Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a3130343a3a2f34382d3438203d3e20323033343533.roa
File:                     326130353a646663373a3130343a3a2f34382d3438203d3e20323033343533.roa (raw, json)
Hash identifier:          h5SPrZXIOxp5sdDFXjVh1Ujn10jpr1iSkxEQ2HNxymw=
Subject key identifier:   D1:C1:0E:45:F5:03:8E:19:9D:6C:6C:8C:16:84:56:96:D6:86:57:09
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       5FAAD5E51B72E8D52A4D8D213F0B2E151A6B77B8
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a3130343a3a2f34382d3438203d3e20323033343533.roa
Signing time:             Fri 14 Apr 2023 02:05:46 +0000
ROA not before:           Fri 14 Apr 2023 02:00:46 +0000
ROA not after:            Fri 12 Apr 2024 02:05:46 +0000
asID:                     203453
IP address blocks:        2a05:dfc7:104::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:aa:d5:e5:1b:72:e8:d5:2a:4d:8d:21:3f:0b:2e:15:1a:6b:77:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:00:46 2023 GMT
            Not After : Apr 12 02:05:46 2024 GMT
        Subject: CN=D1C10E45F5038E199D6C6C8C16845696D6865709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ca:1b:78:58:a5:43:20:9b:ad:16:f2:7e:6d:
                    b0:37:76:2f:e3:74:b0:c7:80:ba:0e:b0:b0:f5:81:
                    ca:d4:e0:fc:ca:d9:32:e1:f6:0a:36:ea:90:62:20:
                    4a:47:cc:7b:1c:dd:76:9c:0c:51:77:90:42:e1:20:
                    0f:fa:64:2a:82:43:8f:83:79:12:cd:b5:27:67:c3:
                    09:12:9b:7c:09:af:bc:a0:a7:51:f7:88:0d:ca:31:
                    1d:33:af:10:06:b8:f9:de:70:17:d2:32:6a:98:ec:
                    d2:c8:28:f8:13:4d:78:d4:b6:f8:bb:58:ac:0e:74:
                    88:d5:df:19:57:18:a6:7f:20:6f:fc:b1:bb:9c:6a:
                    08:dd:16:d1:95:8c:c2:24:c6:e6:e9:40:9f:f8:34:
                    05:a5:a5:fe:3b:80:b5:c9:95:9c:40:64:73:67:42:
                    f2:03:4c:33:91:d7:71:14:b2:a7:b8:7a:79:02:14:
                    03:05:6f:13:ce:e9:e6:28:34:62:50:5d:dc:94:fc:
                    68:0a:20:7d:0f:6d:16:e7:56:2c:d5:be:88:81:a0:
                    0b:0a:c3:73:ab:ae:96:79:48:56:be:0f:3f:a6:06:
                    3e:1b:55:85:b5:33:c6:fa:4c:97:1c:80:f0:fd:6e:
                    fe:46:21:38:69:a8:84:46:2b:2a:3c:d6:98:8b:c8:
                    35:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C1:0E:45:F5:03:8E:19:9D:6C:6C:8C:16:84:56:96:D6:86:57:09
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a3130343a3a2f34382d3438203d3e20323033343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:104::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:54:07:78:6c:64:41:05:41:b2:23:ab:a0:2d:11:45:35:c8:
         4a:e6:bc:88:b4:ff:83:95:60:58:f9:97:56:eb:06:14:53:1c:
         2c:ec:27:28:f9:9a:03:7d:15:57:ea:ca:81:91:f7:e6:77:47:
         6d:b3:d2:cb:44:c4:27:20:29:e2:50:a8:97:1a:f5:68:71:9d:
         1f:fd:be:95:70:31:e6:05:b3:20:e4:2a:d8:89:f3:de:36:ed:
         77:0e:8f:e1:09:0d:52:61:20:e6:f9:d6:fa:16:88:53:95:ec:
         93:b5:e4:4c:90:20:4c:71:6a:32:35:ea:5f:08:30:f2:d1:3d:
         bc:17:29:f9:f3:7e:e3:68:ed:7a:e7:77:32:38:6d:bc:e7:dc:
         75:82:0d:07:31:04:03:1f:ec:5a:b2:e9:f4:e9:dd:ed:ff:e8:
         12:5d:09:d2:63:0e:a8:89:4c:a0:3b:a9:ae:0e:38:0c:2b:3e:
         3c:7e:69:a0:30:5b:b4:78:01:8d:4b:00:38:06:75:30:1c:31:
         0d:48:47:6f:e2:8c:09:ed:9f:06:65:da:90:9d:f9:46:9e:bc:
         c2:2f:7c:a9:18:db:a0:15:fd:19:3b:14:4c:76:13:08:38:bd:
         59:1c:50:aa:83:29:ad:2e:65:10:75:56:76:47:e6:6a:47:bd:
         1f:6e:dd:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIUX6rV5Rty6NUqTY0hPwsuFRprd7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA0MTQwMjAwNDZaFw0yNDA0MTIwMjA1NDZaMDMxMTAvBgNV
BAMTKEQxQzEwRTQ1RjUwMzhFMTk5RDZDNkM4QzE2ODQ1Njk2RDY4NjU3MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUyht4WKVDIJutFvJ+bbA3di/j
dLDHgLoOsLD1gcrU4PzK2TLh9go26pBiIEpHzHsc3XacDFF3kELhIA/6ZCqCQ4+D
eRLNtSdnwwkSm3wJr7ygp1H3iA3KMR0zrxAGuPnecBfSMmqY7NLIKPgTTXjUtvi7
WKwOdIjV3xlXGKZ/IG/8sbucagjdFtGVjMIkxubpQJ/4NAWlpf47gLXJlZxAZHNn
QvIDTDOR13EUsqe4enkCFAMFbxPO6eYoNGJQXdyU/GgKIH0PbRbnVizVvoiBoAsK
w3OrrpZ5SFa+Dz+mBj4bVYW1M8b6TJccgPD9bv5GIThpqIRGKyo81piLyDU1AgMB
AAGjggIHMIICAzAdBgNVHQ4EFgQU0cEORfUDjhmdbGyMFoRWltaGVwkwHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wLzMyNjEzMDM1M2E2NDY2NjMzNzNhMzEzMDM0M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzMDMzMzQzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfxwEEMA0G
CSqGSIb3DQEBCwUAA4IBAQAbVAd4bGRBBUGyI6ugLRFFNchK5ryItP+DlWBY+ZdW
6wYUUxws7Cco+ZoDfRVX6sqBkffmd0dts9LLRMQnICniUKiXGvVocZ0f/b6VcDHm
BbMg5CrYifPeNu13Do/hCQ1SYSDm+db6FohTleyTteRMkCBMcWoyNepfCDDy0T28
Fyn5837jaO1653cyOG2859x1gg0HMQQDH+xasun06d3t/+gSXQnSYw6oiUygO6mu
DjgMKz48fmmgMFu0eAGNSwA4BnUwHDENSEdv4owJ7Z8GZdqQnflGnrzCL3ypGNug
Ff0ZOxRMdhMIOL1ZHFCqgymtLmUQdVZ2R+ZqR70fbt00
-----END CERTIFICATE-----