Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a343630303a3a2f34302d3430203d3e20323133333237.roa
File:                     326130353a646663373a343630303a3a2f34302d3430203d3e20323133333237.roa (raw, json)
Hash identifier:          WhKCZZbnRSXdDUhQxR/88+ezzV4NQD0PhiehixIvDs4=
Subject key identifier:   F7:6B:D2:16:CD:45:44:F6:C7:D1:74:DA:BB:9E:2F:A7:F6:73:2E:A8
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       47A803D08D112C37F0E38CA5E0C6A37AB0B73E58
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a343630303a3a2f34302d3430203d3e20323133333237.roa
Signing time:             Fri 14 Apr 2023 02:17:04 +0000
ROA not before:           Fri 14 Apr 2023 02:12:04 +0000
ROA not after:            Fri 12 Apr 2024 02:17:04 +0000
asID:                     213327
IP address blocks:        2a05:dfc7:4600::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a8:03:d0:8d:11:2c:37:f0:e3:8c:a5:e0:c6:a3:7a:b0:b7:3e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:12:04 2023 GMT
            Not After : Apr 12 02:17:04 2024 GMT
        Subject: CN=F76BD216CD4544F6C7D174DABB9E2FA7F6732EA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9b:5b:63:40:0c:5a:c0:d4:69:70:7c:4a:6c:
                    bc:8f:a4:ec:d6:a2:1c:18:f0:87:62:a8:17:5a:14:
                    3e:e2:c8:3e:f8:86:95:fe:78:ef:df:a7:89:2e:ac:
                    69:ba:7f:f0:05:bc:4b:45:af:65:a3:42:f6:37:86:
                    ef:4f:7c:a5:1b:64:1d:48:12:51:78:84:38:a2:9a:
                    6c:c9:31:61:f8:16:fc:c7:12:82:85:b5:bb:d4:d9:
                    de:ec:37:1d:b4:31:b0:32:6d:17:d2:f7:2a:39:29:
                    32:59:17:71:6a:15:be:9c:38:32:34:96:f8:da:43:
                    04:bb:40:db:ff:7c:44:01:f1:53:60:20:35:30:68:
                    27:f0:82:68:b8:5d:c6:5c:3e:97:fb:92:8d:f9:99:
                    86:ad:1d:55:9a:0a:96:0d:09:ac:25:18:ad:53:42:
                    1f:33:b1:07:d6:32:cf:a5:60:a9:c4:75:ea:02:c4:
                    43:47:78:fd:7f:28:09:02:e8:00:18:b7:f1:0f:ca:
                    5d:40:78:de:8b:3d:4d:b6:3c:cc:32:32:27:8f:cc:
                    44:11:4e:3e:ab:ca:ca:68:ff:02:33:bd:74:b7:48:
                    da:63:6d:af:cf:75:8d:9c:8b:f1:58:75:ea:42:d2:
                    7b:85:b8:7b:d3:c1:fb:29:c5:98:17:9b:0b:ec:35:
                    8b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6B:D2:16:CD:45:44:F6:C7:D1:74:DA:BB:9E:2F:A7:F6:73:2E:A8
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a343630303a3a2f34302d3430203d3e20323133333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:4600::/40

    Signature Algorithm: sha256WithRSAEncryption
         9c:7c:a4:59:17:8d:47:6b:00:eb:a7:ee:24:c0:05:0f:d9:00:
         83:ac:9e:6f:7d:61:9c:73:cc:21:d0:d1:cc:25:ed:aa:27:7c:
         e8:7b:dd:ab:48:4c:4f:f1:f0:55:e9:5c:f2:ff:7f:b8:57:5e:
         d0:5e:d5:8c:89:17:07:da:7f:4f:c0:be:5f:fe:7b:8f:51:28:
         da:50:83:de:f1:2d:6f:6a:e4:3b:4b:38:93:c0:00:a1:95:6a:
         b9:35:5d:1b:e7:07:60:ac:a9:fe:5f:42:1f:b5:df:6a:42:92:
         c7:23:fc:17:df:9d:01:11:f1:06:78:cd:b1:61:33:ac:ea:58:
         79:63:f8:4c:05:ef:6c:55:4e:85:77:93:20:d3:40:ee:47:4f:
         b4:15:6c:ed:a3:ef:79:87:c6:1b:96:1f:7b:9c:d5:c0:db:e3:
         d7:5e:95:69:75:a1:55:0d:a9:8d:16:b4:ff:cd:fa:a6:af:a9:
         86:23:63:ff:09:9d:91:44:65:3b:97:ca:45:65:cc:49:46:cf:
         b5:85:c8:c4:77:59:80:ab:d5:e6:4d:59:b3:06:94:21:18:50:
         dc:30:69:35:e5:29:c6:4c:b6:0d:57:09:6b:f0:1d:ad:7f:36:
         6a:d9:10:1a:ec:4e:9c:0e:0f:92:f7:d3:37:76:72:e0:91:b2:
         49:b1:4c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----