Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a323230303a3a2f34302d3438203d3e20323132323532.roa
File:                     326130353a646663373a323230303a3a2f34302d3438203d3e20323132323532.roa (raw, json)
Hash identifier:          vI/Js8okLOhz4SN0IzLRHOP7xKMBKOH/xW4n91tduhM=
Subject key identifier:   DD:AE:18:BF:FC:B3:69:D1:4C:0C:FC:37:CE:AA:A2:6D:58:B8:AA:F9
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       646196D9E00E4E726B284386EAC7A5BE4A1D5CDA
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a323230303a3a2f34302d3438203d3e20323132323532.roa
Signing time:             Fri 16 Jun 2023 14:41:45 +0000
ROA not before:           Fri 16 Jun 2023 14:36:45 +0000
ROA not after:            Fri 14 Jun 2024 14:41:45 +0000
asID:                     212252
IP address blocks:        2a05:dfc7:2200::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:61:96:d9:e0:0e:4e:72:6b:28:43:86:ea:c7:a5:be:4a:1d:5c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun 16 14:36:45 2023 GMT
            Not After : Jun 14 14:41:45 2024 GMT
        Subject: CN=DDAE18BFFCB369D14C0CFC37CEAAA26D58B8AAF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:48:01:35:27:4f:78:e7:a8:68:e9:90:00:27:
                    4c:c4:98:d8:d6:9d:4b:07:ec:d8:ec:f9:3b:74:da:
                    3c:d5:02:c2:b4:95:95:86:b0:f7:b9:5b:a2:b5:8a:
                    61:af:e6:17:40:80:bf:28:5c:46:4c:7a:7c:c0:5a:
                    63:1e:7d:af:9d:88:04:00:7c:d7:75:1e:7f:af:0f:
                    2d:a4:02:37:10:35:31:69:25:fb:eb:28:5c:25:3b:
                    94:4e:95:51:d0:d7:64:0e:fe:da:a2:a8:38:63:66:
                    f8:6d:a9:b7:e2:3d:05:8e:58:c4:99:7f:08:ba:8c:
                    9e:57:7a:a6:a2:40:a2:9f:96:97:b1:76:76:88:61:
                    99:b1:64:e6:67:5e:69:ae:c7:29:2f:72:59:1f:ab:
                    74:1b:7f:ab:c8:6e:cf:5e:d2:74:c7:1b:44:a5:16:
                    7c:67:3f:46:ae:a1:49:f6:15:79:ae:e3:54:ec:2d:
                    3f:33:cc:9b:27:bd:94:0f:f0:dc:16:be:2e:6e:45:
                    c6:63:52:8a:d4:62:4b:40:08:db:18:b1:bb:8c:cd:
                    aa:ce:8f:4a:fc:e1:6f:88:83:ee:f3:a0:16:08:86:
                    5f:5d:17:62:cf:60:61:92:29:b5:cf:02:57:87:b7:
                    16:9f:98:48:08:92:bd:bd:64:f6:d6:0b:c0:c3:13:
                    2b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AE:18:BF:FC:B3:69:D1:4C:0C:FC:37:CE:AA:A2:6D:58:B8:AA:F9
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a323230303a3a2f34302d3438203d3e20323132323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:2200::/40

    Signature Algorithm: sha256WithRSAEncryption
         ac:52:40:e0:fe:7b:f2:f0:da:21:05:01:8c:88:47:8d:c4:e7:
         2a:2f:57:c2:2d:97:7e:07:5b:d3:4d:a2:c0:da:ca:11:e6:66:
         fc:d1:7f:68:d2:d4:62:f3:2b:98:de:29:4e:94:59:b7:99:f3:
         b0:cb:35:d0:eb:7b:86:05:81:02:d1:7f:86:d6:59:a5:03:c5:
         af:b0:71:1c:b3:c1:31:0e:ef:70:49:cf:c8:c5:bf:f7:5a:36:
         70:79:36:31:9e:30:92:a4:9f:93:ef:bf:0a:40:fa:c5:9a:d3:
         0c:ed:03:eb:d8:25:88:49:f1:e8:f3:e9:e0:bb:41:0e:10:73:
         84:47:89:86:19:9c:6e:bb:7b:9b:f4:f0:17:d6:43:2b:91:6b:
         b9:84:89:f5:26:10:e2:04:08:92:56:2d:fd:11:91:12:f1:e4:
         8d:0d:82:1d:71:06:9a:7d:4f:55:e1:2c:da:7b:35:f4:1d:b1:
         51:a5:cb:10:54:e2:58:f7:35:41:31:fd:1e:58:e1:db:72:a7:
         9c:c7:2d:03:9b:aa:f5:10:b4:66:eb:b0:cc:4a:bb:7c:2b:ba:
         55:2a:1f:aa:88:90:41:a8:01:cd:32:ff:5e:df:8a:c7:41:0f:
         2c:5d:5a:12:46:cf:3c:ae:dc:2e:af:b6:da:79:91:2b:d1:bc:
         8f:fb:31:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----