Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS57957.roa
File:                     AS57957.roa (raw, json)
Hash identifier:          ZBd1KqGJuwqFv76nGidsHlOTeolBqH8lMUR+UNrSyA0=
Subject key identifier:   F1:C1:A4:0D:60:40:D8:FC:C2:C3:E8:15:36:55:F0:2F:DA:26:C1:08
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       4C1685B2AC77D2D6B8975E630CCA10642D62BCB1
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS57957.roa
Signing time:             Mon 10 Apr 2023 03:31:47 +0000
ROA not before:           Mon 10 Apr 2023 03:26:47 +0000
ROA not after:            Mon 08 Apr 2024 03:31:47 +0000
asID:                     57957
IP address blocks:        2a12:dd47:804a::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:16:85:b2:ac:77:d2:d6:b8:97:5e:63:0c:ca:10:64:2d:62:bc:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:47 2023 GMT
            Not After : Apr  8 03:31:47 2024 GMT
        Subject: CN=F1C1A40D6040D8FCC2C3E8153655F02FDA26C108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5a:2e:78:eb:a0:d0:91:81:f0:b3:a3:24:e2:
                    61:fc:8a:74:29:d8:85:36:39:0b:21:f1:ac:10:1e:
                    81:a8:57:99:4b:9a:19:fb:67:d6:c4:c6:00:24:59:
                    de:b8:e6:e0:bc:5e:6a:c9:9c:98:86:94:0c:45:9b:
                    4b:89:a4:86:08:83:a5:11:e5:3f:29:c7:56:cb:59:
                    ef:19:10:dc:0a:d6:fd:ba:ad:bc:4f:66:e7:aa:36:
                    b1:8c:58:6b:87:44:f2:11:98:e2:5c:b6:97:48:14:
                    78:3e:a1:8e:62:f1:4a:4a:4d:c1:92:cf:57:e3:7a:
                    6a:82:c8:56:90:78:28:58:25:05:09:03:d6:23:d5:
                    87:9b:06:12:a7:f5:53:9c:37:73:2f:14:41:24:4d:
                    db:bc:89:95:02:f7:38:f9:6c:42:e3:3f:99:b2:a3:
                    bf:ce:bb:a1:1e:67:f2:4a:1a:ea:98:2b:f7:4c:a0:
                    04:9b:ef:98:9d:47:40:1a:bd:e2:e7:c5:46:5b:be:
                    c4:71:38:4e:98:ef:60:68:62:47:a9:5a:23:00:dc:
                    26:17:9c:5a:c4:70:89:2c:d1:df:b5:c3:52:fa:6c:
                    33:34:09:95:92:49:ee:f6:67:dc:16:8f:17:6b:15:
                    29:85:3f:ad:51:24:fd:32:93:1c:57:e0:1a:62:bf:
                    f0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C1:A4:0D:60:40:D8:FC:C2:C3:E8:15:36:55:F0:2F:DA:26:C1:08
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS57957.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804a::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:1b:20:3f:a0:b4:a7:28:0a:be:14:74:93:75:ca:92:ca:7b:
         ec:04:35:04:e3:4c:7c:17:63:5c:ce:a9:cd:45:ac:95:f8:86:
         65:59:e7:ee:a0:5a:e5:ec:f7:29:c5:b3:99:01:37:da:fd:0b:
         ef:d0:9d:6b:64:2a:00:c3:da:2a:92:3f:b2:5e:63:b4:c5:c7:
         73:db:f5:2e:65:23:dd:d2:d7:e0:94:2d:fa:e1:23:fa:29:1d:
         60:0d:7e:f7:c1:30:ae:d8:74:64:3d:d7:f0:ad:36:6d:32:e4:
         f5:be:9d:6c:c6:87:4e:96:60:15:b2:a3:7d:cc:c7:72:ae:fc:
         01:0d:19:81:db:e1:44:14:00:ab:a0:8d:6d:0c:71:ac:4d:58:
         62:bd:82:7d:eb:f6:7c:7e:69:c9:5a:c3:d8:43:c8:8e:4f:4a:
         6a:02:45:ec:ca:36:e1:3d:ff:48:10:de:ba:b4:58:f9:fd:0d:
         0a:f3:2f:74:84:00:0a:19:12:4b:60:01:1f:72:39:5a:ec:a2:
         66:3e:17:c6:5f:fe:d4:f6:83:df:6b:70:34:41:4b:5c:38:e6:
         32:c0:a8:bb:e6:fc:b2:db:49:ca:5e:1e:ca:3c:b5:79:ac:04:
         11:e2:48:62:a8:a6:6c:80:73:71:24:73:c9:a6:8e:65:54:c3:
         34:ef:2b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----