Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a363530303a3a2f34302d3438203d3e20323030313630.roa
File:                     326130353a646663373a363530303a3a2f34302d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          WNsJrbwaehmjUnHHCQ9nXyOre5fIqh3p1u4TCTfYZKs=
Subject key identifier:   55:8F:F2:14:4C:74:46:30:A0:A6:D2:DF:5D:BE:BD:23:47:90:72:F0
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       1D70FBE292269D4CD7E8464B54B857F6D8755B72
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a363530303a3a2f34302d3438203d3e20323030313630.roa
Signing time:             Fri 14 Apr 2023 01:45:05 +0000
ROA not before:           Fri 14 Apr 2023 01:40:05 +0000
ROA not after:            Fri 12 Apr 2024 01:45:05 +0000
asID:                     200160
IP address blocks:        2a05:dfc7:6500::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:70:fb:e2:92:26:9d:4c:d7:e8:46:4b:54:b8:57:f6:d8:75:5b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:40:05 2023 GMT
            Not After : Apr 12 01:45:05 2024 GMT
        Subject: CN=558FF2144C744630A0A6D2DF5DBEBD23479072F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:40:2c:8e:d5:b3:d9:97:e5:43:e3:cd:5e:
                    44:7c:42:1f:42:00:d8:e9:21:5d:11:e1:fe:a1:d4:
                    bb:1f:7c:bf:cb:9b:c7:2e:cd:3e:f1:f7:89:5c:00:
                    76:82:92:6c:80:ce:b2:cf:27:bf:9f:17:b9:25:b3:
                    4a:91:f8:f6:e7:41:9e:20:35:b6:c8:fe:04:d6:dd:
                    b6:89:c5:55:10:ee:0f:60:41:1c:1f:7a:1d:5a:cf:
                    82:dd:8f:86:b4:20:04:ee:10:fb:87:f5:6d:b4:1a:
                    c4:75:b4:47:10:a2:f4:e1:76:70:fa:39:1a:34:56:
                    f0:36:a5:0b:bc:76:fe:44:2c:c0:c3:83:da:36:45:
                    40:84:22:66:25:0f:13:a6:a8:49:23:85:64:10:44:
                    3f:11:33:e5:9b:28:ae:70:54:79:90:fb:c2:28:bd:
                    0f:e8:e1:7c:62:08:76:17:21:23:b7:84:71:64:fc:
                    79:77:62:3c:74:75:16:0b:e7:55:c9:16:b0:f5:f2:
                    f4:a4:94:02:9c:fc:68:0b:f6:05:58:fa:59:48:b9:
                    82:73:b9:12:6e:97:f0:42:15:f2:e2:60:e1:06:8b:
                    0a:35:e7:df:a3:a7:00:57:29:d3:28:99:d9:8f:e2:
                    c7:5e:c8:f1:6c:ff:f6:06:f6:6b:d7:86:b1:92:6e:
                    d6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8F:F2:14:4C:74:46:30:A0:A6:D2:DF:5D:BE:BD:23:47:90:72:F0
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a363530303a3a2f34302d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:6500::/40

    Signature Algorithm: sha256WithRSAEncryption
         79:48:a9:f8:bc:c2:57:ba:66:ee:af:37:77:b3:a8:50:b5:97:
         15:0d:e8:82:0b:b1:a0:a0:79:77:31:f4:dd:13:2f:55:cd:9d:
         57:89:df:e6:dc:77:e9:3a:8b:d9:e5:33:bc:08:a0:e1:60:c0:
         e2:45:bd:3c:2b:9c:16:76:22:d4:c7:ba:d6:d0:02:cf:f3:bf:
         82:07:1c:68:85:b3:90:dd:f8:d6:60:67:e7:12:ac:72:68:a6:
         9f:b6:50:df:bb:f2:50:1a:15:6e:ee:47:80:13:7b:64:cb:20:
         cf:d3:55:d8:e3:54:c9:aa:54:16:a1:3f:a5:6b:89:55:17:f3:
         ee:bd:90:64:f2:4f:c3:96:28:bc:81:78:e4:3c:1a:50:f4:df:
         0a:7b:4f:73:98:58:e4:c5:43:08:0c:04:a5:de:51:01:69:18:
         a7:cc:ed:e5:eb:c3:3d:12:4b:7e:16:74:e6:ec:b0:2a:1f:db:
         10:eb:3b:9e:20:76:49:f5:5f:bb:eb:5a:5f:9b:a9:92:f1:46:
         53:7a:63:16:d2:0c:a0:24:6c:03:0b:cd:25:5c:39:f1:c1:1d:
         b6:21:1d:b5:42:c3:ad:3e:f2:1b:d5:96:68:60:75:1a:80:08:
         92:b3:83:3f:6d:99:cd:35:fc:00:a6:73:1c:21:21:f1:f6:e5:
         66:df:ac:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----