:f7:ac:c8:18:8f:d4:3c:70:
         e9:0f:28:54:50:05:ea:f5:13:ec:63:31:dd:95:41:9e:45:35:
         fc:a9:1c:39:66:a0:12:6e:86:1d:ed:68:05:d3:cc:da:12:2b:
         7b:c2:1e:ed:09:c2:36:78:b7:32:c6:b5:2c:6b:af:cc:2b:bc:
         68:4d:76:ae:fb:42:6c:7a:de:91:a7:70:d8:01:8f:10:a6:22:
         9b:02:c6:4a:d4:79:2a:50:e3:d2:ff:04:18:fb:00:1a:f7:22:
         05:5c:8d:a8:95:4b:c8:e7:71:60:c0:d8:78:3c:de:ef:e7:1e:
         67:b8:51:9d:90:cd:c1:7c:6f:84:b8:0e:94:42:45:6c:db:87:
         24:c6:6c:d1:81:15:91:e5:d5:f1:ec:11:5f:24:ad:a0:a1:84:
         98:31:c0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----