Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a34343a3a2f34362d3438203d3e20323038373533.roa
File:                     326130353a646663373a34343a3a2f34362d3438203d3e20323038373533.roa (raw, json)
Hash identifier:          MOOd0KVXx8bmFFZy7GzcINYYJH8zfqsd5Yd7sHzwgvA=
Subject key identifier:   7A:96:E1:5E:DD:E6:A3:15:D4:59:A2:15:C3:6B:44:6F:87:96:75:21
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       7181DFEC94E4D6C946429B7A377607213D2E2597
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a34343a3a2f34362d3438203d3e20323038373533.roa
Signing time:             Fri 14 Apr 2023 02:03:02 +0000
ROA not before:           Fri 14 Apr 2023 01:58:02 +0000
ROA not after:            Fri 12 Apr 2024 02:03:02 +0000
asID:                     208753
IP address blocks:        2a05:dfc7:44::/46 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:81:df:ec:94:e4:d6:c9:46:42:9b:7a:37:76:07:21:3d:2e:25:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:58:02 2023 GMT
            Not After : Apr 12 02:03:02 2024 GMT
        Subject: CN=7A96E15EDDE6A315D459A215C36B446F87967521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2a:79:cd:c4:55:34:c8:fa:e3:13:ff:0c:dc:
                    54:97:64:ed:d3:01:7f:76:fd:07:e9:8f:73:89:e2:
                    86:94:79:ec:06:78:05:7e:08:31:be:48:d0:45:a9:
                    9f:4f:73:83:0d:e8:a7:6c:57:b0:8d:56:f2:f3:ec:
                    67:a5:9b:f8:55:49:d0:f4:9d:50:f8:eb:c4:6a:0b:
                    f7:68:da:4e:42:ca:24:7e:96:50:fd:46:54:75:b8:
                    5c:05:90:86:34:1c:22:0d:6d:91:27:ea:5d:2d:62:
                    17:75:7c:0e:db:a4:ea:5b:3c:b3:28:c4:fa:ea:4b:
                    82:ea:b3:4e:2e:05:31:fb:8f:f2:98:b1:7b:6d:34:
                    cd:d5:3b:ec:8b:60:5f:ac:1b:d3:45:4e:96:49:cd:
                    b6:d5:8a:a0:2e:3e:23:12:75:46:c6:b6:a6:c4:54:
                    0c:c8:bc:f6:01:79:fc:36:f7:7f:ae:00:64:14:c5:
                    92:19:c0:b5:8a:7e:60:18:96:ed:df:e4:d1:6c:32:
                    4a:83:a1:57:3e:fa:bc:b9:35:a4:5d:c3:3e:5b:6d:
                    1a:a3:3e:65:b5:3b:35:28:05:d3:eb:fe:fd:9b:fa:
                    6e:5e:2a:90:04:c1:a3:c2:1c:30:50:3d:44:d3:02:
                    08:a7:41:f5:2d:4f:e2:ec:ad:24:e9:5f:24:87:06:
                    58:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:96:E1:5E:DD:E6:A3:15:D4:59:A2:15:C3:6B:44:6F:87:96:75:21
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a34343a3a2f34362d3438203d3e20323038373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:44::/46

    Signature Algorithm: sha256WithRSAEncryption
         a1:4d:87:9b:da:26:e8:6f:96:b3:33:29:3a:0d:2e:71:e3:41:
         1f:f8:5e:0d:c2:6f:40:88:35:01:20:97:06:64:35:e0:e4:f4:
         eb:ba:43:af:bb:cf:9f:ad:37:5d:b4:b0:22:41:ee:a9:c9:e3:
         e7:ce:96:fd:7e:e9:fb:6a:75:7f:fc:2b:71:fd:da:98:c2:8b:
         52:db:78:55:15:b2:a4:2c:69:96:95:da:af:c1:73:d5:87:ea:
         6b:e3:6e:57:d1:f5:9f:64:65:6d:f5:b7:a2:f4:7d:f3:7d:4f:
         32:64:18:df:f9:49:8b:8b:a7:3a:69:47:75:b4:95:73:94:7a:
         eb:4d:6e:90:c2:33:63:a3:86:12:e8:a6:85:e2:56:9a:0e:1a:
         b7:81:ed:b2:ae:16:bf:56:1d:91:d9:de:98:b0:ee:02:fa:0a:
         09:3e:dd:68:5d:7a:b7:56:dd:dc:71:19:87:b2:7d:44:ff:8e:
         56:16:21:77:48:b2:cd:99:fe:a4:1f:a8:48:f1:7b:7c:5d:97:
         38:33:ee:7d:f1:63:68:3e:2b:32:95:7c:e8:a2:4b:3f:6a:23:
         4c:2b:08:ed:76:33:68:22:76:2e:65:d7:cc:64:a4:15:78:db:
         fd:c0:38:81:77:cb:41:c4:2d:53:35:dc:42:58:82:17:68:a2:
         e0:3f:9d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----