Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a3830303a3a2f33392d3339203d3e20323034353038.roa
File:                     326130353a646663373a3830303a3a2f33392d3339203d3e20323034353038.roa (raw, json)
Hash identifier:          UVBdhDys+oSiC76+VRINfP7eRYwkyVweDBo0eoKM+Go=
Subject key identifier:   21:F3:FE:74:5E:A1:D3:F2:26:47:1E:99:F9:21:50:33:A5:12:37:BA
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       7D585C359C522B0DD92D36E96755F96031B4B27F
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a3830303a3a2f33392d3339203d3e20323034353038.roa
Signing time:             Fri 14 Apr 2023 02:13:46 +0000
ROA not before:           Fri 14 Apr 2023 02:08:46 +0000
ROA not after:            Fri 12 Apr 2024 02:13:46 +0000
asID:                     204508
IP address blocks:        2a05:dfc7:800::/39 maxlen: 39

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:58:5c:35:9c:52:2b:0d:d9:2d:36:e9:67:55:f9:60:31:b4:b2:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:08:46 2023 GMT
            Not After : Apr 12 02:13:46 2024 GMT
        Subject: CN=21F3FE745EA1D3F226471E99F9215033A51237BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:23:32:2f:bc:f6:4c:bf:f1:20:1f:19:02:30:
                    3c:7f:89:91:20:a1:f8:d7:c4:98:c0:53:69:cc:6f:
                    a7:d4:9b:62:3c:22:a9:59:e0:02:61:e5:44:57:73:
                    36:bf:46:a4:72:f8:0d:2b:86:ce:f9:2f:66:c6:65:
                    58:d8:49:7d:66:64:04:9d:c2:e9:54:69:e6:0d:08:
                    ca:2e:a6:fb:d1:de:1f:6f:7c:d1:58:6a:1b:0e:0c:
                    9d:c7:5d:7e:c7:b9:cd:e4:76:ef:a8:1b:3d:c7:40:
                    8b:a0:5b:00:6e:86:1d:0c:0c:2b:0c:fa:89:80:11:
                    e4:25:03:f8:72:31:a0:62:46:3a:f0:05:4a:22:ad:
                    b1:7f:8d:db:2b:2a:6e:76:55:cf:08:ae:85:3b:d3:
                    9b:ca:f3:de:41:c5:6b:dd:02:38:ae:2b:4b:e2:c3:
                    35:bb:67:82:f6:56:fe:50:66:7b:73:5e:6e:24:83:
                    7d:94:a5:04:92:24:3f:8b:84:c5:af:81:25:f0:71:
                    9c:ce:e5:eb:b9:97:2d:0c:59:84:a4:d8:1b:23:28:
                    b4:6b:24:33:86:8c:63:d6:60:74:4e:e5:29:16:b3:
                    90:8e:f9:0a:82:e4:e8:aa:8e:47:16:4a:f1:0c:ca:
                    56:7b:11:be:0b:d0:10:b0:24:8a:74:6c:81:3f:26:
                    d7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F3:FE:74:5E:A1:D3:F2:26:47:1E:99:F9:21:50:33:A5:12:37:BA
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a3830303a3a2f33392d3339203d3e20323034353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:800::/39

    Signature Algorithm: sha256WithRSAEncryption
         aa:ca:59:d1:04:12:0d:fa:0b:6e:b3:c2:06:1b:03:dd:97:c6:
         c1:e6:bd:3e:96:2d:5c:e1:4c:96:dd:8f:aa:4c:06:b1:2e:fd:
         81:47:d9:87:47:e5:fa:e3:9c:18:95:f0:11:16:65:96:15:6c:
         65:e7:a0:7a:bf:00:7f:7a:58:26:09:85:b7:5c:fd:9a:7f:0d:
         79:f1:ee:21:5c:e3:51:41:28:d7:71:e9:c2:c0:35:f1:71:6c:
         50:ef:98:98:41:90:64:82:19:6e:86:07:d9:d3:98:24:bf:8b:
         ae:9c:22:b8:43:12:d2:6a:8c:30:90:79:ab:5c:9c:ef:63:25:
         41:91:2a:2b:17:5d:60:30:d0:8e:a7:31:a1:92:ad:89:cc:6c:
         7c:00:89:b8:8b:7f:d8:a6:26:1d:ad:d5:0a:2a:98:4c:dd:c7:
         a5:e2:e4:9b:4b:66:c0:57:be:08:5c:0c:8b:ac:8a:75:49:29:
         40:c2:37:36:23:72:f4:99:1b:c7:d9:5c:10:5a:40:6a:f9:39:
         81:ff:d8:c5:68:1e:b6:4a:0d:0a:a3:3d:bd:cd:db:ec:27:94:
         4e:e3:56:78:d9:5b:83:68:14:09:f4:9e:65:7d:68:5f:fa:a9:
         8f:f8:9c:66:3b:81:5b:48:e8:be:26:c6:76:fc:6e:61:6a:1a:
         2d:6a:40:0c
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIUfVhcNZxSKw3ZLTbpZ1X5YDG0sn8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA0MTQwMjA4NDZaFw0yNDA0MTIwMjEzNDZaMDMxMTAvBgNV
BAMTKDIxRjNGRTc0NUVBMUQzRjIyNjQ3MUU5OUY5MjE1MDMzQTUxMjM3QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4IzIvvPZMv/EgHxkCMDx/iZEg
ofjXxJjAU2nMb6fUm2I8IqlZ4AJh5URXcza/RqRy+A0rhs75L2bGZVjYSX1mZASd
wulUaeYNCMoupvvR3h9vfNFYahsODJ3HXX7Huc3kdu+oGz3HQIugWwBuhh0MDCsM
+omAEeQlA/hyMaBiRjrwBUoirbF/jdsrKm52Vc8IroU705vK895BxWvdAjiuK0vi
wzW7Z4L2Vv5QZntzXm4kg32UpQSSJD+LhMWvgSXwcZzO5eu5ly0MWYSk2BsjKLRr
JDOGjGPWYHRO5SkWs5CO+QqC5OiqjkcWSvEMylZ7Eb4L0BCwJIp0bIE/JtfLAgMB
AAGjggIGMIICAjAdBgNVHQ4EFgQUIfP+dF6h0/ImRx6Z+SFQM6USN7owHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wLzMyNjEzMDM1M2E2NDY2NjMzNzNhMzgzMDMwM2EzYTJmMzMz
OTJkMzMzOTIwM2QzZTIwMzIzMDM0MzUzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKgXfxwgwDQYJ
KoZIhvcNAQELBQADggEBAKrKWdEEEg36C26zwgYbA92XxsHmvT6WLVzhTJbdj6pM
BrEu/YFH2YdH5frjnBiV8BEWZZYVbGXnoHq/AH96WCYJhbdc/Zp/DXnx7iFc41FB
KNdx6cLANfFxbFDvmJhBkGSCGW6GB9nTmCS/i66cIrhDEtJqjDCQeatcnO9jJUGR
KisXXWAw0I6nMaGSrYnMbHwAibiLf9imJh2t1QoqmEzdx6Xi5JtLZsBXvghcDIus
inVJKUDCNzYjcvSZG8fZXBBaQGr5OYH/2MVoHrZKDQqjPb3N2+wnlE7jVnjZW4No
FAn0nmV9aF/6qY/4nGY7gVtI6L4mxnb8bmFqGi1qQAw=
-----END CERTIFICATE-----