Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a353830303a3a2f33392d3339203d3e20323132383238.roa
File:                     326130353a646663373a353830303a3a2f33392d3339203d3e20323132383238.roa (raw, json)
Hash identifier:          +T4Y0fw3ccE4y2t4sZ00kLdVptk0hpxTax+KVF7pFE8=
Subject key identifier:   75:99:1B:0D:E3:A6:AC:AA:66:14:E7:3C:10:BB:1D:FB:1E:06:29:5E
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       4FBD01301CAAA4A2F9A93BB4A79AE694D4781783
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a353830303a3a2f33392d3339203d3e20323132383238.roa
Signing time:             Fri 14 Apr 2023 02:16:45 +0000
ROA not before:           Fri 14 Apr 2023 02:11:45 +0000
ROA not after:            Fri 12 Apr 2024 02:16:45 +0000
asID:                     212828
IP address blocks:        2a05:dfc7:5800::/39 maxlen: 39

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:bd:01:30:1c:aa:a4:a2:f9:a9:3b:b4:a7:9a:e6:94:d4:78:17:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:11:45 2023 GMT
            Not After : Apr 12 02:16:45 2024 GMT
        Subject: CN=75991B0DE3A6ACAA6614E73C10BB1DFB1E06295E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:47:9a:6c:de:7a:11:ee:ec:d5:f4:9b:13:25:
                    4c:dc:ef:29:67:aa:71:82:9b:64:81:82:64:a8:3d:
                    6e:30:fa:ed:b5:68:30:f6:80:cd:92:41:f6:a2:03:
                    14:8f:b7:74:8b:ff:3d:31:a1:08:4d:4a:03:0e:e8:
                    28:fc:24:75:23:dc:0d:c2:a1:b1:d6:65:22:0d:8a:
                    48:b1:92:40:06:bb:55:bc:df:c1:8a:ea:2c:38:c9:
                    61:3a:2b:94:c4:ba:d6:70:dc:eb:d2:00:05:b0:bd:
                    4a:16:ff:53:e1:48:a6:6a:f4:2c:5f:cd:b5:b2:57:
                    8d:55:3c:2c:24:6b:64:d7:7c:3f:f4:36:00:e2:54:
                    52:59:ec:df:7f:2b:8a:85:40:38:4d:f0:7f:25:02:
                    fd:d9:72:66:b9:7f:f0:95:cb:1a:ad:9d:0b:5f:1d:
                    ed:8a:db:ae:a2:e7:8a:fb:e2:75:27:fb:47:20:a3:
                    8b:b0:c0:74:ad:4b:98:2c:0f:e8:28:54:72:69:0e:
                    5c:ed:18:1d:d2:fa:8b:bd:7c:7d:75:b9:b1:55:3f:
                    e2:3f:1e:46:0b:0c:c5:f2:8a:ca:29:a8:1b:c8:f4:
                    b5:9c:b5:2a:83:0b:95:c2:a7:ea:bc:13:92:01:04:
                    5d:7e:69:22:ec:43:3e:b2:84:fb:bc:24:9c:a9:44:
                    5c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:99:1B:0D:E3:A6:AC:AA:66:14:E7:3C:10:BB:1D:FB:1E:06:29:5E
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a353830303a3a2f33392d3339203d3e20323132383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:5800::/39

    Signature Algorithm: sha256WithRSAEncryption
         a1:22:3f:00:c5:bd:b1:8d:6d:e3:d8:fe:7a:06:a6:73:eb:24:
         8a:60:a1:84:71:b1:93:08:de:5c:df:32:da:40:48:63:f8:12:
         b4:27:63:f2:20:a2:5a:27:a0:cf:ae:d0:9f:76:e5:4d:69:bc:
         d1:c9:cc:88:30:1b:9e:07:6c:27:58:36:a4:f0:00:2a:16:90:
         51:44:f4:7c:2c:b0:2c:07:39:c4:fd:87:dd:23:2b:91:0b:8e:
         aa:a4:22:ed:f3:c7:5d:6f:3f:b6:84:f7:3b:2a:c1:46:bf:2b:
         9c:f5:d5:9e:e3:da:b8:44:22:63:c7:e8:88:65:11:9c:bd:38:
         c8:b7:be:90:3c:76:3e:03:fa:46:75:24:a6:36:85:c7:bd:56:
         53:a7:e1:23:5f:67:c8:75:bc:1d:d5:11:fb:bd:85:20:18:0a:
         ce:58:6d:d7:1b:c8:b2:b2:70:59:7e:a9:5d:6e:04:81:0b:70:
         8b:aa:3c:66:82:48:c6:1a:47:bb:d7:91:f8:7b:b4:f1:9b:c5:
         c3:27:f7:0c:ab:94:8b:e2:24:e1:22:6c:22:ee:05:74:40:56:
         95:2e:58:47:ad:96:ab:f2:ce:f6:54:4f:56:8a:f4:36:bd:8a:
         62:06:4d:7d:8e:96:37:06:33:4d:12:68:d4:cb:dd:8d:cb:4e:
         86:f3:b2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----