Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a3430303a3a2f34332d3433203d3e20323035343332.roa
File:                     326130353a646663373a3430303a3a2f34332d3433203d3e20323035343332.roa (raw, json)
Hash identifier:          ARQO+FPLds/KiwC+HefQ6tLw5vqGtDz84GJbfSBNSlo=
Subject key identifier:   9A:61:0A:D4:5D:3A:8D:81:71:B2:7D:0E:84:4B:CB:F0:F4:0F:5B:4F
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       1D0E9185C4371B6A1CE523165F8D358ECD560909
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a3430303a3a2f34332d3433203d3e20323035343332.roa
Signing time:             Fri 14 Apr 2023 01:54:19 +0000
ROA not before:           Fri 14 Apr 2023 01:49:19 +0000
ROA not after:            Fri 12 Apr 2024 01:54:19 +0000
asID:                     205432
IP address blocks:        2a05:dfc7:400::/43 maxlen: 43

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0e:91:85:c4:37:1b:6a:1c:e5:23:16:5f:8d:35:8e:cd:56:09:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:49:19 2023 GMT
            Not After : Apr 12 01:54:19 2024 GMT
        Subject: CN=9A610AD45D3A8D8171B27D0E844BCBF0F40F5B4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:00:4e:9d:9a:b9:24:66:8a:e2:8e:6c:6e:da:
                    5a:d1:5c:b0:22:70:c9:b0:4f:36:26:03:be:17:4a:
                    e1:18:22:fd:bb:05:15:dc:bf:75:38:42:c5:ba:b4:
                    43:81:9b:79:a7:a7:12:bf:63:c8:96:df:9c:c3:c4:
                    ed:de:dc:7f:73:31:ae:2b:f2:61:35:8c:72:40:07:
                    73:b3:4e:0b:64:16:84:c7:96:d8:6c:40:45:5c:b2:
                    06:7b:98:9b:1e:7d:32:f0:8a:00:85:2c:68:f3:74:
                    c5:af:cd:dc:64:40:0c:ca:f4:5d:80:6a:67:46:fc:
                    b5:b4:d1:aa:fc:1e:52:93:da:68:ca:48:8d:12:96:
                    b1:56:38:dc:31:f2:fd:cd:48:6a:75:27:46:6c:60:
                    33:31:d3:09:a0:e8:61:56:f5:d7:07:e8:9b:1b:35:
                    a5:00:89:32:75:e3:1a:08:bb:07:f6:e7:61:3c:d3:
                    c4:e9:70:55:eb:c3:03:25:0b:b7:ae:52:8f:49:40:
                    63:a5:2c:f2:4a:55:00:d1:e0:33:de:82:35:c0:fe:
                    a1:ab:c6:0e:f4:2c:5b:56:3f:c5:9a:64:8f:e3:5e:
                    5a:4f:35:a1:06:91:55:93:53:aa:0a:7d:df:0b:df:
                    36:ed:92:24:6e:43:e9:91:f9:80:2d:af:17:d3:6f:
                    fe:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:61:0A:D4:5D:3A:8D:81:71:B2:7D:0E:84:4B:CB:F0:F4:0F:5B:4F
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a3430303a3a2f34332d3433203d3e20323035343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:400::/43

    Signature Algorithm: sha256WithRSAEncryption
         c6:35:db:d7:2e:3d:34:89:af:7a:63:a7:c6:0d:ff:e3:e3:57:
         4c:d4:76:b6:0a:65:05:ab:e1:5b:fb:0e:0b:69:e1:8f:a9:6a:
         db:a2:58:f3:00:8d:59:ae:5d:75:dd:72:e1:1f:7e:85:34:23:
         94:94:9b:47:4d:47:b1:32:1a:19:ef:6a:9c:6f:80:3d:76:80:
         62:7c:69:24:fe:8f:ce:f5:3d:1e:39:39:cd:a1:ad:8a:af:e3:
         72:6c:b9:c2:14:99:d8:3f:59:ad:63:11:db:a3:a8:a3:bd:13:
         33:63:f9:1d:62:94:e2:3b:f3:09:a0:fc:84:b9:2f:d3:ef:20:
         0d:9b:fc:ce:d4:57:c7:ea:b5:bf:7e:1a:64:3c:c0:b1:48:5d:
         a4:60:6e:70:7e:b2:5f:5c:f1:d2:a4:2e:dc:b3:ab:b0:d9:13:
         20:cf:b4:3a:68:1a:eb:20:9a:6e:05:11:67:20:0d:75:26:a0:
         64:eb:73:00:a2:78:a5:78:bb:0f:3d:0d:b2:80:f8:fc:33:1b:
         4f:b4:b9:cf:b1:6c:1b:ea:42:52:bb:c2:b1:77:03:ef:bc:07:
         3b:69:8d:a7:f9:34:d5:2b:92:64:42:f4:bb:ac:c2:c3:d7:f9:
         18:5f:d6:42:0f:90:73:49:5d:be:8f:75:eb:03:09:65:21:c5:
         57:5c:b3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:22 2023 by rpki-client on console-ams.rpki-client.org