Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a343030303a3a2f33392d3339203d3e20323032363835.roa
File:                     326130353a646663373a343030303a3a2f33392d3339203d3e20323032363835.roa (raw, json)
Hash identifier:          4jqa1o8DIIz6hTMM8p37wLRg8UH7j6e/JkdIN5WgeI0=
Subject key identifier:   A2:FD:77:C8:71:15:74:36:7D:77:1F:C0:CC:0C:9F:DF:2C:19:92:DB
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       78A35F6141893F21EC78E7AE816C0C17911A0737
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a343030303a3a2f33392d3339203d3e20323032363835.roa
Signing time:             Fri 14 Apr 2023 01:47:13 +0000
ROA not before:           Fri 14 Apr 2023 01:42:13 +0000
ROA not after:            Fri 12 Apr 2024 01:47:13 +0000
asID:                     202685
IP address blocks:        2a05:dfc7:4000::/39 maxlen: 39

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a3:5f:61:41:89:3f:21:ec:78:e7:ae:81:6c:0c:17:91:1a:07:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:42:13 2023 GMT
            Not After : Apr 12 01:47:13 2024 GMT
        Subject: CN=A2FD77C8711574367D771FC0CC0C9FDF2C1992DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2b:f0:a7:48:72:17:93:f1:d1:60:9d:e6:1c:
                    6c:d1:61:3c:d3:e3:c2:75:02:44:8a:87:f7:3a:f2:
                    0a:37:b0:29:ac:e8:56:ee:a0:0a:b1:a1:bc:47:dc:
                    11:7e:a5:71:15:d3:bc:d5:ed:02:42:a9:7c:da:cd:
                    8e:85:a0:ee:33:63:cd:a6:8d:0a:ca:e0:fb:87:26:
                    68:da:78:53:65:71:1d:de:f4:62:40:b7:4c:0f:c8:
                    04:59:06:f2:cb:3a:b7:32:d4:51:9b:6f:76:a3:11:
                    46:30:d1:fa:c6:8d:c4:cf:30:09:cc:dc:5d:a7:d6:
                    5a:cc:be:16:5b:f9:db:76:0a:74:64:f8:c5:04:ea:
                    54:1e:a4:24:dc:12:70:96:b2:68:e2:83:fe:a6:cc:
                    79:91:d7:d5:92:98:e2:44:0f:9c:8c:79:92:48:9d:
                    73:40:36:66:e7:17:26:e4:7c:a6:4d:e1:de:fd:8d:
                    8e:b6:1e:4e:ff:81:a8:23:6a:e4:0f:57:e0:3e:65:
                    74:c1:3e:f0:6a:41:f4:21:a7:7a:e2:73:89:15:6b:
                    82:b3:46:41:2e:e7:e1:77:0a:c9:39:fc:1f:0d:a7:
                    cd:84:2f:66:c3:69:85:75:75:a4:88:e8:34:a6:3c:
                    ae:96:89:76:b6:9f:8d:fc:c9:06:79:b2:bc:92:7f:
                    92:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FD:77:C8:71:15:74:36:7D:77:1F:C0:CC:0C:9F:DF:2C:19:92:DB
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a343030303a3a2f33392d3339203d3e20323032363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         42:71:ea:2d:57:4b:1d:e5:0d:2f:0e:92:58:fd:e5:5e:a3:15:
         f9:0f:0a:8e:b9:25:00:af:b0:02:92:e5:95:c0:cd:22:9d:c7:
         8b:10:6d:1d:ea:4a:be:37:13:65:7d:6f:a1:4a:01:b2:a7:28:
         e1:27:51:8c:d2:70:d1:bf:e3:5c:10:95:39:95:2e:1c:cc:64:
         85:69:c5:66:33:cf:f9:7a:51:56:0c:7f:17:1d:f0:de:44:49:
         93:00:d8:12:93:df:e4:a1:91:32:69:00:17:85:f7:91:5e:b3:
         6c:98:c4:03:98:31:84:bc:99:8b:11:13:c9:c1:1c:10:45:00:
         7d:8f:a0:fc:6d:94:05:a2:fa:cc:7c:3e:07:71:49:d6:e3:ce:
         85:47:9d:0a:01:8c:8b:7c:45:af:ac:41:47:45:23:14:60:6f:
         2f:70:ad:42:c2:99:1b:9d:43:29:cf:6b:c3:71:3c:b6:ea:43:
         3d:df:ff:19:d4:6f:be:87:6c:3d:ef:66:93:7c:39:7c:37:2a:
         7e:85:55:21:f9:0e:f3:0a:99:13:84:80:21:27:66:0b:00:58:
         51:44:db:e6:bf:ba:ef:ce:48:1b:00:c9:5b:20:d6:f4:d3:be:
         df:dc:f1:7a:19:bb:bc:35:4d:86:54:07:27:b0:3e:06:8f:59:
         77:d8:57:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----