Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a323130303a3a2f34302d3430203d3e20323032383238.roa
File:                     326130353a646663373a323130303a3a2f34302d3430203d3e20323032383238.roa (raw, json)
Hash identifier:          Uu3BIcFlpJmLcTh8yS5c1x0Y3x/9RaY53HFWvKvhZVU=
Subject key identifier:   37:38:29:DB:68:20:F3:3D:92:8B:08:50:4F:72:84:AF:5B:67:CC:77
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       49254F2C193B9AA27C3BF19F05A0715A0886A114
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a323130303a3a2f34302d3430203d3e20323032383238.roa
Signing time:             Fri 14 Apr 2023 01:48:24 +0000
ROA not before:           Fri 14 Apr 2023 01:43:24 +0000
ROA not after:            Fri 12 Apr 2024 01:48:24 +0000
asID:                     202828
IP address blocks:        2a05:dfc7:2100::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:25:4f:2c:19:3b:9a:a2:7c:3b:f1:9f:05:a0:71:5a:08:86:a1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:43:24 2023 GMT
            Not After : Apr 12 01:48:24 2024 GMT
        Subject: CN=373829DB6820F33D928B08504F7284AF5B67CC77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:1a:98:81:e3:4f:a5:67:e7:1e:fe:21:63:
                    dc:75:a9:1e:3b:d8:e3:a8:37:2d:a1:bd:d8:d5:7c:
                    5c:28:ef:c7:17:ae:2a:1b:99:f2:2a:25:a2:20:12:
                    6d:33:68:76:74:ce:d9:42:36:e4:4f:22:cc:0d:b2:
                    d4:f6:64:55:a9:08:b4:84:52:57:75:e3:17:34:4c:
                    61:7f:23:be:f6:49:ba:b9:99:61:95:65:54:db:3c:
                    2e:4f:d6:f3:1f:f8:20:61:6e:29:b6:0e:60:55:6b:
                    dc:7d:93:6f:a1:0f:42:69:04:55:2b:b6:f3:38:5b:
                    e5:dd:67:fa:94:60:66:f5:b2:18:b3:8e:59:ca:0d:
                    b4:e3:9b:9c:95:e5:cb:69:7a:d2:c3:b9:91:64:f9:
                    f9:7f:ed:c0:15:c2:00:a2:6f:2f:d2:98:70:42:fd:
                    f8:99:4e:56:bf:38:a7:82:31:bc:1a:03:bd:e3:10:
                    26:6c:1c:17:20:a2:31:cb:cd:f6:6f:a3:70:b0:cb:
                    5b:0a:48:44:8a:8b:83:9d:d9:dc:46:bb:9a:11:08:
                    bb:65:3f:44:2b:43:f0:d7:e6:c2:27:9a:04:0d:4b:
                    94:89:ba:fe:2a:72:8f:13:cd:b7:d6:73:ae:85:70:
                    c3:53:6f:a5:84:43:f8:8e:ea:61:ae:49:78:1f:5f:
                    09:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:38:29:DB:68:20:F3:3D:92:8B:08:50:4F:72:84:AF:5B:67:CC:77
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a323130303a3a2f34302d3430203d3e20323032383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:c1:b8:36:6a:08:d5:d1:d2:94:d3:ed:5b:12:60:ba:8e:24:
         59:41:56:96:12:fa:b9:b7:a0:ae:21:ea:68:7d:0e:7d:0f:03:
         7d:e6:f0:ea:b4:d5:1f:0a:b6:28:03:86:28:72:30:34:a3:27:
         39:88:6a:cf:0b:ee:f0:00:7a:d3:0b:05:69:fb:d0:35:14:ae:
         a6:63:8e:e3:c5:05:73:17:62:f6:67:58:fd:f7:39:50:99:9d:
         93:bb:bd:f7:bd:ea:90:59:59:08:ae:ee:80:51:75:3c:65:b9:
         36:fa:9c:81:19:6f:a4:c7:ba:f6:c6:9f:d8:e6:40:d2:49:50:
         da:a9:bc:3e:f6:ad:92:8c:a8:3d:a5:fc:7f:57:2e:42:35:02:
         e8:fb:00:79:13:69:0a:02:2a:2c:76:38:89:50:44:c5:db:84:
         83:90:59:df:5d:42:f1:0c:04:58:d1:86:95:4a:75:31:85:4a:
         c8:86:2f:15:ab:60:1a:fc:11:dc:f3:e7:3d:94:81:09:a1:af:
         fe:bc:ae:e9:05:98:0d:ac:e8:c9:92:d0:3f:2d:75:69:33:e8:
         ba:32:60:f5:28:0f:f0:6d:d7:55:d9:be:8c:88:43:22:59:cd:
         7c:f9:31:df:40:12:e1:b4:b6:c8:5d:14:c5:ca:e7:e8:c7:90:
         cd:84:b3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----