Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a343830303a3a2f34302d3438203d3e20323033303639.roa
File:                     326130353a646663373a343830303a3a2f34302d3438203d3e20323033303639.roa (raw, json)
Hash identifier:          r/UjBvPCqTFoZ8QwwVtgbktcuNT1LAQSVAbYZdZQSkA=
Subject key identifier:   C7:8B:DD:6D:AD:70:FC:20:5E:AC:3F:E3:F0:F0:4A:B6:F7:90:2A:96
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       0F64C821114D9B6FA97A4ADAF92107F9DBC88AE0
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a343830303a3a2f34302d3438203d3e20323033303639.roa
Signing time:             Fri 14 Apr 2023 02:05:30 +0000
ROA not before:           Fri 14 Apr 2023 02:00:30 +0000
ROA not after:            Fri 12 Apr 2024 02:05:30 +0000
asID:                     203069
IP address blocks:        2a05:dfc7:4800::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:64:c8:21:11:4d:9b:6f:a9:7a:4a:da:f9:21:07:f9:db:c8:8a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:00:30 2023 GMT
            Not After : Apr 12 02:05:30 2024 GMT
        Subject: CN=C78BDD6DAD70FC205EAC3FE3F0F04AB6F7902A96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a4:d0:0a:45:c6:c0:31:97:42:d8:52:1e:fe:
                    cb:6e:d4:47:4a:7e:2b:b1:42:f6:a6:11:49:1b:c3:
                    fa:df:15:2d:f0:1e:1b:44:65:d3:57:79:6f:5e:0a:
                    a7:22:0a:61:bb:b5:93:86:f6:a4:5d:d5:71:69:df:
                    32:15:78:9a:0d:70:2e:23:90:71:c3:42:a1:4f:7c:
                    49:30:75:ef:41:94:9a:df:8a:d5:97:73:2a:e5:42:
                    b1:28:a1:50:58:6c:11:29:4a:1d:fe:2b:4b:0a:5b:
                    e6:18:83:b0:6c:81:73:1c:6f:51:ac:15:d1:fe:d8:
                    24:5d:68:73:e9:d7:aa:fe:ca:53:e5:61:38:ed:4e:
                    0e:41:c8:51:9f:51:e1:a0:e8:77:74:b1:91:6f:f4:
                    ec:9c:26:f1:aa:ec:95:08:8e:02:24:eb:48:56:d8:
                    a2:21:6f:d2:17:81:8e:0d:1c:dc:2b:ab:f4:52:46:
                    bc:aa:21:d1:a6:03:03:58:6f:a8:9f:e7:3a:ac:ec:
                    00:6a:dc:94:f6:ae:9d:8c:52:d0:b4:8a:67:cb:b7:
                    96:29:d8:bd:8c:11:cd:8f:e6:c0:03:a8:54:f9:10:
                    52:d7:f4:89:06:6f:30:7f:11:2e:54:51:ba:41:43:
                    9a:26:b7:07:02:fd:d4:a4:ec:c8:77:55:df:92:23:
                    1c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8B:DD:6D:AD:70:FC:20:5E:AC:3F:E3:F0:F0:4A:B6:F7:90:2A:96
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a343830303a3a2f34302d3438203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         8d:62:29:ef:cd:e0:31:bd:16:08:58:02:d1:85:d3:25:3f:5c:
         9d:19:f6:44:91:6d:b7:23:57:f2:f4:98:98:2f:c4:40:55:59:
         3f:02:cb:d7:14:dc:88:db:6c:3f:9b:6d:d9:a0:da:69:be:ee:
         3c:d4:64:41:87:3c:70:3d:6b:d0:c4:07:4b:76:24:fd:c1:92:
         f8:e7:72:e8:2e:55:5e:2e:fa:af:52:03:90:79:9a:5c:78:f8:
         f3:af:67:49:ad:d4:93:f2:85:a2:1a:9c:36:22:c0:6a:cd:4e:
         ce:eb:cd:c9:2e:e0:80:7f:fe:b0:1b:7f:b7:fa:6b:fd:bb:53:
         44:01:c1:01:d5:37:b0:f0:c9:7d:dd:c1:80:b2:8e:f7:f1:e2:
         4f:a5:43:e4:77:8b:2f:3a:b8:2b:e5:46:e1:ad:e7:e3:44:15:
         4e:cf:8d:c7:f5:43:34:a1:d7:a9:38:9c:e4:f6:25:66:59:67:
         65:72:02:9c:a3:93:a8:e2:a6:40:d3:3f:97:59:03:eb:08:74:
         a1:2a:9c:1e:36:db:40:09:f4:46:f4:ca:ff:87:1c:66:78:80:
         80:69:c1:64:41:bf:ea:26:45:71:47:67:0c:8a:65:21:ec:76:
         de:2b:d0:42:b2:67:74:43:dd:82:ff:c5:16:22:16:2c:bb:0a:
         a0:7d:84:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----