Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a383430303a3a2f34302d3430203d3e20323035343332.roa
File:                     326130353a646663373a383430303a3a2f34302d3430203d3e20323035343332.roa (raw, json)
Hash identifier:          /o0bJKr1FyzBQ2Ruv61TlpsTSrSGL3qRkVoO63iSNNI=
Subject key identifier:   D8:56:04:3A:7D:BA:17:F1:96:9F:61:0F:16:CB:2D:EA:00:7C:7B:5F
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       56C231990DD67236B9C6D58D8D1BE94717035527
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a383430303a3a2f34302d3430203d3e20323035343332.roa
Signing time:             Fri 14 Apr 2023 01:52:44 +0000
ROA not before:           Fri 14 Apr 2023 01:47:44 +0000
ROA not after:            Fri 12 Apr 2024 01:52:44 +0000
asID:                     205432
IP address blocks:        2a05:dfc7:8400::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c2:31:99:0d:d6:72:36:b9:c6:d5:8d:8d:1b:e9:47:17:03:55:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:47:44 2023 GMT
            Not After : Apr 12 01:52:44 2024 GMT
        Subject: CN=D856043A7DBA17F1969F610F16CB2DEA007C7B5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:1e:c3:61:df:54:9e:3e:3e:d0:c6:07:cf:
                    6c:6e:86:0f:78:67:ac:47:9f:27:e6:d7:05:b8:91:
                    33:74:a8:d3:29:f3:26:7d:cc:69:68:75:6e:0e:68:
                    de:3e:8c:b4:41:12:9a:f8:4a:02:83:aa:43:e6:60:
                    11:7c:cb:23:cd:43:0f:c0:6b:c5:67:86:f1:25:be:
                    ad:18:63:fa:20:e3:69:af:12:b7:b3:e8:78:a2:9c:
                    eb:20:e3:4a:e4:b6:d5:01:61:d1:5f:1a:e8:e0:91:
                    50:e2:e5:97:be:b7:36:24:83:05:0b:45:e5:e3:13:
                    fa:ff:ad:68:45:fc:80:4d:40:6a:21:5b:6f:c6:17:
                    c3:d6:53:e5:c2:3e:5d:28:32:03:e5:a5:86:0e:5a:
                    5a:00:24:b3:44:c5:0a:06:a7:9c:6a:95:b2:79:1f:
                    b4:11:a6:e2:6f:48:ce:2f:56:74:c4:f7:7a:14:d9:
                    65:1c:18:7a:27:3a:2d:9d:ad:46:f1:70:49:68:c1:
                    1b:ab:3b:66:cd:61:4d:75:c5:f1:32:41:f3:58:b7:
                    0c:da:7f:27:bc:72:87:6a:6b:c2:60:79:c8:34:f7:
                    dc:ab:5d:69:fa:4f:64:2f:57:be:58:5e:d1:43:5c:
                    07:de:c2:03:56:17:6f:df:05:05:a2:cd:ec:bd:96:
                    2d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:56:04:3A:7D:BA:17:F1:96:9F:61:0F:16:CB:2D:EA:00:7C:7B:5F
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a383430303a3a2f34302d3430203d3e20323035343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:8400::/40

    Signature Algorithm: sha256WithRSAEncryption
         9a:d0:21:c5:80:f9:60:d6:9b:d6:79:7b:77:5d:2f:e7:92:ce:
         e7:2e:4c:aa:83:f9:9b:01:65:ab:4f:7f:11:d2:70:24:e7:38:
         9c:8d:4b:b4:f6:bb:af:b6:60:ba:51:3c:10:da:c6:6f:e2:fa:
         ec:64:5d:0d:f2:f9:3c:ab:b6:bc:8f:e6:84:b9:c4:b8:de:5a:
         ac:31:54:d9:a8:23:47:67:a0:03:a5:bf:88:8a:1b:af:ec:95:
         6b:55:05:15:21:d7:fb:b4:55:df:0e:30:89:41:c5:96:4c:e1:
         42:88:82:0c:81:a9:2f:f0:84:f7:8c:02:b2:04:4f:2f:3e:d0:
         cc:f5:db:c6:e3:02:c3:28:3b:e7:7c:97:99:5c:fb:f8:d1:de:
         6c:c9:30:97:f1:74:3e:4b:dd:fd:77:e0:ae:41:78:2b:01:c1:
         e6:fd:ab:27:c6:41:de:78:7f:99:b3:63:9a:b8:25:1f:73:f2:
         39:17:de:2b:8e:46:33:84:fb:f2:f9:19:b9:49:9d:72:41:80:
         a5:e6:08:ce:0d:14:48:11:8b:2d:d0:d0:60:fe:64:db:0e:c9:
         cc:c4:b9:75:18:90:70:81:0d:91:af:95:42:4d:47:c7:24:57:
         9b:db:65:9c:8a:48:81:1d:7a:e0:51:81:4d:25:d4:a9:49:ea:
         59:75:e5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----