Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a363a3a2f34382d3438203d3e203632323430.roa
File:                     326130353a646663373a363a3a2f34382d3438203d3e203632323430.roa (raw, json)
Hash identifier:          G3r4VRW0EWdxDZUwrNUP1qBHJvbLyqmU2bi6l+z7/P8=
Subject key identifier:   18:69:D0:44:68:F8:77:92:B9:70:23:A5:BD:DE:AE:95:87:91:04:77
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       7970BFCAF1FD53CDF756C4F118B659B529111EB1
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a363a3a2f34382d3438203d3e203632323430.roa
Signing time:             Fri 14 Apr 2023 01:41:01 +0000
ROA not before:           Fri 14 Apr 2023 01:36:01 +0000
ROA not after:            Fri 12 Apr 2024 01:41:01 +0000
asID:                     62240
IP address blocks:        2a05:dfc7:6::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:70:bf:ca:f1:fd:53:cd:f7:56:c4:f1:18:b6:59:b5:29:11:1e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:36:01 2023 GMT
            Not After : Apr 12 01:41:01 2024 GMT
        Subject: CN=1869D04468F87792B97023A5BDDEAE9587910477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:f9:7e:b2:08:cd:1c:bd:33:7f:2d:22:e2:
                    5f:3b:26:64:6a:78:a6:81:5a:b9:51:e4:4d:8e:71:
                    25:89:e5:c6:17:6a:50:e2:c7:c1:62:2a:3e:d1:95:
                    f6:b4:9c:9f:84:b1:06:1d:15:71:6f:ca:66:12:ef:
                    2f:6a:b6:d2:f5:9c:8a:9a:8a:94:76:46:97:22:91:
                    05:52:40:23:40:48:ff:2c:f6:95:a9:99:1b:cb:33:
                    bf:78:c9:a0:ce:3a:32:0c:97:58:0f:49:fb:70:1d:
                    53:58:40:ec:c6:db:6f:7f:db:b4:2c:d7:aa:0b:0d:
                    a1:75:f5:d7:76:c1:57:d1:0f:c9:4d:d0:98:c4:fd:
                    86:d3:51:48:03:5f:69:c8:53:b8:cf:75:6c:ea:3e:
                    0e:a5:42:f7:65:ae:89:1f:e8:2e:b0:85:4a:12:b4:
                    1d:d5:7c:3f:33:23:bf:1f:6e:a9:be:0e:78:8f:e8:
                    13:99:82:50:04:dc:f3:6e:83:8c:e8:15:df:7d:ce:
                    41:4e:69:51:60:e7:08:68:2b:f9:7a:16:8d:f0:fc:
                    7c:ef:20:77:96:25:37:ac:e8:85:44:12:a6:bc:f6:
                    82:5a:27:97:a3:1c:11:b2:2e:45:98:ad:ef:2e:c5:
                    10:c7:d3:2b:c2:76:27:7d:b3:1e:cc:58:48:2d:cc:
                    0a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:69:D0:44:68:F8:77:92:B9:70:23:A5:BD:DE:AE:95:87:91:04:77
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a363a3a2f34382d3438203d3e203632323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:38:bf:69:2b:65:29:71:c8:09:e6:50:cb:5a:4b:ef:4a:5d:
         8c:31:73:b8:d5:63:a4:e1:a4:22:0c:33:42:38:43:62:16:b4:
         5f:9b:b5:f8:e5:83:12:d3:ef:28:c1:27:61:ba:a3:a8:2c:a7:
         20:50:fa:f3:4a:10:b2:d6:73:3e:80:9d:df:74:5c:d6:4a:78:
         9e:9f:c3:12:87:7d:30:b8:21:61:86:c3:95:6b:ee:ed:a4:3c:
         1b:93:d8:06:50:3b:c2:c1:dc:2c:61:27:d7:4d:a7:e3:c6:1c:
         f8:f6:76:7e:81:5b:12:05:12:e6:bd:cc:d4:7c:34:5e:8f:6b:
         6e:1f:6e:6e:18:39:b5:e8:16:b0:6f:05:d5:44:bc:a5:86:71:
         b4:e3:f8:5a:e7:72:49:95:7f:9f:3d:f9:6f:a4:07:43:6d:9c:
         53:7e:a9:cf:cd:39:1d:e1:f8:b3:bf:c0:85:1a:4e:99:18:da:
         a3:62:af:93:6d:2b:d0:72:97:b6:a8:88:ce:e8:16:00:c7:7a:
         a1:19:88:e9:c4:6d:78:99:93:90:4a:46:ef:f5:f5:47:03:3f:
         4f:9c:60:b0:ac:62:9f:7b:3d:32:47:eb:0d:5e:08:fc:a3:4d:
         d9:bb:f0:05:e9:08:ff:25:3b:97:ee:68:42:3d:fb:b5:a1:77:
         96:bd:86:e1
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIUeXC/yvH9U833VsTxGLZZtSkRHrEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA0MTQwMTM2MDFaFw0yNDA0MTIwMTQxMDFaMDMxMTAvBgNV
BAMTKDE4NjlEMDQ0NjhGODc3OTJCOTcwMjNBNUJEREVBRTk1ODc5MTA0NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1dvl+sgjNHL0zfy0i4l87JmRq
eKaBWrlR5E2OcSWJ5cYXalDix8FiKj7Rlfa0nJ+EsQYdFXFvymYS7y9qttL1nIqa
ipR2RpcikQVSQCNASP8s9pWpmRvLM794yaDOOjIMl1gPSftwHVNYQOzG229/27Qs
16oLDaF19dd2wVfRD8lN0JjE/YbTUUgDX2nIU7jPdWzqPg6lQvdlrokf6C6whUoS
tB3VfD8zI78fbqm+DniP6BOZglAE3PNug4zoFd99zkFOaVFg5whoK/l6Fo3w/Hzv
IHeWJTes6IVEEqa89oJaJ5ejHBGyLkWYre8uxRDH0yvCdid9sx7MWEgtzApDAgMB
AAGjggIBMIIB/TAdBgNVHQ4EFgQUGGnQRGj4d5K5cCOlvd6ulYeRBHcwHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
eAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wLzMyNjEzMDM1M2E2NDY2NjMzNzNhMzYzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzNjMyMzIzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfxwAGMA0GCSqGSIb3
DQEBCwUAA4IBAQCnOL9pK2UpccgJ5lDLWkvvSl2MMXO41WOk4aQiDDNCOENiFrRf
m7X45YMS0+8owSdhuqOoLKcgUPrzShCy1nM+gJ3fdFzWSnien8MSh30wuCFhhsOV
a+7tpDwbk9gGUDvCwdwsYSfXTafjxhz49nZ+gVsSBRLmvczUfDRej2tuH25uGDm1
6BawbwXVRLylhnG04/ha53JJlX+fPflvpAdDbZxTfqnPzTkd4fizv8CFGk6ZGNqj
Yq+TbSvQcpe2qIjO6BYAx3qhGYjpxG14mZOQSkbv9fVHAz9PnGCwrGKfez0yR+sN
Xgj8o03Zu/AF6Qj/JTuX7mhCPfu1oXeWvYbh
-----END CERTIFICATE-----