Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS62485.roa
File:                     AS62485.roa (raw, json)
Hash identifier:          cDGRsuCapRNROrYNu3n1E9yrz04oNqc6bRAwi3Q1g9E=
Subject key identifier:   3F:B1:45:2C:DC:CE:32:FD:AC:F1:94:0F:60:51:FF:30:7F:3B:D8:3B
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       5DE2A80D6B1667E958B3002CF822DF76228C89ED
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS62485.roa
Signing time:             Mon 10 Apr 2023 03:31:44 +0000
ROA not before:           Mon 10 Apr 2023 03:26:44 +0000
ROA not after:            Mon 08 Apr 2024 03:31:44 +0000
asID:                     62485
IP address blocks:        2a12:dd47:8073::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e2:a8:0d:6b:16:67:e9:58:b3:00:2c:f8:22:df:76:22:8c:89:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:44 2023 GMT
            Not After : Apr  8 03:31:44 2024 GMT
        Subject: CN=3FB1452CDCCE32FDACF1940F6051FF307F3BD83B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d8:c7:83:eb:27:73:e3:3b:a2:77:be:16:a2:
                    42:d4:83:38:aa:9c:fd:71:9a:d7:39:40:74:ac:ed:
                    db:d8:93:0c:93:e1:c9:0a:d2:96:1e:5a:a5:51:0b:
                    a0:97:a0:b6:92:47:cc:95:9f:f3:c0:30:05:64:6c:
                    89:33:e8:9c:ad:e7:d4:42:2b:0d:a3:22:3b:35:06:
                    1e:24:8f:1c:41:9e:60:a1:df:0d:f3:d3:4f:ec:e9:
                    40:4e:cc:4c:6f:02:b3:83:db:d8:6c:25:34:ba:45:
                    02:97:56:8b:56:cf:5c:c2:f8:e7:9a:12:3a:dc:69:
                    f0:78:a9:43:68:03:64:16:ea:dc:26:46:3f:06:78:
                    56:a7:e8:ab:db:2d:63:a3:9a:14:8d:78:90:86:e0:
                    62:25:62:d2:6d:e5:58:32:17:d6:90:61:b2:1a:9b:
                    29:89:14:1a:d8:c7:66:28:6f:d0:c2:02:c6:d9:00:
                    67:7f:0d:29:5c:2e:c4:bf:eb:a2:d5:16:40:b7:42:
                    8a:89:22:10:ad:56:d5:79:7d:23:80:5f:e3:8e:49:
                    5d:0b:fa:5c:90:b9:3e:f7:41:f9:e7:3c:b3:27:ce:
                    52:fb:7b:76:48:9c:9b:2f:6c:34:82:35:21:83:96:
                    e9:22:b1:dd:ed:3f:e6:2d:f6:fd:87:24:12:cb:86:
                    67:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B1:45:2C:DC:CE:32:FD:AC:F1:94:0F:60:51:FF:30:7F:3B:D8:3B
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS62485.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8073::/48

    Signature Algorithm: sha256WithRSAEncryption
         d3:4e:07:67:6c:92:0a:18:8c:8c:4c:b3:1a:0b:c7:5f:13:e6:
         e8:1b:d1:a5:ad:da:32:1c:bd:48:4d:c7:ec:a5:d4:16:77:64:
         91:ac:f0:d6:d8:1d:10:30:c5:fe:92:18:25:fe:4b:01:4a:97:
         e3:fa:35:67:53:1e:aa:00:56:00:f9:c2:96:f8:f8:7b:9b:07:
         64:e9:43:63:1a:83:b5:08:12:d4:34:4f:fe:25:0c:61:eb:3e:
         36:ad:ad:fa:ae:40:02:8c:31:4b:ef:3e:d9:56:53:4b:d2:77:
         e7:52:2b:c6:3f:4e:be:02:ca:2d:30:db:b8:6c:8c:76:fe:aa:
         9e:89:d2:cc:6e:85:0b:a1:49:ac:c9:90:6d:ee:a2:29:90:83:
         51:e9:7d:ed:1d:ac:05:84:d9:68:07:c5:53:ec:de:f6:16:7c:
         eb:a2:c4:56:ee:e6:82:ae:5d:df:81:05:cc:63:33:08:d8:91:
         f4:75:b0:ef:a1:8b:57:0f:ba:19:cc:4f:d9:6e:99:c4:8d:34:
         18:3d:34:22:40:3d:72:cb:dd:a2:38:53:1b:ef:08:8a:72:8f:
         11:4f:e4:1e:f0:49:85:8c:56:91:c0:18:26:73:95:02:29:86:
         c4:a6:f2:e7:e2:76:99:c4:54:7c:3f:7b:c1:c2:c0:3f:5b:12:
         5e:7b:1f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----