Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a3230303a3a2f34332d3433203d3e20323035343332.roa
File:                     326130353a646663373a3230303a3a2f34332d3433203d3e20323035343332.roa (raw, json)
Hash identifier:          dDoAY+CpfjZnY0pa2uyW1a2g1nmYXbN3/FWEhlCuVKo=
Subject key identifier:   5F:E1:A7:58:7D:80:2C:18:41:1A:F2:55:AB:CC:A4:41:33:65:8F:9D
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       74E637A8AFBF2B5FBEC305F86A8A57E28E2B2282
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a3230303a3a2f34332d3433203d3e20323035343332.roa
Signing time:             Fri 14 Apr 2023 01:56:57 +0000
ROA not before:           Fri 14 Apr 2023 01:51:57 +0000
ROA not after:            Fri 12 Apr 2024 01:56:57 +0000
asID:                     205432
IP address blocks:        2a05:dfc7:200::/43 maxlen: 43

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e6:37:a8:af:bf:2b:5f:be:c3:05:f8:6a:8a:57:e2:8e:2b:22:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:51:57 2023 GMT
            Not After : Apr 12 01:56:57 2024 GMT
        Subject: CN=5FE1A7587D802C18411AF255ABCCA44133658F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:44:3e:68:86:3b:d5:6b:cb:2b:14:8a:c3:a8:
                    63:6b:73:88:05:bb:d5:46:c1:fb:75:81:bc:53:d1:
                    04:32:d0:df:a4:b2:8f:78:d6:a4:f9:16:4e:c5:1d:
                    6f:4b:87:2a:f9:03:03:48:b8:4e:62:ce:39:54:3d:
                    94:4d:2d:2c:46:3d:e7:fa:15:59:90:d2:62:9f:62:
                    15:0a:f8:b0:7f:25:a8:ae:8a:5a:45:b7:83:9f:c3:
                    97:4e:e9:63:1c:7f:bd:43:bd:f7:27:e3:d6:48:f5:
                    39:57:58:1a:4e:4f:94:fd:5b:9a:32:aa:71:fa:f7:
                    55:f5:31:de:e0:d2:92:82:29:60:cb:fd:45:99:04:
                    62:f0:4c:a7:f0:1a:ac:32:a1:04:3a:5b:78:5d:d4:
                    df:94:40:d9:ef:7c:33:fd:71:93:1f:ed:fa:9c:b0:
                    a8:43:09:fc:63:e1:a7:20:cc:9d:75:f3:d3:55:3e:
                    17:6c:49:23:0c:d0:cf:45:0d:b0:53:2a:58:2d:4c:
                    7c:9d:53:5a:a4:f8:01:56:3a:d3:30:15:84:0f:e5:
                    85:93:6c:63:a2:33:72:40:fe:62:bf:86:55:a6:e4:
                    0e:1e:a1:93:d7:77:7c:78:8c:61:12:a9:60:f9:4f:
                    b7:de:d3:85:7a:27:ec:02:ea:a5:22:2b:e0:39:a5:
                    57:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E1:A7:58:7D:80:2C:18:41:1A:F2:55:AB:CC:A4:41:33:65:8F:9D
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a3230303a3a2f34332d3433203d3e20323035343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:200::/43

    Signature Algorithm: sha256WithRSAEncryption
         32:ff:09:ea:02:db:6d:bb:a2:ef:ed:ba:4b:83:8e:78:bd:80:
         7f:40:4d:e7:21:1d:9c:b9:5d:3e:88:27:a4:f8:28:86:a1:51:
         f1:36:7a:fc:62:4b:af:2d:f3:0c:a0:f9:54:7a:18:cc:eb:fe:
         ac:e2:2c:65:3b:30:a5:37:19:b4:e1:78:5e:6e:02:a1:d3:bc:
         98:fb:68:62:c3:68:12:b5:00:92:20:2b:0c:62:84:fb:af:b7:
         69:bc:49:dd:8e:74:ff:e6:be:03:e0:1d:9a:0b:70:77:12:ed:
         af:f6:b7:33:12:43:43:99:41:e8:3f:37:2c:24:47:6a:06:54:
         08:b1:38:65:ef:81:26:08:ec:14:6a:f2:e6:b3:d0:f7:da:f5:
         b8:4d:10:09:76:aa:29:e4:2f:89:42:e1:c9:ce:8d:a6:dd:56:
         ff:ea:83:df:0a:37:7d:3c:51:50:5a:45:83:87:2c:a2:56:c5:
         b7:70:ef:3b:75:96:74:9a:e2:da:41:b9:56:9e:c3:56:76:63:
         a1:41:69:d0:e2:7e:f8:52:c4:8d:33:bd:c1:db:ad:cb:fe:74:
         ce:63:89:86:21:67:84:d2:7d:47:0d:ae:2d:aa:1f:74:f6:04:
         b4:c8:92:13:05:29:28:55:8b:43:06:46:70:3d:a7:24:8e:c5:
         ff:c6:f9:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIUdOY3qK+/K1++wwX4aopX4o4rIoIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA0MTQwMTUxNTdaFw0yNDA0MTIwMTU2NTdaMDMxMTAvBgNV
BAMTKDVGRTFBNzU4N0Q4MDJDMTg0MTFBRjI1NUFCQ0NBNDQxMzM2NThGOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvRD5ohjvVa8srFIrDqGNrc4gF
u9VGwft1gbxT0QQy0N+kso941qT5Fk7FHW9Lhyr5AwNIuE5izjlUPZRNLSxGPef6
FVmQ0mKfYhUK+LB/JaiuilpFt4Ofw5dO6WMcf71Dvfcn49ZI9TlXWBpOT5T9W5oy
qnH691X1Md7g0pKCKWDL/UWZBGLwTKfwGqwyoQQ6W3hd1N+UQNnvfDP9cZMf7fqc
sKhDCfxj4acgzJ1189NVPhdsSSMM0M9FDbBTKlgtTHydU1qk+AFWOtMwFYQP5YWT
bGOiM3JA/mK/hlWm5A4eoZPXd3x4jGESqWD5T7fe04V6J+wC6qUiK+A5pVdbAgMB
AAGjggIHMIICAzAdBgNVHQ4EFgQUX+GnWH2ALBhBGvJVq8ykQTNlj50wHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wLzMyNjEzMDM1M2E2NDY2NjMzNzNhMzIzMDMwM2EzYTJmMzQz
MzJkMzQzMzIwM2QzZTIwMzIzMDM1MzQzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFKgXfxwIAMA0G
CSqGSIb3DQEBCwUAA4IBAQAy/wnqAtttu6Lv7bpLg454vYB/QE3nIR2cuV0+iCek
+CiGoVHxNnr8YkuvLfMMoPlUehjM6/6s4ixlOzClNxm04XhebgKh07yY+2hiw2gS
tQCSICsMYoT7r7dpvEndjnT/5r4D4B2aC3B3Eu2v9rczEkNDmUHoPzcsJEdqBlQI
sThl74EmCOwUavLms9D32vW4TRAJdqop5C+JQuHJzo2m3Vb/6oPfCjd9PFFQWkWD
hyyiVsW3cO87dZZ0muLaQblWnsNWdmOhQWnQ4n74UsSNM73B263L/nTOY4mGIWeE
0n1HDa4tqh909gS0yJITBSkoVYtDBkZwPackjsX/xvlg
-----END CERTIFICATE-----