Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a323930303a3a2f34332d3438203d3e20323030383937.roa
File:                     326130353a646663373a323930303a3a2f34332d3438203d3e20323030383937.roa (raw, json)
Hash identifier:          uD4omyNtyF65p+1keE7CDnsEUF9MturBEW3euqDebrE=
Subject key identifier:   36:4A:E5:46:AD:5B:71:21:E2:FE:F2:4E:3D:AD:CB:5A:C0:FD:2D:0F
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       6DF9E058155C36EF542AB58AACA82995F3E9D64A
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a323930303a3a2f34332d3438203d3e20323030383937.roa
Signing time:             Fri 14 Apr 2023 01:46:04 +0000
ROA not before:           Fri 14 Apr 2023 01:41:04 +0000
ROA not after:            Fri 12 Apr 2024 01:46:04 +0000
asID:                     200897
IP address blocks:        2a05:dfc7:2900::/43 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f9:e0:58:15:5c:36:ef:54:2a:b5:8a:ac:a8:29:95:f3:e9:d6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:41:04 2023 GMT
            Not After : Apr 12 01:46:04 2024 GMT
        Subject: CN=364AE546AD5B7121E2FEF24E3DADCB5AC0FD2D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:de:77:24:fd:91:88:f1:40:62:ce:43:c3:
                    35:89:2c:44:b1:c4:e0:a6:af:e1:aa:3c:3b:de:6e:
                    b7:27:40:8b:db:bd:ea:7f:09:e3:b0:e9:66:ae:fc:
                    b6:80:55:a5:5b:db:23:a7:49:1e:b1:45:5f:d1:ea:
                    4a:4b:cb:1d:50:1c:c9:11:39:fc:b6:3b:9f:09:4a:
                    a1:9f:22:4e:44:37:e7:6e:ce:cd:4b:63:2b:ad:ba:
                    6a:97:dd:9b:0f:7d:09:0b:f8:be:45:bb:ec:84:01:
                    31:3d:a7:36:fd:be:bf:dc:d3:52:0e:dc:fe:67:96:
                    80:ed:b0:26:12:f1:41:fc:01:5d:74:37:7e:74:79:
                    c2:5d:0d:c3:34:72:ac:88:4a:41:4a:e9:61:b5:26:
                    c4:9c:be:9f:78:fc:b4:59:88:d9:11:5e:2c:e7:21:
                    1e:32:1a:89:73:72:c1:b0:89:56:d4:7d:7b:87:ed:
                    d2:82:c9:6a:2a:9d:fa:6c:17:84:41:51:4a:4d:9d:
                    d0:61:f1:26:9c:e4:22:42:85:b3:c4:85:17:8b:19:
                    28:12:a5:70:a6:66:9b:0a:89:dd:6b:5f:dd:26:8a:
                    c0:34:b0:fa:65:ff:5c:df:04:42:1a:ba:13:fd:d1:
                    16:eb:ac:68:3f:91:8f:6a:b2:cf:0a:a4:5d:36:9e:
                    ec:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4A:E5:46:AD:5B:71:21:E2:FE:F2:4E:3D:AD:CB:5A:C0:FD:2D:0F
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a323930303a3a2f34332d3438203d3e20323030383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:2900::/43

    Signature Algorithm: sha256WithRSAEncryption
         cc:32:89:f5:b3:f6:bd:01:81:8e:ee:30:d0:4a:94:c7:1f:75:
         20:3e:23:b1:c1:fc:16:63:3f:d3:33:db:f0:bf:b3:0b:69:04:
         54:0d:9f:50:fe:db:10:1d:11:61:2e:45:5a:3b:49:d4:5e:3a:
         c5:e1:ee:4e:45:79:33:db:1e:5b:50:5b:18:e4:a9:9b:aa:ed:
         9a:cd:22:69:84:bf:3d:02:a2:34:f7:63:1d:95:00:88:93:cf:
         5a:95:f7:74:89:3d:99:60:0e:53:7d:e5:c6:63:48:98:26:97:
         c7:85:a8:e8:b9:8f:4c:dd:47:1f:99:76:e6:3a:7d:2b:59:c3:
         e7:12:63:0c:1d:0b:dc:ab:1b:58:03:33:54:e8:6e:d4:f1:a1:
         4f:ec:95:f0:cc:fc:c0:bc:ee:10:16:c4:a8:a6:bd:79:7f:54:
         73:95:9f:4d:bc:c3:60:05:57:d3:86:cc:bd:d2:2f:39:16:fa:
         33:bb:fd:fe:e1:14:f1:52:1b:f3:4f:d8:51:b9:78:f8:5c:e2:
         36:43:eb:81:56:fa:04:31:a0:11:97:a3:7f:84:7b:9c:c1:e3:
         c4:90:6c:23:aa:02:bd:5f:90:04:64:73:2f:ea:a2:2b:5b:0e:
         fc:30:94:13:8a:28:fd:d4:8e:dc:f7:26:15:ad:b8:92:05:46:
         d6:71:6f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----