Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a383130303a3a2f34302d3430203d3e20323132323934.roa
File:                     326130353a646663373a383130303a3a2f34302d3430203d3e20323132323934.roa (raw, json)
Hash identifier:          wMOyTvBmhb8BRXuZWle1Fw1C9Mo4s+FVWNYVnK2FvV0=
Subject key identifier:   90:49:8D:D5:E9:44:58:3F:2F:6B:94:F0:23:B9:A1:27:52:E1:53:A6
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       0732983971C186EC64533FB60A9DD3EF7EC36DEA
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a383130303a3a2f34302d3430203d3e20323132323934.roa
Signing time:             Fri 14 Apr 2023 02:03:26 +0000
ROA not before:           Fri 14 Apr 2023 01:58:26 +0000
ROA not after:            Fri 12 Apr 2024 02:03:26 +0000
asID:                     212294
IP address blocks:        2a05:dfc7:8100::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:32:98:39:71:c1:86:ec:64:53:3f:b6:0a:9d:d3:ef:7e:c3:6d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:58:26 2023 GMT
            Not After : Apr 12 02:03:26 2024 GMT
        Subject: CN=90498DD5E944583F2F6B94F023B9A12752E153A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:6e:f0:eb:d5:55:0b:6e:57:14:de:62:3c:
                    46:8f:1e:82:34:2d:08:9d:5f:66:48:40:fe:8e:39:
                    2d:1a:b9:be:23:b8:a0:42:bf:94:99:bd:10:0a:fd:
                    bc:62:bd:07:7d:d1:1b:5b:71:1c:1d:f1:12:82:42:
                    5f:86:f9:54:57:23:c7:91:fa:df:cc:06:28:cf:60:
                    5d:0a:63:45:17:43:71:fd:fe:88:5d:ba:a6:9c:c1:
                    5d:8d:5e:2d:21:26:e8:a4:c3:e8:d2:dc:64:6b:2a:
                    67:c8:07:2e:54:05:25:68:0f:09:39:c6:25:17:3b:
                    0a:03:e8:f6:24:2d:f0:de:c9:0d:b2:b7:10:67:7a:
                    ae:a2:6a:bc:3a:2f:4a:f1:08:bf:cd:83:ea:12:58:
                    fc:a1:be:f8:a2:d9:2e:8a:62:4e:2a:c2:2f:79:84:
                    9a:37:cf:dc:85:fd:ab:a9:aa:42:cf:97:9a:7e:d0:
                    f3:32:dc:ff:63:ff:e7:21:c3:fe:54:52:e5:9e:6f:
                    8c:d7:e7:98:3c:ea:93:b9:48:bd:6a:8a:9a:6d:0d:
                    47:97:54:b7:b0:0b:d8:8d:c8:cb:c2:d5:9d:87:7c:
                    6a:88:01:0c:0e:d1:63:fd:bc:2f:ab:24:5e:07:a6:
                    19:f1:50:7a:cf:29:70:94:4c:46:05:01:96:a2:7b:
                    07:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:49:8D:D5:E9:44:58:3F:2F:6B:94:F0:23:B9:A1:27:52:E1:53:A6
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a383130303a3a2f34302d3430203d3e20323132323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:15:51:c4:4a:52:ef:e4:9b:9a:20:1f:8a:b5:38:e9:04:61:
         10:fa:6e:5e:45:04:d8:42:4c:61:7b:07:b6:bd:d3:e0:de:89:
         75:9a:e2:87:00:b6:67:8b:a3:dc:34:53:19:1e:61:68:b8:b1:
         14:fe:c1:1f:b6:4f:4a:19:4b:c3:ea:50:f5:74:b1:bb:bc:96:
         4b:8e:4d:a5:a5:76:6c:97:4d:06:fa:10:0e:41:a5:28:21:5e:
         5d:58:e0:bc:61:7d:3c:00:b3:f4:45:b3:9d:d2:11:61:48:de:
         02:40:fe:13:28:17:3e:06:55:39:71:97:70:35:8c:b3:b6:54:
         90:0a:50:df:3b:89:c5:48:38:0a:f0:72:0e:6d:75:88:2b:30:
         d4:9e:33:fe:ec:46:3e:74:61:a0:36:88:11:5f:d1:27:aa:4e:
         7c:2b:3f:3e:fb:8c:53:d1:3a:7e:9c:b0:33:02:fe:a4:d0:e2:
         25:ea:03:87:88:34:59:ab:b2:d6:9f:be:5b:bd:b6:06:21:54:
         6a:7e:86:23:30:97:d9:20:86:47:bf:31:30:2f:aa:c5:49:3a:
         20:5b:1f:e9:6c:22:cb:93:09:b5:2b:98:0e:d2:2e:be:75:bd:
         e2:41:0d:98:38:eb:38:ef:62:62:07:24:7a:0e:f6:52:1c:3a:
         0b:6e:73:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----