Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a383030303a3a2f34302d3430203d3e20323033313939.roa
File:                     326130353a646663373a383030303a3a2f34302d3430203d3e20323033313939.roa (raw, json)
Hash identifier:          BGbIrrk3k73niKI+AC+dAyvifpOA7eACAsZeZerxk7Q=
Subject key identifier:   B3:15:2C:C3:16:6F:29:95:EA:15:CB:1D:B1:43:18:EA:62:FD:77:7F
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       0EAC9A8138513104E78977B991BA7302B43247AA
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a383030303a3a2f34302d3430203d3e20323033313939.roa
Signing time:             Fri 14 Apr 2023 02:07:09 +0000
ROA not before:           Fri 14 Apr 2023 02:02:09 +0000
ROA not after:            Fri 12 Apr 2024 02:07:09 +0000
asID:                     203199
IP address blocks:        2a05:dfc7:8000::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ac:9a:81:38:51:31:04:e7:89:77:b9:91:ba:73:02:b4:32:47:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:02:09 2023 GMT
            Not After : Apr 12 02:07:09 2024 GMT
        Subject: CN=B3152CC3166F2995EA15CB1DB14318EA62FD777F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c3:87:58:b8:33:a1:1b:ae:70:a6:b1:2e:7b:
                    a3:17:7c:fd:16:fa:31:09:b4:b4:85:4f:b5:a1:b0:
                    49:2a:4f:26:98:4b:c4:3f:9f:8d:58:fe:99:8a:7d:
                    0c:b1:d2:bf:a9:e9:08:74:6e:83:19:1f:01:c2:ef:
                    d9:c6:17:1a:85:df:1a:98:d8:6e:f8:44:16:3e:57:
                    20:2d:28:f4:f8:ed:15:8f:39:e2:89:28:d5:c8:76:
                    b0:6f:a0:d4:2f:74:5d:54:7c:1f:86:2c:bb:12:e5:
                    a5:d1:36:f0:55:ad:f6:9e:cc:3e:bb:d8:11:eb:42:
                    17:2b:e1:53:1d:4f:94:79:dc:79:f6:a4:fa:00:8b:
                    70:63:8c:71:74:e3:d2:b7:f0:5c:2b:7e:a1:75:6c:
                    88:00:99:c7:58:6c:81:53:f5:6c:f2:fb:7e:78:a1:
                    d8:b0:c2:f3:b1:fc:ee:9d:6f:bf:62:34:77:1a:37:
                    86:98:9c:a2:dc:b6:2c:02:73:d8:0c:27:f4:ca:d1:
                    ef:7e:5a:09:65:ff:08:8c:96:ab:e2:86:97:cd:55:
                    79:ed:d5:0d:5f:80:c1:9b:bb:5c:32:49:0d:51:92:
                    6f:15:bf:d1:f9:9b:94:67:b2:3f:7a:b3:2c:8e:05:
                    e5:fe:0e:2f:80:ba:01:98:8a:50:d3:98:0b:cc:87:
                    7b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:15:2C:C3:16:6F:29:95:EA:15:CB:1D:B1:43:18:EA:62:FD:77:7F
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a383030303a3a2f34302d3430203d3e20323033313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:17:ff:9a:1a:57:b4:c4:7a:91:3e:98:6f:4f:34:8c:20:ce:
         3a:b3:bd:3f:de:41:29:3f:90:4f:26:05:e4:47:56:a2:f0:a6:
         8b:2c:b0:ef:2a:29:ce:7a:9e:41:36:1b:24:bd:ea:71:01:d8:
         69:75:b6:87:ac:0e:77:5b:67:b7:24:59:66:5a:ee:57:21:7f:
         5d:57:96:9b:0b:b2:12:6b:5e:d5:8c:ae:dd:ec:42:b1:a1:8f:
         4f:08:d6:39:77:9d:47:54:1a:f7:89:f2:26:65:5b:0e:52:b1:
         5e:7b:e9:90:30:6f:35:5b:39:0a:f5:18:37:b3:df:dd:35:0e:
         a0:bb:37:30:33:19:c4:13:65:6e:45:8c:4d:0a:2f:90:b7:a4:
         da:cf:a8:26:bd:cf:cd:fd:8f:7c:27:2c:a4:d0:95:7d:55:7b:
         8c:a7:76:c6:1e:d2:81:36:a8:49:9a:0e:a2:1f:12:62:74:2c:
         a1:b3:74:19:44:a7:15:56:35:54:88:6b:a9:97:c0:1e:ed:e8:
         92:58:2b:91:f5:82:43:eb:84:33:6f:9e:4c:c6:38:ad:99:64:
         b3:49:23:b1:f0:dc:f7:1d:d8:96:f3:f3:1c:15:d5:99:b8:4d:
         ae:a6:cf:fc:f1:0b:6d:4f:30:c5:04:c1:de:c8:7f:35:b9:f1:
         d2:83:4a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----