Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a326635633a3a2f34382d3438203d3e20323033303639.roa
File:                     326130353a646663373a326635633a3a2f34382d3438203d3e20323033303639.roa (raw, json)
Hash identifier:          g4HPqe/foybsUdrz9EYx6BTZKuqpRsLiiQp65O0fTzI=
Subject key identifier:   DF:AB:BB:BE:B4:37:97:3D:B3:81:FF:65:2A:D2:EC:C5:F1:25:1A:70
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       7CBF595E84A24AE12BAC606EA420EC348422568F
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a326635633a3a2f34382d3438203d3e20323033303639.roa
Signing time:             Fri 14 Apr 2023 02:04:32 +0000
ROA not before:           Fri 14 Apr 2023 01:59:32 +0000
ROA not after:            Fri 12 Apr 2024 02:04:32 +0000
asID:                     203069
IP address blocks:        2a05:dfc7:2f5c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bf:59:5e:84:a2:4a:e1:2b:ac:60:6e:a4:20:ec:34:84:22:56:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:59:32 2023 GMT
            Not After : Apr 12 02:04:32 2024 GMT
        Subject: CN=DFABBBBEB437973DB381FF652AD2ECC5F1251A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:28:51:18:20:85:63:79:2c:31:ae:a1:14:74:
                    90:2d:30:ab:03:0d:59:4d:40:c8:91:23:91:8a:62:
                    80:4d:cf:f0:ea:39:30:bd:4c:1b:85:a1:49:b2:06:
                    e8:8b:da:63:5d:42:ca:92:78:5f:a2:fe:4b:6f:a8:
                    db:b6:fc:dc:46:ae:a3:3b:ce:85:e1:ea:fd:75:07:
                    9e:ca:5b:34:20:94:a0:3d:d5:92:5b:f2:9c:90:71:
                    47:4a:15:bf:74:5d:12:3d:12:25:9c:b9:0a:22:be:
                    01:54:66:76:65:bd:cd:56:80:f1:56:b7:56:e2:e2:
                    c7:c8:49:08:59:28:cd:08:f5:60:8c:82:cd:03:85:
                    fe:f6:31:09:31:fe:81:58:ab:56:3d:3d:21:1f:47:
                    36:06:cd:a0:70:e3:08:ee:1a:9e:73:4c:b9:da:3f:
                    27:90:d7:ae:8c:67:68:fd:da:2e:e1:1f:53:b2:59:
                    6d:6d:53:12:16:12:89:41:42:9f:4d:20:25:d5:16:
                    a7:fe:a2:50:e6:39:a3:13:8d:e5:1e:62:8a:b3:f8:
                    90:3a:9b:67:1b:eb:50:89:b9:e7:de:c5:97:88:0b:
                    ea:97:1f:5f:39:e7:00:a7:2d:57:a3:32:45:32:7e:
                    b4:95:47:52:41:9f:ae:dd:af:87:4c:82:47:55:82:
                    01:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AB:BB:BE:B4:37:97:3D:B3:81:FF:65:2A:D2:EC:C5:F1:25:1A:70
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a326635633a3a2f34382d3438203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:2f5c::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:12:39:c7:f0:5e:f5:a6:05:ea:39:90:4b:3e:51:ef:a5:d8:
         29:d6:94:fd:f1:35:e9:7c:f4:34:8e:05:0b:64:4a:aa:7d:82:
         9b:fc:7b:8f:b6:e4:9a:af:18:99:a3:34:d9:3d:db:76:ec:9c:
         04:00:9e:5b:0f:03:9d:3e:9b:ef:19:7e:9e:e7:1b:b5:08:c6:
         e1:6a:34:bd:77:6f:64:86:41:25:36:15:ce:d3:94:42:d7:0d:
         e8:8e:28:fe:07:9c:34:6f:de:89:4a:83:52:3f:19:00:a6:77:
         c2:7f:1d:5c:a8:b2:b3:83:ab:1c:66:6a:ad:07:6b:51:03:b8:
         6e:9f:f3:59:03:47:81:a2:16:d2:9a:20:bb:a0:ba:ff:6d:87:
         ce:31:2b:a3:1e:80:35:86:ad:e1:26:8f:95:5d:ce:95:ac:80:
         23:f4:e2:bc:c5:6f:b3:1a:66:d5:cd:46:1e:24:3a:b8:93:42:
         d8:9d:51:f0:e6:c1:fb:ca:8c:10:ca:0c:06:c4:60:70:5b:c2:
         19:3d:c6:ea:0a:ee:b9:0e:c4:26:bd:be:56:41:2f:80:78:cf:
         2c:70:28:a0:b7:16:35:26:c3:d8:1c:8a:9d:ef:c1:a6:48:37:
         37:9a:f9:af:60:82:85:ae:bf:97:fb:f4:a4:a9:3e:3c:82:56:
         24:ab:b5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----