Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a363830303a3a2f34332d3433203d3e20323035343332.roa
File:                     326130353a646663373a363830303a3a2f34332d3433203d3e20323035343332.roa (raw, json)
Hash identifier:          dMq1WhAd1uzL7sqtxIwoSJwT89fK5HTB9e1Hm92oXOA=
Subject key identifier:   22:83:A6:A8:32:B0:36:CE:6E:03:D6:6B:78:2E:FF:3C:6C:7C:CA:79
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       66608A8D6D7DAB4ED4EF4973ABFBEF23282C0EAA
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a363830303a3a2f34332d3433203d3e20323035343332.roa
Signing time:             Fri 14 Apr 2023 01:53:57 +0000
ROA not before:           Fri 14 Apr 2023 01:48:57 +0000
ROA not after:            Fri 12 Apr 2024 01:53:57 +0000
asID:                     205432
IP address blocks:        2a05:dfc7:6800::/43 maxlen: 43

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:60:8a:8d:6d:7d:ab:4e:d4:ef:49:73:ab:fb:ef:23:28:2c:0e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:48:57 2023 GMT
            Not After : Apr 12 01:53:57 2024 GMT
        Subject: CN=2283A6A832B036CE6E03D66B782EFF3C6C7CCA79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:85:a9:7c:18:65:09:7f:76:f4:c9:a5:12:32:
                    49:70:91:e2:af:03:d1:73:c4:54:5f:f6:2c:fa:d8:
                    28:f7:21:e5:5f:6b:03:f3:9e:27:79:36:75:2d:e1:
                    98:95:49:df:8d:3d:ef:9e:05:27:af:3a:4c:1c:33:
                    f4:cc:67:5b:d2:0b:a4:48:8e:fb:2c:45:bb:92:8f:
                    52:61:2a:9b:55:a0:f1:aa:ff:cc:3f:1e:30:a0:95:
                    b0:b5:a5:4c:40:e5:ba:30:1e:f9:10:2e:f9:c8:d1:
                    b3:c3:56:59:15:06:d5:1e:59:4e:d1:41:69:0e:66:
                    fe:86:a8:53:f9:a1:67:3b:72:60:36:00:df:5e:89:
                    e1:fb:08:8e:47:a1:c4:01:8c:a6:a3:a8:99:96:2d:
                    a6:0e:bf:5d:4a:b8:8e:3d:e2:b6:d2:7e:20:15:fe:
                    f0:73:5b:89:60:4e:27:9b:4c:fb:fc:4b:a3:5b:67:
                    26:f9:97:11:e0:9d:04:16:f5:44:48:60:e5:ab:82:
                    1f:ef:61:b4:8b:22:c5:d1:cd:96:5d:1d:db:21:b3:
                    12:05:ba:dc:2a:12:a4:c9:b0:37:07:36:d3:ff:c8:
                    10:10:42:ef:43:09:db:ef:76:f8:d2:d3:b4:06:99:
                    1d:fb:4d:60:a3:0c:ac:d5:21:39:71:84:27:1d:17:
                    71:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:83:A6:A8:32:B0:36:CE:6E:03:D6:6B:78:2E:FF:3C:6C:7C:CA:79
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a363830303a3a2f34332d3433203d3e20323035343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:6800::/43

    Signature Algorithm: sha256WithRSAEncryption
         64:da:4d:a3:75:9f:b9:a8:19:32:1b:33:ff:81:9d:35:80:49:
         be:67:f1:27:80:9c:b9:bc:70:13:ce:d2:8e:7a:82:2a:68:d7:
         d0:ef:68:86:db:2c:7f:79:bf:e0:18:2a:94:8c:3f:d3:9a:80:
         2b:b6:ea:82:72:94:fa:1b:90:16:b7:81:d6:bb:bb:03:5f:28:
         22:58:dd:60:25:9d:f6:40:23:3d:b3:e1:2b:84:29:3c:2f:b4:
         fb:7d:68:da:8c:8c:1a:c6:d6:09:c1:d3:7a:77:a8:9e:04:26:
         d8:ab:47:22:34:c5:74:29:cf:57:6c:fd:2d:f5:56:65:f2:a6:
         65:50:e5:96:1b:cc:e4:73:4d:bb:79:72:7c:e0:5d:79:db:f0:
         15:34:dc:4f:02:f5:6c:e5:aa:52:a6:13:9d:70:22:86:31:65:
         5a:87:3c:40:00:64:da:71:79:03:b0:36:22:72:6e:90:88:92:
         e0:37:63:8e:65:b7:0a:e3:cf:8f:3b:df:16:e7:d7:ed:aa:95:
         bd:fd:9b:77:bc:c5:ad:34:fd:f4:2f:b7:f2:8f:21:f8:45:41:
         f0:01:41:e9:ed:09:8e:45:b6:33:a2:a8:f3:da:05:ab:16:ee:
         22:f8:6f:9c:67:76:a8:6c:84:c2:1d:3d:ec:61:a5:16:d0:cf:
         00:2b:22:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----