Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a3130303a3a2f34332d3438203d3e20323030383937.roa
File:                     326130353a646663373a3130303a3a2f34332d3438203d3e20323030383937.roa (raw, json)
Hash identifier:          qc7AtgCa5BnRgd1q45ErnR/fy/G17qc13O6lIjzriTI=
Subject key identifier:   BE:75:43:1D:BC:B3:73:F6:8F:B5:C4:74:FC:A3:AA:BA:DC:C2:BF:2A
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       413325C418376728C0EA307C3DB78F4F6778AF47
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a3130303a3a2f34332d3438203d3e20323030383937.roa
Signing time:             Fri 14 Apr 2023 01:42:59 +0000
ROA not before:           Fri 14 Apr 2023 01:37:59 +0000
ROA not after:            Fri 12 Apr 2024 01:42:59 +0000
asID:                     200897
IP address blocks:        2a05:dfc7:100::/43 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:33:25:c4:18:37:67:28:c0:ea:30:7c:3d:b7:8f:4f:67:78:af:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:37:59 2023 GMT
            Not After : Apr 12 01:42:59 2024 GMT
        Subject: CN=BE75431DBCB373F68FB5C474FCA3AABADCC2BF2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:74:8c:4e:9c:7e:d8:8c:0f:a2:c9:12:1a:3d:
                    9f:d1:77:29:a6:68:21:2d:55:73:15:e6:24:22:07:
                    53:1c:11:f7:fb:be:f1:0f:d5:f7:f2:f3:7c:a0:f6:
                    93:cd:b4:ce:26:a6:4d:59:cf:15:db:ae:e2:e3:a3:
                    28:70:32:fa:64:5b:98:59:db:25:6d:c7:8e:e2:18:
                    23:a2:4f:34:b8:b3:a0:13:74:5e:f9:91:83:ce:d9:
                    d8:22:d7:ea:80:6f:dc:b5:44:01:b7:59:33:b8:7f:
                    f0:d4:f6:76:d2:2f:56:53:6e:2d:74:79:ae:b5:c2:
                    98:8b:2a:2f:9c:03:f8:81:e9:92:f3:5f:d8:8c:5b:
                    5d:a8:5a:42:81:2d:02:38:20:5e:70:c6:67:3d:e0:
                    0b:52:b8:37:a1:54:04:93:8d:df:ac:7b:97:e4:27:
                    f9:b3:0d:2a:6b:5e:5e:ff:9b:ad:11:8a:b7:6d:e5:
                    df:5d:cc:49:d7:43:c0:a8:60:b7:20:d3:6e:91:f7:
                    0d:b5:bb:d5:8f:43:d6:6a:73:f0:66:64:6f:94:40:
                    b0:d2:d1:ed:7f:ee:4b:f5:47:79:c3:c6:68:06:60:
                    00:6d:72:4c:5a:61:62:4e:7c:28:5a:10:5c:05:cb:
                    22:d3:3e:ba:ef:dd:1b:80:72:e3:a4:a4:7f:3d:fa:
                    35:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:75:43:1D:BC:B3:73:F6:8F:B5:C4:74:FC:A3:AA:BA:DC:C2:BF:2A
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a3130303a3a2f34332d3438203d3e20323030383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:100::/43

    Signature Algorithm: sha256WithRSAEncryption
         4e:fa:ca:7e:1f:68:61:e7:2c:f8:71:ac:2b:f5:73:91:33:53:
         ea:dd:44:97:61:f3:a4:7a:55:0d:87:32:8e:ae:f1:32:28:8d:
         c8:4b:71:87:1a:aa:b9:8f:9b:1e:ec:59:7d:80:3c:ea:f1:b3:
         01:b8:04:61:3c:1e:76:bd:3d:f3:2f:54:a4:0a:cc:13:9c:13:
         d9:1c:9b:aa:ab:d5:a1:e1:16:2e:c9:7c:28:b3:c7:e2:01:fb:
         4d:60:07:83:03:2c:d8:59:ff:97:1c:2e:70:52:a3:1c:b5:89:
         38:d6:7e:63:bf:e6:bc:3d:0a:f6:73:6a:0d:e0:5d:b1:36:89:
         71:40:18:11:6d:c2:87:0a:65:86:87:8c:42:b8:2e:64:a1:0a:
         32:5f:e2:fb:f9:e2:80:8b:a5:b4:c4:8b:6c:30:07:9d:dd:0e:
         ff:e1:92:4c:0c:51:95:07:6c:f5:8c:15:54:d6:5f:6b:87:cb:
         d3:3b:2c:64:46:b1:42:c7:3f:f0:3d:a2:70:ec:45:ce:ef:01:
         3d:67:42:13:59:2b:83:ac:f8:00:e3:50:77:4e:05:0e:79:6b:
         8b:37:8b:35:92:fb:1c:b7:76:d7:9e:0b:c7:60:cb:e5:8b:8f:
         44:e9:54:5c:41:32:d9:2e:21:a1:60:03:dd:93:47:89:ab:ee:
         0e:50:22:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----