Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a363430303a3a2f34302d3438203d3e20323033383838.roa
File:                     326130353a646663373a363430303a3a2f34302d3438203d3e20323033383838.roa (raw, json)
Hash identifier:          U4CbTVlKK2JRSzCQLzCfuvA332N+2rKsfoz0t/xMQ7A=
Subject key identifier:   96:EA:00:99:D0:AC:D5:BD:BC:3B:00:CD:58:0A:D2:4D:E3:EA:CA:20
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       2933A4DAE339C29816507BD016F491DAC5274D4B
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a363430303a3a2f34302d3438203d3e20323033383838.roa
Signing time:             Fri 14 Apr 2023 02:10:41 +0000
ROA not before:           Fri 14 Apr 2023 02:05:41 +0000
ROA not after:            Fri 12 Apr 2024 02:10:41 +0000
asID:                     203888
IP address blocks:        2a05:dfc7:6400::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:33:a4:da:e3:39:c2:98:16:50:7b:d0:16:f4:91:da:c5:27:4d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:05:41 2023 GMT
            Not After : Apr 12 02:10:41 2024 GMT
        Subject: CN=96EA0099D0ACD5BDBC3B00CD580AD24DE3EACA20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:a2:4e:75:a4:06:da:82:10:5b:4b:57:e0:
                    47:1e:8e:1a:66:ce:dd:25:17:23:bc:57:2f:cf:94:
                    e8:79:6a:43:45:7d:de:72:b2:de:06:82:5f:ff:5b:
                    70:10:f0:57:61:0b:d8:cf:fb:10:f0:be:d9:7e:6f:
                    a8:1a:41:35:bd:9b:03:32:b2:6c:3c:63:39:1d:5d:
                    20:17:e0:31:3e:5f:d7:2f:2b:4d:45:0e:05:4b:d3:
                    af:4b:69:4c:76:dc:12:0e:bf:19:9d:13:2a:0e:f9:
                    78:f7:f5:d7:ff:f5:d8:34:ac:a0:d0:7c:8b:dc:4b:
                    e9:66:47:7a:e9:b5:da:00:55:a5:c1:99:65:e7:ee:
                    b4:03:f4:fb:ec:fc:06:b7:d8:41:e5:b0:5c:67:62:
                    48:3a:3e:33:5e:08:a9:09:93:7d:3b:01:12:4b:1e:
                    bd:41:bf:23:14:1d:dc:67:e0:3e:47:1e:dd:25:44:
                    1e:82:b5:04:76:2c:18:93:51:f0:c7:99:36:94:94:
                    a3:5c:16:3e:e3:4f:2e:85:c5:2b:4d:50:b2:5b:4f:
                    e8:24:d0:b3:65:c3:d6:4e:6f:9c:7b:ae:2d:ef:47:
                    24:ab:96:c4:e6:a2:49:c1:d8:75:6b:00:71:42:57:
                    29:21:c8:37:68:74:0e:a1:b8:53:83:c8:d9:d6:a3:
                    2b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EA:00:99:D0:AC:D5:BD:BC:3B:00:CD:58:0A:D2:4D:E3:EA:CA:20
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a363430303a3a2f34302d3438203d3e20323033383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:6400::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:b6:e0:2d:ec:ab:44:01:79:69:ee:00:41:61:25:40:79:dc:
         3d:c6:91:95:af:ea:85:e5:c3:5e:a3:5f:da:9c:97:37:21:ab:
         f3:5b:57:89:08:12:89:07:0d:54:7e:58:4b:5f:fe:af:1e:36:
         7a:7d:1b:36:cd:2a:19:fe:f1:b4:71:f8:ea:62:76:21:17:4c:
         e5:14:21:d7:61:d7:df:61:c3:e6:75:83:2b:ec:3e:0c:e2:c4:
         50:2f:96:c7:77:70:c5:fc:d7:ad:03:e1:db:d5:05:bb:13:e0:
         d3:99:2c:ba:87:6d:86:58:25:3e:f5:bf:4d:59:65:82:1d:eb:
         a0:61:59:cf:65:83:ec:c0:67:88:f7:de:d5:09:df:78:f0:18:
         4f:6b:f4:3f:c7:2a:8f:41:6f:5e:10:14:5c:19:ec:8e:35:b4:
         c0:17:bd:21:a1:6a:cf:46:c1:7f:79:8d:5e:f4:a7:ea:92:c7:
         1b:cf:95:38:09:50:5b:72:1b:2f:54:f1:ff:dd:8b:c6:76:3b:
         61:4a:74:8c:db:d6:30:1b:f5:44:d3:24:61:35:5a:bb:c0:48:
         b6:b1:b2:69:bf:b8:37:84:97:f8:1e:1e:8e:07:2f:4c:1e:9b:
         99:1a:db:02:9e:97:0e:24:f6:ef:0f:24:ae:49:26:71:fc:74:
         bc:7b:b6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----