Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a363030303a3a2f33392d3339203d3e20323033303639.roa
File:                     326130353a646663373a363030303a3a2f33392d3339203d3e20323033303639.roa (raw, json)
Hash identifier:          bd4qzj7X9uW+b2EWdcDt3m3eiWOpEN4xNoRB1lJ6guA=
Subject key identifier:   3A:77:A0:21:ED:BA:F1:02:64:90:C7:95:6D:C1:AB:05:82:1E:93:0F
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       7452EB14FF9B9237E72465AD4485C278DC57C937
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a363030303a3a2f33392d3339203d3e20323033303639.roa
Signing time:             Fri 14 Apr 2023 02:06:29 +0000
ROA not before:           Fri 14 Apr 2023 02:01:29 +0000
ROA not after:            Fri 12 Apr 2024 02:06:29 +0000
asID:                     203069
IP address blocks:        2a05:dfc7:6000::/39 maxlen: 39

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:52:eb:14:ff:9b:92:37:e7:24:65:ad:44:85:c2:78:dc:57:c9:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:01:29 2023 GMT
            Not After : Apr 12 02:06:29 2024 GMT
        Subject: CN=3A77A021EDBAF1026490C7956DC1AB05821E930F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:83:39:4f:f2:62:e2:de:19:55:b0:17:9d:
                    07:b4:df:3b:ec:c4:3f:1f:86:38:86:a6:29:22:3c:
                    4f:51:b7:68:67:0f:98:69:83:dc:b9:43:e7:fb:34:
                    8b:45:0e:53:b5:58:f1:3f:30:88:a9:ff:a7:6e:b4:
                    99:95:18:71:f0:b0:fe:6d:e4:34:bb:1c:81:78:61:
                    a7:10:bb:ef:04:69:0c:16:c9:95:16:c9:58:7d:02:
                    6d:5f:f0:38:f5:f3:3a:3f:ff:e0:ab:1f:7f:e6:3c:
                    fa:4e:e3:c6:d0:06:fa:ee:d7:b7:92:cb:4c:e0:46:
                    9c:1a:ff:7e:3b:77:c1:f2:e8:44:4b:5b:82:f5:28:
                    35:2c:0f:14:28:d9:dc:aa:94:7b:b1:4a:72:11:44:
                    b3:07:cc:f8:1e:90:5c:62:a8:b3:71:c0:1a:0c:34:
                    e6:e4:1d:ec:8b:50:fc:07:e1:85:79:51:89:db:0a:
                    79:74:b5:ed:70:05:2f:61:51:05:9f:b9:3c:80:01:
                    b0:64:c3:38:5b:8a:20:52:d1:50:3b:d3:67:b6:3b:
                    df:2e:e4:c0:36:70:fd:81:a3:a6:11:ea:ba:af:e8:
                    e4:91:05:04:7d:df:f6:0c:e0:e3:29:78:31:a8:65:
                    e6:e3:ed:a8:73:e6:c7:49:20:cd:19:04:9f:a2:95:
                    5d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:77:A0:21:ED:BA:F1:02:64:90:C7:95:6D:C1:AB:05:82:1E:93:0F
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a363030303a3a2f33392d3339203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:6000::/39

    Signature Algorithm: sha256WithRSAEncryption
         31:de:23:01:3a:99:27:30:28:b9:0e:ab:66:93:19:56:c0:f7:
         a4:65:31:ba:3f:9a:f6:b0:d2:37:41:5f:c6:bc:67:9c:7e:58:
         e7:e9:8a:07:68:67:7f:48:e9:c6:16:f7:e4:42:2f:9c:33:84:
         cc:b4:11:ab:c1:b6:b2:58:f6:dc:9a:7f:b1:f3:93:18:65:3c:
         14:e3:8c:85:8e:3f:13:a1:9c:8b:af:e9:14:f4:8c:2b:ca:6e:
         8a:31:ad:81:51:f2:81:8f:d1:78:b7:30:52:1e:93:72:72:27:
         7a:d3:c0:10:b4:7b:a8:df:2f:6c:10:40:3b:94:fa:74:a7:38:
         ed:62:33:20:dd:79:4b:b1:e3:a0:13:c2:82:e8:3d:ee:24:70:
         fa:ca:39:f7:9d:f4:54:a8:ca:d4:7b:5c:17:99:50:7a:a9:68:
         e2:a8:a2:29:d5:d1:d6:1d:5d:97:18:43:56:7d:18:b2:f4:e3:
         b7:5f:69:b9:e0:4e:a7:d7:d1:89:89:4a:cf:5b:5a:46:05:f2:
         f4:66:b5:2b:b0:77:85:78:52:5c:0a:88:00:df:f9:3c:af:2c:
         88:75:3f:3a:a1:c7:3e:91:a2:b1:c4:a8:41:12:96:50:69:a7:
         23:1e:4d:46:dc:ba:fe:ab:1d:95:5d:10:ea:0c:e7:c2:c5:01:
         10:fa:25:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----