Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a313330303a3a2f34302d3438203d3e20323033303632.roa
File:                     326130353a646663373a313330303a3a2f34302d3438203d3e20323033303632.roa (raw, json)
Hash identifier:          ml6cLk2yl+cN/UvR/JB2DHzfyW7C8DoyRXSf9XN5M7s=
Subject key identifier:   2C:9E:83:34:E1:7E:01:17:98:86:76:3C:EF:F8:94:88:93:DB:88:1C
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       3596FE2D11433B93A7D4A397EB4870CD40A43527
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a313330303a3a2f34302d3438203d3e20323033303632.roa
Signing time:             Fri 14 Apr 2023 01:47:44 +0000
ROA not before:           Fri 14 Apr 2023 01:42:44 +0000
ROA not after:            Fri 12 Apr 2024 01:47:44 +0000
asID:                     203062
IP address blocks:        2a05:dfc7:1300::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:96:fe:2d:11:43:3b:93:a7:d4:a3:97:eb:48:70:cd:40:a4:35:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:42:44 2023 GMT
            Not After : Apr 12 01:47:44 2024 GMT
        Subject: CN=2C9E8334E17E01179886763CEFF8948893DB881C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:29:73:48:b8:1a:f6:1b:fc:8a:b7:e1:39:e8:
                    22:22:27:e0:78:62:5b:2f:0c:00:82:b9:5c:ae:bc:
                    24:c9:b4:61:b4:46:4f:c4:d7:fe:65:c4:1a:bf:c3:
                    4d:f1:df:0b:75:86:dc:5f:fb:ee:51:82:7c:34:5c:
                    e3:a3:4a:ea:50:02:f2:ff:69:5c:c4:d8:ac:30:24:
                    39:c5:89:b5:26:94:65:8e:22:f4:71:cc:e5:5e:a5:
                    67:8f:bf:05:a4:9c:e7:05:ab:04:8d:5b:d5:7c:83:
                    af:7b:f0:43:66:e0:9d:e9:c9:fc:f9:38:d8:e5:4d:
                    9f:c5:71:4a:d7:a1:8e:e4:9c:48:a3:87:09:1a:bf:
                    18:70:fb:d2:b5:9f:69:31:d3:de:05:fd:d1:eb:86:
                    d1:43:d8:34:83:03:8a:33:b4:c7:be:72:fc:f2:d7:
                    7d:5a:20:6f:41:8c:12:6d:45:53:63:df:2e:3d:cb:
                    8b:68:40:97:f1:92:eb:47:1d:37:f4:c4:ae:82:8e:
                    13:30:04:5e:81:65:18:77:f9:32:f4:10:02:a0:92:
                    04:df:e8:9f:d1:64:39:58:a5:a0:17:a9:b7:e4:b2:
                    af:25:e5:78:0b:c1:cd:15:5b:63:aa:05:7b:3d:53:
                    d1:4e:48:db:2d:d1:15:fb:ee:c1:42:df:bb:05:6a:
                    dc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9E:83:34:E1:7E:01:17:98:86:76:3C:EF:F8:94:88:93:DB:88:1C
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a313330303a3a2f34302d3438203d3e20323033303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         a6:1c:ca:23:b8:7b:25:0a:bc:c5:d3:d6:0c:c7:4b:95:9a:89:
         74:90:bb:94:c8:49:44:25:fd:b6:05:4a:90:90:fe:37:ab:59:
         66:cb:a8:17:27:d4:73:52:81:00:b8:39:76:4d:01:ec:f9:82:
         a2:88:19:8d:22:fc:12:a2:65:88:c3:8f:7d:b8:a5:dc:d5:5f:
         4f:e5:29:a6:89:25:28:49:cb:59:a0:02:73:83:9d:47:c3:43:
         d2:4a:94:df:f1:1c:49:80:ee:e0:d4:10:6a:bc:6c:f1:81:a7:
         f0:27:3e:68:f5:54:ef:c4:4f:4d:b9:ac:07:80:e5:e3:12:ae:
         82:df:83:d6:4b:81:2d:d4:0d:33:1d:c6:70:da:b7:b9:27:66:
         db:aa:01:7e:53:f6:70:8a:51:52:8f:6f:85:20:67:07:9e:90:
         c5:eb:fe:26:21:cf:55:87:66:56:2a:5b:c4:e7:ec:61:61:56:
         39:b6:a0:7b:a5:5a:4b:39:2e:e3:5f:f6:93:35:c1:fa:db:87:
         71:b1:e7:87:e1:66:ac:c1:4b:dd:60:2d:2e:73:09:58:c0:35:
         a5:49:2c:f0:33:16:19:6e:84:80:f2:7b:41:a9:25:8f:c8:d0:
         6b:13:55:ab:f6:e2:27:cf:fe:ff:32:f6:54:7a:f5:1e:b6:4e:
         df:2c:09:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----