Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a373830303a3a2f34302d3430203d3e20313938343038.roa
File:                     326130353a646663373a373830303a3a2f34302d3430203d3e20313938343038.roa (raw, json)
Hash identifier:          YBfUuGiCmd8pjweacCnmI7ENJ43/KOfFx9mX3Zvw8K0=
Subject key identifier:   B1:2C:6D:9A:25:F8:DE:A5:ED:F1:84:86:6A:BE:AA:68:A1:5F:A7:B8
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       0C8CD537A5FA98E6E3EB34B0CA28AB2BC83571FD
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a373830303a3a2f34302d3430203d3e20313938343038.roa
Signing time:             Fri 14 Apr 2023 01:42:29 +0000
ROA not before:           Fri 14 Apr 2023 01:37:29 +0000
ROA not after:            Fri 12 Apr 2024 01:42:29 +0000
asID:                     198408
IP address blocks:        2a05:dfc7:7800::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8c:d5:37:a5:fa:98:e6:e3:eb:34:b0:ca:28:ab:2b:c8:35:71:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:37:29 2023 GMT
            Not After : Apr 12 01:42:29 2024 GMT
        Subject: CN=B12C6D9A25F8DEA5EDF184866ABEAA68A15FA7B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:01:26:a3:32:2c:02:49:07:4c:81:20:aa:
                    7c:45:0e:d8:0f:c1:9c:40:27:b5:77:3d:bd:7e:76:
                    a3:75:a8:6f:bc:dc:c6:e0:68:97:19:9c:c1:81:48:
                    43:2c:9d:0f:04:e9:91:c5:fe:2f:61:d6:a4:dc:21:
                    f4:4c:99:61:9f:5e:9f:7f:c4:2b:d4:71:20:6c:bb:
                    71:7f:0d:51:99:3d:e9:dd:c5:84:62:72:9f:66:98:
                    75:a9:c0:f7:6b:ee:40:e7:15:23:ce:88:3b:dc:a8:
                    d8:d6:cd:6c:3d:70:dd:31:bf:44:4c:fb:75:60:ff:
                    db:4c:2b:63:22:8b:9b:7c:90:2a:91:7e:e9:db:2a:
                    17:57:26:59:ae:8d:42:50:8f:a8:f7:73:93:c7:7d:
                    23:7a:04:c7:8d:d9:4b:50:2c:b6:79:39:84:bd:e4:
                    3f:25:00:0c:6a:7e:ca:88:b1:62:3b:94:15:a0:f8:
                    04:7a:d2:11:ad:0a:af:9c:c6:bd:b6:b1:14:da:df:
                    40:93:f3:74:36:49:2d:b5:20:e5:16:81:5f:83:c3:
                    82:ec:b6:02:79:f1:75:42:94:10:61:9c:1e:56:69:
                    e4:ca:0d:df:8d:55:12:81:f7:41:7b:2b:54:60:21:
                    21:e7:1c:20:d5:12:a7:4e:f2:84:08:dd:b2:b6:3d:
                    b9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2C:6D:9A:25:F8:DE:A5:ED:F1:84:86:6A:BE:AA:68:A1:5F:A7:B8
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a373830303a3a2f34302d3430203d3e20313938343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:7800::/40

    Signature Algorithm: sha256WithRSAEncryption
         37:25:31:3d:55:bd:c1:42:88:c8:9b:0e:10:b8:46:15:ed:db:
         9b:c8:27:cb:3b:cc:6f:59:22:a9:f1:85:fe:8b:9f:de:04:01:
         3d:55:27:95:b6:18:09:5a:62:81:09:f2:ef:f2:a4:c0:43:f7:
         8b:85:4c:c1:79:8f:54:76:b7:91:b7:fb:a1:8d:7f:19:dc:ee:
         2d:92:ba:c6:14:c7:e3:57:85:69:f1:f7:1f:b7:c7:ad:54:c2:
         34:f7:4c:21:12:66:80:07:da:ef:48:cd:47:25:f1:94:25:e6:
         3b:a0:af:8d:46:b0:36:3b:b7:71:ce:e8:1d:bd:29:92:57:0b:
         02:3f:e6:52:db:a6:dc:ff:cb:ff:25:7c:03:6e:0a:4d:4b:ea:
         dd:07:34:96:e1:a0:44:33:6e:b0:06:68:3f:2c:ee:ea:46:9c:
         2f:06:67:8d:85:b0:23:42:0d:9a:8d:98:f3:7b:0d:d5:37:00:
         ff:01:c1:0e:eb:13:6d:71:f4:12:b7:77:87:91:82:af:d6:5d:
         1e:51:a8:4e:d0:38:e5:ce:97:dd:73:f3:a5:6d:a6:7d:f3:b8:
         cd:d5:88:c2:30:05:02:d0:8c:d0:ca:bc:24:85:59:69:e3:52:
         ef:8f:a1:2e:22:7d:eb:ee:53:e9:c3:5c:27:74:60:62:5b:3c:
         4f:66:bb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----