Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a363566303a3a2f34342d3438203d3e20323133303836.roa
File:                     326130353a646663373a363566303a3a2f34342d3438203d3e20323133303836.roa (raw, json)
Hash identifier:          h+KHl4yNpse6In03svpEGcuzDtbqnV+lODvCrqdlHcI=
Subject key identifier:   38:2B:4C:26:09:73:EA:00:97:B2:9B:2A:C9:19:2C:CE:67:F7:C6:1C
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       09444FC59B75571F11C4C7646908AC799A189274
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a363566303a3a2f34342d3438203d3e20323133303836.roa
Signing time:             Fri 16 Jun 2023 14:42:01 +0000
ROA not before:           Fri 16 Jun 2023 14:37:01 +0000
ROA not after:            Fri 14 Jun 2024 14:42:01 +0000
asID:                     213086
IP address blocks:        2a05:dfc7:65f0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:44:4f:c5:9b:75:57:1f:11:c4:c7:64:69:08:ac:79:9a:18:92:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun 16 14:37:01 2023 GMT
            Not After : Jun 14 14:42:01 2024 GMT
        Subject: CN=382B4C260973EA0097B29B2AC9192CCE67F7C61C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:54:2e:02:62:a2:1f:e7:d8:0a:09:ee:34:47:
                    23:02:f7:59:0a:53:fc:8f:2c:8f:3e:b3:9e:e1:13:
                    ef:7a:0c:52:e5:ad:da:ee:20:78:26:b5:83:ab:1c:
                    b7:41:80:dd:60:c5:ac:32:5c:fe:58:90:eb:69:1d:
                    4a:1f:35:66:cd:bc:48:10:fd:e1:e2:ab:cb:c3:19:
                    69:f3:64:0d:3e:98:af:1a:97:9b:1d:4c:3f:d9:30:
                    bb:c2:0a:7b:fa:2e:07:8e:b5:86:d9:99:5a:40:40:
                    8a:ef:04:06:3e:d9:08:ac:b3:47:fd:ed:15:c6:b2:
                    f7:58:d8:44:a9:41:e0:41:cd:76:b3:3f:5b:b2:32:
                    99:b5:94:57:03:15:14:81:28:1a:8f:c5:33:3b:e1:
                    b9:b1:34:d4:72:dc:b1:90:f3:bc:e7:4a:65:34:fe:
                    54:6b:35:48:10:01:71:82:c7:68:53:94:89:05:5e:
                    fb:dd:52:e6:c4:78:7c:33:88:99:2a:17:cf:00:1e:
                    9d:ac:20:68:8b:ac:3c:85:bd:e7:b8:93:d3:8d:9a:
                    62:82:ff:fd:40:99:bd:d7:45:94:7f:f2:74:80:20:
                    cf:68:c2:82:51:f6:6a:c8:de:d3:94:03:ec:6e:18:
                    c6:28:d7:e0:0c:ad:8f:ce:98:3c:86:57:41:ba:6a:
                    a2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2B:4C:26:09:73:EA:00:97:B2:9B:2A:C9:19:2C:CE:67:F7:C6:1C
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a363566303a3a2f34342d3438203d3e20323133303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:65f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         43:cb:bd:2a:ef:4f:e0:bd:11:e2:45:51:c2:53:30:3c:52:8c:
         20:17:df:af:58:07:9b:31:2b:1f:d9:2c:79:8d:96:39:33:e9:
         87:4d:7b:33:85:e9:bb:59:b3:98:11:13:32:62:ed:59:84:d8:
         25:50:99:99:b7:c4:dc:8b:ba:50:78:1d:e4:49:91:6f:b6:81:
         a7:05:57:eb:dd:f7:79:55:b9:4d:4d:12:cf:e9:1e:4b:ae:11:
         3e:ac:44:0c:f7:a5:3b:a1:66:aa:a9:0c:18:ba:3f:bd:94:69:
         63:55:8b:28:4e:d4:dc:4e:89:ab:b8:5a:e0:82:28:0b:b1:4c:
         33:28:51:77:59:7d:8c:39:a8:14:b5:04:14:a2:a2:ed:6f:0b:
         cb:ab:24:ac:9a:7b:9e:b6:74:13:b0:16:fa:59:0d:bf:0a:d4:
         ae:58:6b:88:f0:e6:8e:3e:1c:5a:e5:8a:ff:7f:fa:3b:bf:b6:
         cd:26:28:0f:b9:55:0a:e3:cc:c2:d8:e8:55:95:a8:81:fd:f0:
         e6:9d:8e:f7:b5:43:f7:4f:e8:df:b0:83:cb:59:46:cd:94:74:
         08:a1:5e:49:6c:66:78:1d:cc:93:cf:00:6a:4c:8c:5c:eb:45:
         19:d3:a3:b4:72:c7:48:96:11:15:43:0c:ef:17:2d:50:bf:27:
         89:40:69:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----