Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a33303a3a2f34382d3438203d3e203336333531.roa
File:                     326130353a646663373a33303a3a2f34382d3438203d3e203336333531.roa (raw, json)
Hash identifier:          JirO87T9qOLIqOCGvfQpts1SWhq3rPK0cb5aWdnFa6s=
Subject key identifier:   7E:6E:59:2D:6C:92:16:B6:CD:A6:23:E8:87:24:15:36:B6:DB:6E:28
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       150E45E9F44E50B9C1111D5BC6036E2830DFF9AE
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a33303a3a2f34382d3438203d3e203336333531.roa
Signing time:             Fri 14 Apr 2023 01:39:49 +0000
ROA not before:           Fri 14 Apr 2023 01:34:49 +0000
ROA not after:            Fri 12 Apr 2024 01:39:49 +0000
asID:                     36351
IP address blocks:        2a05:dfc7:30::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0e:45:e9:f4:4e:50:b9:c1:11:1d:5b:c6:03:6e:28:30:df:f9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:34:49 2023 GMT
            Not After : Apr 12 01:39:49 2024 GMT
        Subject: CN=7E6E592D6C9216B6CDA623E887241536B6DB6E28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2c:0b:16:d3:9b:6c:66:1e:26:c6:57:cf:9f:
                    9d:37:ff:a7:a4:0e:53:a9:25:ee:82:c8:c0:12:aa:
                    58:e6:e9:c8:cc:30:3a:54:68:2f:d4:0a:68:e5:9e:
                    c0:3b:16:74:03:13:70:3e:50:d0:b3:de:8d:43:69:
                    e5:41:6e:99:e4:30:9d:c7:76:44:95:84:56:7d:c1:
                    39:e8:e8:27:90:9c:cd:65:ed:aa:22:4c:ec:bc:ed:
                    6a:de:41:73:fe:de:73:54:7f:db:4d:14:e7:d9:a8:
                    2a:74:d4:56:61:4d:27:c9:6f:48:a3:56:7f:aa:69:
                    0c:fa:a3:c5:7f:f8:c4:8a:a4:ff:fd:52:a0:9c:ee:
                    a9:a6:c3:12:1c:ea:9a:2d:11:c4:f0:c2:92:d7:f1:
                    95:bf:ac:df:11:99:b5:1e:f8:e5:b4:00:43:43:bf:
                    c4:80:02:01:38:f2:f7:f5:14:08:f6:de:93:af:46:
                    de:5f:f8:58:a4:8e:b3:28:6b:98:f1:9c:cb:5a:ce:
                    bd:bc:29:40:73:74:3e:89:25:59:d8:26:76:8d:d1:
                    3a:24:18:61:a5:57:34:68:a8:b2:c0:3e:b9:db:62:
                    7b:a3:94:7e:2c:6e:21:f1:18:1c:87:18:79:ad:38:
                    52:60:cc:33:99:7b:a7:f2:8f:c5:cd:de:e5:5e:24:
                    74:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6E:59:2D:6C:92:16:B6:CD:A6:23:E8:87:24:15:36:B6:DB:6E:28
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a33303a3a2f34382d3438203d3e203336333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:30::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:1d:2b:a6:40:5a:7d:19:07:0a:80:69:95:06:8d:83:35:83:
         94:fd:30:cb:1d:30:2c:6e:ab:16:e2:cb:9d:56:fe:c5:7f:4d:
         3a:78:bb:f2:03:cd:07:2d:b7:82:95:50:7e:29:1f:1f:c2:ce:
         ca:ba:3f:7c:c6:87:9f:66:a6:e2:8b:ce:54:53:bf:00:7f:c6:
         35:4d:5a:23:eb:09:c1:66:10:33:78:ef:a6:6f:63:3a:bf:4a:
         d2:7a:89:47:c1:e4:6c:f9:56:7f:3d:87:8e:43:66:92:28:c1:
         55:6a:d6:50:be:8c:68:06:88:88:b2:19:94:7c:ad:46:cc:a8:
         b7:38:e7:54:d8:27:f4:8e:5e:ca:6d:c5:69:fd:fa:79:d0:eb:
         3f:1c:71:cc:49:72:b4:2c:72:2c:96:91:71:bd:b9:77:6f:7b:
         35:a1:b1:75:85:20:3a:3b:ce:e7:19:85:a8:44:dc:e1:f0:6f:
         1e:52:73:4a:b7:cb:c5:48:41:53:dc:c8:0f:01:c1:82:ef:b0:
         48:94:74:b1:0a:e0:87:ed:e8:17:a1:e5:ca:85:d6:d6:24:cc:
         65:fc:ac:13:11:d6:21:f9:ac:ae:c6:79:1b:bb:fb:54:b4:6a:
         62:26:ce:d0:2c:d4:14:59:7d:3f:47:88:82:37:7c:a4:23:0b:
         bd:29:8b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:26 2023 by rpki-client on console-fra.rpki-client.org