Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a323430303a3a2f34302d3430203d3e203439353139.roa
File:                     326130353a646663373a323430303a3a2f34302d3430203d3e203439353139.roa (raw, json)
Hash identifier:          qv+Xn0OrBtyQMeA+74Q9jtTHP44ojFCSK6A7sa2eNqQ=
Subject key identifier:   78:E6:65:C3:B3:18:10:81:9F:B4:98:05:A3:B2:8D:2A:02:8F:E0:40
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       3393CAF44E590119EEFF68C11FCF2057E864725F
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a323430303a3a2f34302d3430203d3e203439353139.roa
Signing time:             Fri 14 Apr 2023 01:40:17 +0000
ROA not before:           Fri 14 Apr 2023 01:35:17 +0000
ROA not after:            Fri 12 Apr 2024 01:40:17 +0000
asID:                     49519
IP address blocks:        2a05:dfc7:2400::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:93:ca:f4:4e:59:01:19:ee:ff:68:c1:1f:cf:20:57:e8:64:72:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:35:17 2023 GMT
            Not After : Apr 12 01:40:17 2024 GMT
        Subject: CN=78E665C3B31810819FB49805A3B28D2A028FE040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a0:cb:d2:77:93:7d:ec:22:92:3f:d4:f2:0c:
                    51:63:ba:ef:ad:5d:f1:04:3b:2d:1e:e3:93:28:09:
                    b0:e1:3b:24:7d:5f:dc:c5:fe:3d:63:4f:cf:53:f4:
                    84:5f:3f:7e:64:85:fa:72:cb:40:5e:4f:47:94:8f:
                    ad:a6:19:11:8a:c8:f4:85:37:51:a6:f9:26:8d:ea:
                    5e:15:91:66:32:52:51:18:10:87:cd:aa:1b:9a:12:
                    8b:98:64:b1:7d:9b:37:ad:62:29:80:2f:53:30:8c:
                    3d:28:cd:88:ba:55:43:e7:b5:2f:c1:38:27:7e:07:
                    7d:f3:6f:f1:93:16:38:4b:14:b9:2b:6f:d8:3a:9b:
                    98:f9:65:b9:51:b7:42:6f:e1:e6:cf:2b:ab:38:ae:
                    ef:8f:e1:f5:e8:09:47:09:bf:be:c1:63:db:b9:e5:
                    91:30:6d:be:5b:92:9d:3e:c0:70:df:10:61:03:52:
                    da:f9:26:9d:eb:e4:1e:a8:16:b0:fb:43:c8:72:fd:
                    36:03:58:6d:60:2f:17:ce:76:6c:e3:d1:28:8e:eb:
                    42:58:22:df:1a:6f:f0:11:ba:ba:3d:af:f9:6b:7b:
                    a6:36:5b:a5:7a:b4:61:45:27:41:09:79:8d:eb:50:
                    81:fd:74:81:4a:a2:65:57:e0:09:4a:c4:f2:e7:eb:
                    85:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E6:65:C3:B3:18:10:81:9F:B4:98:05:A3:B2:8D:2A:02:8F:E0:40
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a323430303a3a2f34302d3430203d3e203439353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:2400::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:f5:95:f8:83:eb:9f:0c:e5:69:0d:49:18:83:e4:c1:ef:34:
         d1:b6:b8:cc:ac:db:29:7c:cb:12:c0:d5:8b:d3:a3:a9:4e:1d:
         fd:c6:ea:b2:41:14:77:31:39:c4:06:1f:d1:f4:a1:d7:6d:5d:
         46:39:60:e9:59:33:59:5f:8b:85:6d:c9:a2:a9:b5:4d:45:93:
         98:56:39:21:23:1e:d0:49:39:7d:ce:6f:f9:80:d6:84:48:a1:
         42:27:63:0e:5b:0f:e1:23:16:a8:89:b1:3f:de:89:81:13:5f:
         e3:48:8f:c5:91:14:41:38:e2:4d:72:98:70:40:2c:ed:d9:43:
         36:4a:0a:45:11:64:8b:e4:c3:83:94:19:c3:7c:24:8d:96:fe:
         dc:f3:96:6d:5b:c3:69:ce:a4:70:0e:ea:eb:00:9d:7f:6c:c3:
         92:40:16:55:80:bb:87:8c:b8:27:a9:ab:63:86:a3:15:2e:61:
         49:c8:cd:c9:70:ec:5d:be:fb:96:74:76:75:de:5a:2f:90:03:
         bf:e3:01:19:61:28:f0:78:d3:8f:ad:0f:51:b8:ab:a5:5f:e2:
         f0:c6:9f:ed:fe:c2:5f:37:a1:55:75:85:e8:26:f0:31:ba:f2:
         42:17:7b:20:d3:7c:8a:29:1b:68:41:cf:84:f6:e6:d6:20:21:
         77:70:29:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----