Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a343430303a3a2f33392d3339203d3e20323033303639.roa
File:                     326130353a646663373a343430303a3a2f33392d3339203d3e20323033303639.roa (raw, json)
Hash identifier:          UYd6of6XxGevsN9sICdsyc3NdgvA8kVm1loJyGTNcPk=
Subject key identifier:   96:A2:81:FA:DE:98:EA:64:51:E0:51:A2:28:4B:EC:41:EA:A2:83:79
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       5B999039992D89700BD68C45702720A90E951DC3
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a343430303a3a2f33392d3339203d3e20323033303639.roa
Signing time:             Fri 14 Apr 2023 02:05:06 +0000
ROA not before:           Fri 14 Apr 2023 02:00:06 +0000
ROA not after:            Fri 12 Apr 2024 02:05:06 +0000
asID:                     203069
IP address blocks:        2a05:dfc7:4400::/39 maxlen: 39

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:99:90:39:99:2d:89:70:0b:d6:8c:45:70:27:20:a9:0e:95:1d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:00:06 2023 GMT
            Not After : Apr 12 02:05:06 2024 GMT
        Subject: CN=96A281FADE98EA6451E051A2284BEC41EAA28379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6f:e2:f2:14:5a:3c:12:c7:c4:83:13:29:31:
                    dc:7b:f1:4e:08:12:7d:2d:73:b3:08:55:2d:a1:fb:
                    d7:8c:b0:62:bf:a0:46:17:fd:5b:b4:e4:77:f1:94:
                    10:2d:ea:ec:0c:d1:7b:26:34:67:8c:1c:f7:22:69:
                    0c:22:73:fc:cc:0a:1c:40:50:5b:37:d9:0f:90:5b:
                    fa:c6:ad:48:fa:ae:c9:a8:e2:6a:df:19:d0:9b:dc:
                    f8:21:61:4b:e6:95:e0:0a:89:4a:8e:82:f7:5e:cc:
                    27:30:2f:d4:06:31:12:92:45:77:58:a8:b4:de:a8:
                    8b:be:4e:49:c3:81:75:c0:e0:51:75:79:93:e5:71:
                    f1:05:f9:8b:d1:28:59:98:bd:37:3f:54:d7:a1:27:
                    f2:94:e4:df:83:06:fb:fa:7f:74:6d:01:ef:49:2b:
                    cc:68:c8:71:29:38:03:f4:8e:df:7f:c3:f5:4b:34:
                    5a:fd:36:b7:10:4f:c1:63:39:7c:4b:58:b9:d8:8a:
                    bc:e6:ae:94:72:3f:47:07:10:40:34:c3:ed:96:1d:
                    62:a0:dc:18:82:63:a6:63:a0:e1:a7:4b:ab:7c:c7:
                    df:00:a7:07:12:f9:73:be:a2:ae:90:6a:d1:b9:b7:
                    2f:24:83:d5:e8:31:55:f8:83:a1:40:7c:3d:c7:19:
                    62:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A2:81:FA:DE:98:EA:64:51:E0:51:A2:28:4B:EC:41:EA:A2:83:79
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a343430303a3a2f33392d3339203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:4400::/39

    Signature Algorithm: sha256WithRSAEncryption
         50:7a:73:c9:f9:a6:36:61:9a:52:84:32:05:6e:e6:f7:24:c9:
         22:b2:a1:ac:00:8a:a4:5b:53:be:ac:2b:d6:15:94:07:9d:f6:
         ce:93:8d:bb:3b:ad:5a:b3:82:13:03:d4:b6:5b:0b:a8:14:a6:
         0f:ed:d6:5d:b8:6a:f0:b3:81:4b:fc:42:e2:62:d9:43:d6:ce:
         e3:83:ce:56:fa:ec:ae:91:18:c5:96:b7:ed:48:c9:3a:51:0a:
         99:97:1f:ac:e4:b2:16:76:6a:60:8e:8b:90:a5:e7:ef:5d:fc:
         fb:d1:84:28:fa:f9:15:8f:dc:a6:04:e7:bf:cf:84:97:de:da:
         a3:be:e4:c4:bf:e0:eb:61:9b:25:a3:09:5d:9d:76:cc:e9:00:
         5b:88:dc:0e:01:a5:40:1d:2b:50:8e:1d:04:5f:ac:78:af:fb:
         66:37:53:b6:1e:6d:81:57:ba:06:e7:60:af:cb:b0:22:84:0b:
         22:e8:42:01:df:b1:3e:03:7d:6c:30:1d:f9:65:f0:b4:01:cf:
         ea:f3:f4:29:ab:d1:b0:d1:70:78:2c:2e:5f:d0:87:39:02:01:
         51:7d:de:97:c1:44:0d:a6:7e:1d:e1:5e:82:fa:16:e0:bc:f3:
         64:14:50:98:10:a1:e2:5f:3b:e1:a7:68:08:c1:5f:f6:de:a3:
         6d:2a:77:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----