Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a333930393a3a2f34382d3438203d3e20323038353438.roa
File:                     326130353a646663373a333930393a3a2f34382d3438203d3e20323038353438.roa (raw, json)
Hash identifier:          2Bmv97/L7A+K2kwe1DUYXhdWq309ljJo2bzpLYPEZO4=
Subject key identifier:   F1:30:82:12:EC:29:AF:F0:7F:23:97:AB:4E:64:17:34:FE:28:47:9C
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       5668D9A6245719F847D909D9AF73093E973C4C44
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a333930393a3a2f34382d3438203d3e20323038353438.roa
Signing time:             Fri 14 Apr 2023 02:01:41 +0000
ROA not before:           Fri 14 Apr 2023 01:56:41 +0000
ROA not after:            Fri 12 Apr 2024 02:01:41 +0000
asID:                     208548
IP address blocks:        2a05:dfc7:3909::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:68:d9:a6:24:57:19:f8:47:d9:09:d9:af:73:09:3e:97:3c:4c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:56:41 2023 GMT
            Not After : Apr 12 02:01:41 2024 GMT
        Subject: CN=F1308212EC29AFF07F2397AB4E641734FE28479C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ca:55:af:64:fe:c2:19:3d:9d:2f:41:ae:ed:
                    2f:5f:3b:3f:56:5d:39:84:1f:e8:6f:af:78:08:6d:
                    95:0f:bc:51:a0:3a:34:17:b1:04:bc:ba:7e:02:00:
                    91:46:61:a4:66:8e:5b:35:50:dc:30:9b:c3:4a:2b:
                    48:d3:11:7d:77:c3:9b:30:0b:ec:6e:11:17:33:83:
                    e2:f7:f0:af:a0:9f:45:63:a7:95:54:ab:df:6a:cb:
                    ac:c0:61:ce:8d:2c:b6:84:bd:84:18:1e:91:d4:c7:
                    0c:27:0d:e9:32:d6:a2:4e:d0:34:53:32:c5:8d:95:
                    b6:90:08:f1:73:08:53:84:e0:d5:c7:8a:9b:fd:32:
                    34:29:bc:8a:16:68:ef:6f:f0:e1:d8:0f:25:7e:a0:
                    b5:e2:a1:09:55:f0:5d:e9:33:3a:03:65:14:ea:c1:
                    37:0b:04:50:c5:aa:06:92:7b:23:eb:86:64:de:61:
                    f2:68:78:9e:35:27:a8:11:30:b4:68:62:4a:e4:88:
                    17:cb:a9:3c:ca:d2:84:c0:92:6d:5b:70:6c:b8:8a:
                    1d:c5:b2:72:e0:24:6c:5c:3d:36:7b:e5:d6:ff:d5:
                    6d:38:99:de:db:43:17:82:b2:0a:a8:54:4e:83:8f:
                    f1:14:e0:05:e9:2b:9f:ca:fd:14:88:47:b2:f0:6a:
                    f1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:30:82:12:EC:29:AF:F0:7F:23:97:AB:4E:64:17:34:FE:28:47:9C
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a333930393a3a2f34382d3438203d3e20323038353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:3909::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:f0:a6:4c:d9:fa:09:fe:5f:ca:3e:ed:e8:92:98:a1:eb:79:
         f8:f2:92:34:34:07:85:da:08:81:9d:d3:1d:32:df:ed:a3:c5:
         6c:44:01:0a:99:f9:f5:0e:2b:12:eb:88:50:0b:83:4d:13:93:
         ee:f2:1d:fd:4f:bf:01:63:ce:77:a5:78:ff:ed:b5:ee:41:f7:
         fb:d0:01:88:bd:63:83:5c:38:44:25:be:83:1f:20:0a:15:4a:
         53:4e:3d:17:28:51:7e:bb:90:a3:c2:bf:eb:00:0b:1e:17:60:
         84:1b:b5:ed:df:04:8a:57:59:2d:40:23:5f:55:1a:19:f4:c7:
         cb:7d:a3:59:07:48:1b:43:4e:45:2b:20:90:bd:76:22:5b:7f:
         64:9c:74:eb:9a:c2:dc:31:b4:88:f5:0e:03:0b:16:85:59:2f:
         25:68:d0:71:ef:56:2f:10:07:3d:a6:58:ec:fe:ce:7b:16:3c:
         c7:87:50:b3:b8:77:e2:33:8f:2f:a7:31:de:de:7e:15:fe:40:
         d2:c1:56:b7:b3:af:00:17:f1:84:5d:85:90:92:f8:67:45:f0:
         6a:e5:18:da:8d:79:c2:73:14:db:08:bf:56:76:38:ae:ed:49:
         ab:34:a8:6a:3a:df:07:d3:d7:ab:41:1a:49:17:78:5e:10:6d:
         ab:84:89:30
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUVmjZpiRXGfhH2QnZr3MJPpc8TEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA0MTQwMTU2NDFaFw0yNDA0MTIwMjAxNDFaMDMxMTAvBgNV
BAMTKEYxMzA4MjEyRUMyOUFGRjA3RjIzOTdBQjRFNjQxNzM0RkUyODQ3OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYylWvZP7CGT2dL0Gu7S9fOz9W
XTmEH+hvr3gIbZUPvFGgOjQXsQS8un4CAJFGYaRmjls1UNwwm8NKK0jTEX13w5sw
C+xuERczg+L38K+gn0Vjp5VUq99qy6zAYc6NLLaEvYQYHpHUxwwnDeky1qJO0DRT
MsWNlbaQCPFzCFOE4NXHipv9MjQpvIoWaO9v8OHYDyV+oLXioQlV8F3pMzoDZRTq
wTcLBFDFqgaSeyPrhmTeYfJoeJ41J6gRMLRoYkrkiBfLqTzK0oTAkm1bcGy4ih3F
snLgJGxcPTZ75db/1W04md7bQxeCsgqoVE6Dj/EU4AXpK5/K/RSIR7LwavFTAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU8TCCEuwpr/B/I5erTmQXNP4oR5wwHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
gYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVMyMDU0MzIvMC8zMjYxMzAzNTNhNjQ2NjYzMzczYTMzMzkzMDM5M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzIzMDM4MzUzNDM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfxzkJ
MA0GCSqGSIb3DQEBCwUAA4IBAQBm8KZM2foJ/l/KPu3okpih63n48pI0NAeF2giB
ndMdMt/to8VsRAEKmfn1DisS64hQC4NNE5Pu8h39T78BY853pXj/7bXuQff70AGI
vWODXDhEJb6DHyAKFUpTTj0XKFF+u5Cjwr/rAAseF2CEG7Xt3wSKV1ktQCNfVRoZ
9MfLfaNZB0gbQ05FKyCQvXYiW39knHTrmsLcMbSI9Q4DCxaFWS8laNBx71YvEAc9
pljs/s57FjzHh1CzuHfiM48vpzHe3n4V/kDSwVa3s68AF/GEXYWQkvhnRfBq5Rja
jXnCcxTbCL9Wdjiu7UmrNKhqOt8H09erQRpJF3heEG2rhIkw
-----END CERTIFICATE-----