Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a323330303a3a2f34302d3438203d3e20323033343533.roa
File:                     326130353a646663373a323330303a3a2f34302d3438203d3e20323033343533.roa (raw, json)
Hash identifier:          2nDckMdb/S8ZD4u8MHaxrNAaoKzmgrmLatCWNE18Msg=
Subject key identifier:   FB:72:DE:C1:2D:A9:41:DB:42:E8:AE:9A:56:A2:2E:EB:40:AE:09:05
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       7D6D9BB2A4A6D2E1C6F859D3CD29F5EFF5224F83
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a323330303a3a2f34302d3438203d3e20323033343533.roa
Signing time:             Fri 14 Apr 2023 02:08:11 +0000
ROA not before:           Fri 14 Apr 2023 02:03:11 +0000
ROA not after:            Fri 12 Apr 2024 02:08:11 +0000
asID:                     203453
IP address blocks:        2a05:dfc7:2300::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6d:9b:b2:a4:a6:d2:e1:c6:f8:59:d3:cd:29:f5:ef:f5:22:4f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:03:11 2023 GMT
            Not After : Apr 12 02:08:11 2024 GMT
        Subject: CN=FB72DEC12DA941DB42E8AE9A56A22EEB40AE0905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c8:2d:4d:49:07:57:bc:49:92:07:6b:23:25:
                    6a:b2:6d:72:d0:20:45:b8:50:be:30:42:60:79:c2:
                    b3:e2:58:f6:a2:8a:4d:b7:26:30:cf:fe:85:36:7e:
                    18:13:de:d2:19:3b:b6:e2:83:1c:82:af:a7:9b:98:
                    15:b9:3c:97:ab:db:39:e4:d4:66:da:a0:e2:08:76:
                    22:84:45:b6:3e:63:2a:e4:fd:b2:4d:44:94:57:32:
                    81:13:93:ac:d2:73:51:cc:d0:8d:84:74:70:12:fa:
                    5a:3f:83:49:bf:9f:2f:9a:1d:c1:d2:19:41:9e:04:
                    2b:27:b5:d2:ef:8c:01:eb:e1:a4:47:cf:94:68:45:
                    ac:01:ac:af:20:cd:51:05:eb:cc:ff:57:d9:a5:d6:
                    a7:d9:97:0f:fc:5c:38:8f:08:d5:f4:a5:01:b1:11:
                    ad:f9:d4:bf:08:e4:a4:47:72:cb:a3:65:54:f1:e0:
                    25:ae:fb:20:57:43:49:0b:85:0e:18:39:eb:63:a0:
                    93:dd:dc:04:ae:80:88:62:b4:c2:96:c7:6e:c9:8c:
                    08:ec:31:58:17:21:24:78:7f:fb:07:90:df:89:1e:
                    74:ed:2f:88:83:c3:71:4a:e7:6a:4b:13:0c:06:49:
                    dd:81:df:db:6e:de:3f:bb:d6:c5:92:b7:22:a7:d0:
                    1a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:72:DE:C1:2D:A9:41:DB:42:E8:AE:9A:56:A2:2E:EB:40:AE:09:05
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a323330303a3a2f34302d3438203d3e20323033343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:2300::/40

    Signature Algorithm: sha256WithRSAEncryption
         16:82:d5:74:e6:ae:4c:1a:90:23:19:16:af:92:de:4c:e4:b1:
         a7:70:f1:cf:c8:cf:7c:92:ed:c4:f3:b4:84:8f:80:51:7b:ef:
         51:d6:4f:57:2c:f8:75:24:31:71:03:95:40:9b:ac:d8:54:a4:
         88:af:d6:a5:75:71:44:13:6d:d3:ea:9c:28:4e:d1:a3:a9:46:
         84:46:8f:b0:6b:48:e7:26:b7:11:fb:6e:2f:f1:b2:bc:8a:2a:
         55:04:bd:94:41:d5:22:92:1e:74:23:94:a9:9a:b9:07:21:04:
         ec:d0:dd:4d:ce:c9:a0:cd:45:86:02:06:85:25:2a:4b:7a:11:
         0c:e8:95:a8:a4:a4:85:dd:62:a3:d7:3a:63:3c:3b:12:b1:16:
         9a:63:31:e3:88:b9:30:ed:dd:a1:c2:26:13:3f:ac:9e:08:43:
         f0:a6:a5:22:2c:80:07:ba:b9:0f:40:84:02:a5:8d:69:0e:e3:
         b4:03:d4:ce:d8:98:df:72:82:9e:40:c9:e4:8d:87:03:a1:73:
         b1:98:09:4a:c3:ba:29:9a:f3:b8:10:bf:15:a1:9f:14:d1:29:
         52:f7:8c:3b:ae:8e:f3:2f:9b:1a:5f:94:a6:f9:51:ff:01:7b:
         82:d5:dc:fe:1d:20:22:4a:5b:85:cd:df:d0:22:87:16:6f:21:
         bf:fe:3a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----