Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a363930303a3a2f34302d3438203d3e20323032333338.roa
File:                     326130353a646663373a363930303a3a2f34302d3438203d3e20323032333338.roa (raw, json)
Hash identifier:          tsdYzlRtiEOTGydVtugk5YkaHjiBxnLOUsBAzS0kALI=
Subject key identifier:   83:87:7B:5E:C8:93:21:C3:F9:7C:CF:CD:BF:AA:E9:C9:82:3C:5B:F2
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       3993BB4FF69F20B6E9EECAF6B7B9DDCAFF0143C3
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a363930303a3a2f34302d3438203d3e20323032333338.roa
Signing time:             Fri 16 Jun 2023 13:22:03 +0000
ROA not before:           Fri 16 Jun 2023 13:17:03 +0000
ROA not after:            Fri 14 Jun 2024 13:22:03 +0000
asID:                     202338
IP address blocks:        2a05:dfc7:6900::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:93:bb:4f:f6:9f:20:b6:e9:ee:ca:f6:b7:b9:dd:ca:ff:01:43:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun 16 13:17:03 2023 GMT
            Not After : Jun 14 13:22:03 2024 GMT
        Subject: CN=83877B5EC89321C3F97CCFCDBFAAE9C9823C5BF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fc:cd:00:65:bd:42:e2:9a:8f:89:dc:ab:ee:
                    cf:4f:46:69:4a:44:3b:c0:77:9a:07:9d:78:7a:a7:
                    dd:45:00:3d:4a:cf:9c:a1:51:7a:f3:bc:d7:f5:7c:
                    6b:13:d9:fb:27:b4:63:e8:f3:6a:73:a4:56:9b:e2:
                    50:de:50:51:76:fc:7c:e7:a7:41:d7:4e:3b:a0:55:
                    cf:04:1e:fa:65:a8:9a:eb:27:b4:51:7e:0f:59:4e:
                    81:6d:a9:b3:0c:76:40:2d:e7:63:9a:5b:4d:28:80:
                    10:81:52:6f:27:d3:cd:39:41:54:c2:35:a5:88:64:
                    66:4f:f8:f9:bb:d8:63:a5:28:27:ed:2b:92:c0:4e:
                    7d:b8:b2:25:52:5f:5b:45:28:1a:ff:76:c9:21:57:
                    17:01:d3:4b:99:f7:5e:df:9d:e5:5e:f4:72:61:cd:
                    7e:49:75:65:0b:d4:75:ad:74:34:a2:10:ed:53:e9:
                    c2:7d:b3:63:e7:d9:f4:eb:34:82:d5:40:55:14:56:
                    04:58:66:f1:07:43:28:e4:fa:5e:62:ce:a4:29:e3:
                    fe:47:16:04:0e:b6:f5:eb:60:72:0b:aa:b5:21:fd:
                    9a:de:0d:66:41:92:7e:11:97:d8:3d:cc:4e:f4:39:
                    d9:59:06:ba:ff:e4:ab:68:09:ee:6f:6d:23:79:c1:
                    a8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:87:7B:5E:C8:93:21:C3:F9:7C:CF:CD:BF:AA:E9:C9:82:3C:5B:F2
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a363930303a3a2f34302d3438203d3e20323032333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:6900::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:82:ea:13:20:72:6b:23:36:b1:9b:36:05:61:98:dd:40:22:
         31:bf:06:f1:c1:f3:95:05:cd:c6:55:26:f5:4f:80:04:9a:b7:
         7e:7f:f9:8e:2f:09:1c:ca:28:9b:e8:f8:c7:31:8d:71:e6:9c:
         cc:8e:de:c8:c1:1a:4d:d1:c9:b2:4d:9e:b3:ac:6d:df:b9:48:
         45:15:a0:4d:ee:e3:73:01:1b:5d:17:ee:22:0c:4c:fd:9a:01:
         14:ff:9a:ea:ab:37:c5:a1:8a:33:06:56:a2:34:b8:25:dc:36:
         b8:e3:aa:96:a2:14:05:55:8c:5b:c0:a4:ba:51:8d:77:11:e8:
         16:44:44:82:9f:8f:6f:bb:99:d4:3c:ed:81:ac:c7:de:d0:2c:
         0b:b1:b9:93:80:5b:3a:63:07:da:cb:35:d6:e0:7d:bf:f6:8d:
         a3:5c:f1:dc:81:72:4f:bb:d1:8a:e7:d7:49:08:1a:cb:3c:b1:
         0a:71:b0:9d:4e:9f:57:70:f2:7a:0a:34:b4:d9:7c:be:80:75:
         d3:62:67:a1:a4:ca:26:84:17:5c:34:75:e0:df:77:07:89:9a:
         fa:3a:ba:6c:b5:ed:87:25:a7:e0:ee:8d:f3:d5:6c:ff:14:e2:
         0d:cd:93:84:18:f7:ca:04:2d:d3:4e:a1:e1:f6:bc:4d:63:f0:
         f1:5f:03:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----