Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a353030303a3a2f33392d3339203d3e203634343537.roa
File:                     326130353a646663373a353030303a3a2f33392d3339203d3e203634343537.roa (raw, json)
Hash identifier:          ViM47xMxPYtt9ep65V5Eqs2LErocvXSn14QnHd62okc=
Subject key identifier:   A2:9E:91:5C:AA:B6:E8:0C:1A:B3:2D:5C:7A:8F:4A:F3:A0:7A:5E:D7
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       17AD5C9DB424116A899ADCACCD5CBA98C2200543
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a353030303a3a2f33392d3339203d3e203634343537.roa
Signing time:             Fri 14 Apr 2023 01:41:44 +0000
ROA not before:           Fri 14 Apr 2023 01:36:44 +0000
ROA not after:            Fri 12 Apr 2024 01:41:44 +0000
asID:                     64457
IP address blocks:        2a05:dfc7:5000::/39 maxlen: 39

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ad:5c:9d:b4:24:11:6a:89:9a:dc:ac:cd:5c:ba:98:c2:20:05:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:36:44 2023 GMT
            Not After : Apr 12 01:41:44 2024 GMT
        Subject: CN=A29E915CAAB6E80C1AB32D5C7A8F4AF3A07A5ED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:79:20:21:35:24:7e:3e:c1:06:59:04:be:0f:
                    f9:e1:80:59:51:2b:ad:3a:f3:f4:85:6e:ae:f8:26:
                    b1:77:fc:a1:40:7a:f4:66:a4:27:80:88:ee:c6:83:
                    e7:92:a9:e4:fc:0c:5a:0a:42:e5:ca:7c:24:73:cd:
                    81:e5:b9:d4:38:40:b6:e6:59:25:e2:0e:d9:8e:ee:
                    28:56:a5:92:b8:38:c2:67:b6:07:e4:d9:30:45:70:
                    3c:b3:09:82:8b:da:1b:6f:36:2b:26:8c:dc:42:eb:
                    c4:6e:b7:88:2c:01:31:25:a0:23:70:bf:55:d6:a2:
                    9b:b6:84:37:86:a1:c4:25:94:8b:cc:4b:f5:0f:04:
                    5a:8a:47:ee:ac:b6:23:37:24:14:1b:66:f7:91:ab:
                    5e:ff:8e:94:17:fe:72:c4:f9:6b:18:b4:ef:28:cf:
                    64:c4:86:b2:20:c2:6a:73:9f:29:2c:39:14:3a:d7:
                    01:37:2e:36:7f:a5:42:a2:4d:cf:89:85:6c:24:57:
                    61:3a:d8:5f:5f:7b:34:20:03:34:d7:7b:25:03:96:
                    8a:7b:65:5c:15:2d:f1:01:84:d9:c8:cc:e9:44:92:
                    cc:42:8f:30:8c:56:b6:9b:89:20:0b:d8:73:c1:c6:
                    99:99:34:cf:1e:45:9b:b7:44:0a:d0:5d:e8:91:99:
                    65:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9E:91:5C:AA:B6:E8:0C:1A:B3:2D:5C:7A:8F:4A:F3:A0:7A:5E:D7
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a353030303a3a2f33392d3339203d3e203634343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:5000::/39

    Signature Algorithm: sha256WithRSAEncryption
         4a:ba:9e:dc:ca:89:d1:b4:81:7a:8a:87:6a:63:8d:9a:cc:32:
         ee:36:4b:9e:01:4b:27:1a:a9:44:5d:da:e8:88:ed:81:8f:99:
         cd:cb:83:28:95:b8:0e:ff:75:9d:73:5c:36:80:a7:15:6d:49:
         b1:24:14:14:76:68:a6:1a:7d:bd:60:ac:7d:28:27:b7:6c:a6:
         d1:b4:fb:cc:a1:62:60:d9:0a:5d:7f:22:2b:b5:bf:a4:4c:91:
         0d:d1:1b:a4:b6:d9:11:3d:34:fd:e9:9d:29:35:2a:8d:6b:be:
         1b:5f:3a:aa:74:55:48:a6:f9:22:da:91:5a:5b:25:34:8b:75:
         8f:96:eb:30:ac:64:91:64:6e:45:3b:e1:80:bf:9f:5a:aa:3f:
         7a:c4:ba:6d:28:35:a0:20:41:b2:ee:22:37:71:22:98:a2:37:
         76:28:38:7a:ae:0e:b4:9d:88:a0:37:1a:96:9e:1e:14:28:01:
         06:7b:82:c6:7c:92:01:02:ca:e5:bc:68:76:61:3b:e8:ff:3c:
         56:93:62:6f:a6:e9:55:73:fe:51:0d:cd:ef:ac:e1:21:67:fd:
         a6:13:6f:ce:3e:c6:0c:73:68:92:cf:ab:1b:97:e3:9b:02:26:
         a2:50:08:ff:4f:77:25:4d:42:f8:e6:95:d1:46:99:c8:b2:2c:
         99:07:85:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----