Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Mlgt/1/326131323a646434373a336630303a3a2f34302d3430203d3e20323034353038.roa
File:                     326131323a646434373a336630303a3a2f34302d3430203d3e20323034353038.roa (raw, json)
Hash identifier:          ljJWEzvWTPZMPIlJxivkh1dzJ2RQHq5n8Xy3q6S0TBw=
Subject key identifier:   FC:50:BB:B0:8A:E1:A3:66:76:49:DE:E4:30:25:62:10:13:F9:4F:B2
Certificate issuer:       /CN=96495E25A01953ACA1A500125DE32FD2CAD7B989
Certificate serial:       0B61831141D78BE5991BBA6F37EF88DEF3B1FFCD
Authority key identifier: 96:49:5E:25:A0:19:53:AC:A1:A5:00:12:5D:E3:2F:D2:CA:D7:B9:89
Authority info access:    rsync://rpki.co/repo/AS945/1/96495E25A01953ACA1A500125DE32FD2CAD7B989.cer
Subject info access:      rsync://rpki.co/repo/Mlgt/1/326131323a646434373a336630303a3a2f34302d3430203d3e20323034353038.roa
Signing time:             Wed 19 Apr 2023 16:21:19 +0000
ROA not before:           Wed 19 Apr 2023 16:16:19 +0000
ROA not after:            Wed 17 Apr 2024 16:21:19 +0000
asID:                     204508
IP address blocks:        2a12:dd47:3f00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:61:83:11:41:d7:8b:e5:99:1b:ba:6f:37:ef:88:de:f3:b1:ff:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96495E25A01953ACA1A500125DE32FD2CAD7B989
        Validity
            Not Before: Apr 19 16:16:19 2023 GMT
            Not After : Apr 17 16:21:19 2024 GMT
        Subject: CN=FC50BBB08AE1A3667649DEE43025621013F94FB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:77:df:69:e4:45:e9:6e:66:9a:ed:09:78:
                    99:29:f4:41:c2:9a:ea:9b:64:ad:42:37:1c:84:8f:
                    96:22:40:81:b3:1f:b6:d0:98:9e:a9:c0:d7:c2:d0:
                    33:22:a0:8b:4f:49:95:05:b0:5c:aa:f2:cd:72:56:
                    a5:96:c0:77:52:41:0b:d5:0b:40:61:9c:5d:7a:7f:
                    e7:93:f0:83:8d:ab:20:df:50:e0:9a:71:ba:c4:78:
                    9b:8d:91:0d:87:f1:cf:13:82:90:7c:6b:67:e3:a3:
                    2c:ca:eb:b9:3e:82:33:cc:8e:7f:d9:0d:dc:0b:71:
                    99:84:99:13:2b:33:07:a0:de:9b:3f:9f:dc:61:e0:
                    87:1f:59:ce:76:8f:ec:b1:98:a6:d5:93:09:10:4b:
                    5d:a5:48:f7:71:40:a1:83:e3:65:ce:ab:00:d3:71:
                    3b:97:2e:f7:84:cd:2a:4b:e7:9b:55:8a:79:9d:7d:
                    91:25:17:40:61:40:20:7f:8e:3d:0f:6b:0d:e4:0e:
                    74:a1:ec:9a:97:97:42:78:28:80:f0:49:5c:fb:9e:
                    f3:58:2a:49:fa:c5:51:77:79:de:8f:da:55:e3:83:
                    2e:54:e7:35:20:64:42:3b:07:71:34:1e:6d:05:6f:
                    e8:8d:51:74:5f:32:21:36:ff:13:ff:cc:1f:82:ff:
                    63:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:50:BB:B0:8A:E1:A3:66:76:49:DE:E4:30:25:62:10:13:F9:4F:B2
            X509v3 Authority Key Identifier:
                keyid:96:49:5E:25:A0:19:53:AC:A1:A5:00:12:5D:E3:2F:D2:CA:D7:B9:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Mlgt/1/96495E25A01953ACA1A500125DE32FD2CAD7B989.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/96495E25A01953ACA1A500125DE32FD2CAD7B989.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Mlgt/1/326131323a646434373a336630303a3a2f34302d3430203d3e20323034353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:e3:72:5e:a1:d8:bc:ad:c0:ce:d8:9f:94:f6:72:7d:1a:0c:
         2d:bc:3c:d5:95:d8:97:a0:f0:66:4f:20:38:c9:e0:1d:6b:fc:
         ed:12:16:c1:67:c1:f1:29:f8:61:7f:48:92:70:c2:d4:82:2d:
         c9:78:2b:7d:d7:53:1c:37:b8:f9:35:7c:85:84:19:44:9e:a6:
         e0:06:e7:b6:8c:01:c3:61:69:74:91:a4:98:44:6f:5f:ab:72:
         56:40:54:20:23:d7:14:99:91:0d:22:e7:1f:66:36:cb:00:8b:
         a4:1f:7d:68:41:68:a1:d0:47:1f:9e:a9:ec:32:02:05:0a:8a:
         ad:0f:b7:22:f8:aa:28:97:db:a6:70:71:b2:1e:96:e6:04:04:
         7d:1f:fc:51:20:07:2c:fd:07:41:bf:d6:25:17:49:6a:08:e4:
         73:c3:30:28:6a:1e:99:21:2f:86:b6:9f:37:84:d0:d0:56:82:
         60:ef:e4:af:e1:d6:b4:5e:92:bf:13:fe:c4:10:98:59:dc:c5:
         8d:77:a9:59:a1:bb:f0:3b:d3:37:fb:a8:55:5c:81:6c:79:1f:
         62:23:82:75:00:bd:6c:68:10:27:95:98:68:38:d6:40:42:2b:
         03:75:46:f9:5c:d5:36:b3:db:af:b4:21:6e:ca:45:5f:f1:74:
         e4:31:82:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----