Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a313030303a3a2f34302d3438203d3e20323035353331.roa
File:                     326130353a646663373a313030303a3a2f34302d3438203d3e20323035353331.roa (raw, json)
Hash identifier:          5RH8080NRn+woxtL89t0+Xn201h6U2y8WxlFrSr9W8U=
Subject key identifier:   4A:10:48:52:B6:A0:7B:AC:E8:D2:47:D3:1C:5E:5E:B9:41:30:CD:F0
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       4D6CEBED550AABBD0110F2053071B71CC7A2B575
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a313030303a3a2f34302d3438203d3e20323035353331.roa
Signing time:             Fri 14 Apr 2023 01:51:53 +0000
ROA not before:           Fri 14 Apr 2023 01:46:53 +0000
ROA not after:            Fri 12 Apr 2024 01:51:53 +0000
asID:                     205531
IP address blocks:        2a05:dfc7:1000::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6c:eb:ed:55:0a:ab:bd:01:10:f2:05:30:71:b7:1c:c7:a2:b5:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:46:53 2023 GMT
            Not After : Apr 12 01:51:53 2024 GMT
        Subject: CN=4A104852B6A07BACE8D247D31C5E5EB94130CDF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:52:9a:46:c0:62:b0:3a:54:79:8b:d3:79:d7:
                    19:c5:83:5b:13:a3:82:84:35:c4:51:8b:2d:ee:21:
                    b3:d9:4e:33:da:e7:1b:99:fe:ac:b2:a4:93:dc:f6:
                    67:55:1f:8d:ae:4b:bc:4b:df:73:1e:02:d8:d8:c8:
                    67:50:b9:46:fc:d5:90:8a:6f:82:78:98:8c:79:a9:
                    a5:78:6f:f0:1c:4e:1c:81:37:43:55:da:09:6d:d8:
                    7d:fa:d3:5d:7d:19:bf:d7:d2:38:be:d0:61:5a:74:
                    fa:db:df:22:bd:98:71:68:86:16:da:91:fd:d3:af:
                    12:17:32:ca:4e:79:0b:ca:f2:71:60:a7:41:b3:64:
                    7f:d0:cc:fe:6e:bd:eb:2f:5b:c3:ac:d2:80:4e:b5:
                    0c:25:3a:4e:ab:77:3e:a1:80:60:af:91:c5:aa:5f:
                    fd:09:1e:44:1c:01:77:c4:9e:2c:4f:50:f8:9f:ff:
                    fc:9f:2b:48:87:91:6e:75:a2:5a:e6:d9:01:f7:40:
                    96:1f:88:e6:c7:e7:4e:b6:cb:00:c7:c2:5e:43:9e:
                    ab:47:13:5d:16:27:a2:4f:8f:07:a2:eb:f9:3d:96:
                    fb:41:57:63:a7:33:d7:2e:6c:8e:34:95:52:dd:29:
                    25:3c:45:2e:d6:ba:c5:f7:e6:5a:a9:cc:67:1c:51:
                    ab:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:10:48:52:B6:A0:7B:AC:E8:D2:47:D3:1C:5E:5E:B9:41:30:CD:F0
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a313030303a3a2f34302d3438203d3e20323035353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:6a:40:3d:c7:fc:a1:98:cd:49:7d:fe:f8:39:f6:bd:d9:83:
         4d:79:a4:03:f3:c1:6e:8f:1a:dc:2d:68:b4:04:61:73:31:6c:
         14:2f:c2:33:69:92:ae:de:70:97:e6:06:d0:9b:2f:a3:3b:ca:
         fc:ad:8f:4b:a8:8a:e9:86:37:4a:67:64:e1:d0:c1:90:48:27:
         22:59:6a:ea:2c:29:72:98:cb:c1:28:74:f1:78:e2:11:2c:d9:
         39:43:4d:26:a5:c5:84:01:e3:7d:cf:10:33:4e:f6:a0:30:ed:
         0b:ca:e5:44:80:b4:cc:67:1d:9b:ba:b8:cd:71:fa:23:9a:42:
         03:ba:4e:06:a7:5a:7a:26:06:d2:55:b5:49:ea:13:fe:aa:0d:
         07:0f:c3:47:6e:af:fc:bb:bf:8e:3c:e5:5a:da:27:17:5f:af:
         08:6a:27:31:9c:80:55:bf:a7:10:37:61:63:93:a9:70:4f:e5:
         ad:8e:a4:7d:e2:41:05:04:65:d0:d4:9e:28:9f:f6:37:d6:6c:
         3f:14:7a:e1:cb:14:a5:ed:0e:95:1d:e9:87:7c:39:55:6d:48:
         e7:25:f8:2c:b4:5c:01:81:46:b7:c7:30:36:ab:c4:40:d1:67:
         00:f4:d5:3b:cd:e2:2e:70:14:97:19:3e:84:65:ed:8b:a1:46:
         b8:45:a0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:26 2023 by rpki-client on console-fra.rpki-client.org