Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a3830303a3a2f33392d3438203d3e20323034353038.roa
File:                     326130353a646663373a3830303a3a2f33392d3438203d3e20323034353038.roa (raw, json)
Hash identifier:          t5Msxlt+72aXBslUajvaqFrgZkTHctCWrH+BXCBD4Bo=
Subject key identifier:   56:D5:1F:41:A7:F1:47:CE:CE:74:D0:35:8D:97:6B:21:24:FA:3C:C8
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       25779A1A74EF5A66B164930BE62755CE647351D8
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a3830303a3a2f33392d3438203d3e20323034353038.roa
Signing time:             Fri 16 Jun 2023 14:40:49 +0000
ROA not before:           Fri 16 Jun 2023 14:35:49 +0000
ROA not after:            Fri 14 Jun 2024 14:40:49 +0000
asID:                     204508
IP address blocks:        2a05:dfc7:800::/39 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:77:9a:1a:74:ef:5a:66:b1:64:93:0b:e6:27:55:ce:64:73:51:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun 16 14:35:49 2023 GMT
            Not After : Jun 14 14:40:49 2024 GMT
        Subject: CN=56D51F41A7F147CECE74D0358D976B2124FA3CC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:16:e2:44:83:75:71:a5:c1:2e:e6:d4:50:fd:
                    3a:9c:ed:f4:9b:53:12:40:c6:bf:ae:b9:55:8f:0f:
                    a2:60:90:cf:21:cf:aa:69:f8:41:1a:12:62:78:4b:
                    f2:e9:5f:65:78:7f:19:dd:87:59:e5:2a:94:24:18:
                    2a:77:cb:1e:9d:52:0d:77:2b:85:82:84:6e:89:fd:
                    d9:c2:d2:25:53:76:37:99:3d:e3:62:21:f1:b6:88:
                    d5:9d:04:d7:3b:27:ae:08:3b:e8:6d:cb:17:62:0a:
                    70:a8:a0:57:24:b2:6b:f2:21:e1:3c:ae:4b:af:d9:
                    0b:bd:ec:25:65:a6:80:0c:a9:ab:61:46:b7:0f:e1:
                    a4:00:94:df:6e:26:b9:16:35:35:d1:a1:38:18:8f:
                    1b:cc:43:11:86:3f:1b:94:8c:d0:78:9b:e1:28:ac:
                    a7:e9:bb:fb:49:75:2d:70:be:29:ba:e1:d8:99:b1:
                    ed:80:42:52:5b:e8:f9:e3:3c:82:bf:d7:81:71:7d:
                    a6:6a:9d:97:e9:a1:23:f9:0b:bb:18:ad:5d:5c:96:
                    7c:c6:2e:f4:4f:03:24:4d:7a:fa:fd:78:51:3c:15:
                    5b:a5:67:b8:1e:60:2f:f8:c4:ea:46:bb:c4:3a:f7:
                    3d:3b:7e:be:f8:fc:a9:93:d2:f9:18:98:3d:e7:a7:
                    ba:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D5:1F:41:A7:F1:47:CE:CE:74:D0:35:8D:97:6B:21:24:FA:3C:C8
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a3830303a3a2f33392d3438203d3e20323034353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:800::/39

    Signature Algorithm: sha256WithRSAEncryption
         35:ff:ed:4d:fc:1d:10:95:bc:b5:e7:80:3f:99:c5:e1:74:fc:
         dc:51:fa:7b:ee:20:43:b7:ce:42:57:ae:76:7f:43:72:d5:31:
         c8:78:95:95:63:be:e4:0d:93:2c:81:d0:c4:b2:b4:ca:61:a4:
         54:6c:3b:10:7f:1d:b5:d7:ae:cb:be:aa:66:f2:a0:00:d7:79:
         8e:d8:31:e2:57:2c:bc:27:dc:3f:31:b4:54:d8:0d:9d:27:f6:
         9d:e9:a8:4c:94:e2:24:44:6e:a7:17:b3:3c:d5:6c:e1:ea:6c:
         18:42:b7:5d:15:52:aa:e2:31:ef:63:4d:6e:3c:bd:23:9c:bf:
         54:c5:e1:71:46:77:58:8a:2a:bd:8d:93:3a:84:2e:03:f7:f3:
         f1:6c:65:0e:69:16:d2:30:6b:a6:eb:c8:41:c7:c1:0a:16:86:
         24:20:cd:cc:6d:de:c4:b3:d9:d3:bd:f8:70:89:01:9c:98:c4:
         88:17:c5:57:17:4c:c9:cf:be:a5:c3:1a:d2:fd:d3:51:29:be:
         ec:db:52:c5:c0:79:7a:b0:87:1c:3d:b3:89:61:77:1d:3d:4b:
         e9:fe:91:32:9e:bf:09:15:86:16:36:a0:67:d2:81:15:ae:6d:
         a3:8c:5a:4e:de:0e:61:25:66:b3:96:92:ef:4c:3a:b5:52:a8:
         87:29:b0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----