Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a383530303a3a2f34332d3433203d3e20323131353039.roa
File:                     326130353a646663373a383530303a3a2f34332d3433203d3e20323131353039.roa (raw, json)
Hash identifier:          2zPmN71OkadGoDgEDF42rIjKaKjfc1S+B+A3aPh9OPY=
Subject key identifier:   44:E5:D9:64:C4:0E:FB:DE:60:74:35:8A:35:25:D2:85:D6:F6:2F:B8
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       3EC9865FECF2BDC5C24A539622F9CD076D3E50B0
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a383530303a3a2f34332d3433203d3e20323131353039.roa
Signing time:             Fri 14 Apr 2023 01:58:46 +0000
ROA not before:           Fri 14 Apr 2023 01:53:46 +0000
ROA not after:            Fri 12 Apr 2024 01:58:46 +0000
asID:                     211509
IP address blocks:        2a05:dfc7:8500::/43 maxlen: 43

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c9:86:5f:ec:f2:bd:c5:c2:4a:53:96:22:f9:cd:07:6d:3e:50:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:53:46 2023 GMT
            Not After : Apr 12 01:58:46 2024 GMT
        Subject: CN=44E5D964C40EFBDE6074358A3525D285D6F62FB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:79:8d:02:c6:f0:63:b6:f7:19:22:d7:4d:9f:
                    8e:9b:80:b9:55:95:82:4d:a2:5f:23:bc:8f:29:ba:
                    2a:83:bc:69:41:b3:0f:df:20:49:b8:33:6e:6d:89:
                    0a:0f:f7:3d:42:c5:88:ca:b0:d7:70:12:79:ec:fe:
                    d6:33:e2:35:4c:b2:f2:37:de:a8:fc:cb:7b:e4:90:
                    bf:16:24:58:93:38:52:4f:88:19:ed:be:f5:79:2f:
                    a8:5a:02:53:c1:0e:e5:43:e4:e3:89:81:82:a7:68:
                    06:94:76:ed:39:b1:7d:bf:6a:2d:7c:30:8d:f2:94:
                    1d:d5:7c:70:b5:e5:8e:76:0f:29:14:8f:70:b1:82:
                    5e:da:21:50:62:58:ce:6c:6f:93:3b:c5:1b:10:62:
                    e0:77:b4:3e:a3:ff:e6:60:57:b3:cd:b6:d0:61:a9:
                    ba:57:3d:87:b9:9d:c8:22:6b:52:16:e1:96:cd:e1:
                    64:88:1c:2a:e9:3e:a7:bd:6f:a3:20:60:7d:80:21:
                    6b:96:bb:6e:39:43:28:c2:29:72:61:08:48:04:d7:
                    09:a3:4f:56:b6:d5:18:4c:e2:48:87:70:4d:08:d8:
                    f8:e9:22:b3:f0:9b:08:44:19:15:65:81:2f:3f:08:
                    49:56:ac:72:bd:1e:97:b6:e5:1c:8f:ad:7d:93:a3:
                    8f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E5:D9:64:C4:0E:FB:DE:60:74:35:8A:35:25:D2:85:D6:F6:2F:B8
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a383530303a3a2f34332d3433203d3e20323131353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:8500::/43

    Signature Algorithm: sha256WithRSAEncryption
         15:33:e1:34:a2:8d:0b:d4:7e:ac:13:c6:74:6b:47:ba:df:2a:
         2d:62:02:aa:52:22:15:fc:a2:a7:db:ee:d4:d6:50:da:bb:9b:
         9b:55:54:04:da:33:da:16:1a:50:ef:31:f4:6e:97:19:e4:e3:
         d1:fc:20:2d:af:a8:37:66:6a:72:98:ef:e2:06:f7:2b:e8:a6:
         ab:af:65:7d:3c:7d:5b:30:15:d4:00:aa:63:8f:e0:03:7c:17:
         f2:33:41:8e:d2:d4:41:80:17:65:43:c1:64:2b:be:94:94:9c:
         73:19:b0:b5:81:59:54:23:1d:20:26:d6:e3:ab:46:91:7d:88:
         9b:1b:cc:0b:44:36:a6:ea:3e:db:3d:5f:83:35:9d:05:57:08:
         6f:63:af:c1:c4:e5:e6:dd:7c:78:e1:c0:ec:dc:e3:c4:ac:1b:
         f7:28:d1:fc:d2:78:24:87:ba:38:ef:d3:a5:a3:19:7e:6b:66:
         77:eb:11:db:fb:e7:d8:55:86:40:2c:6a:90:ee:aa:a0:47:7e:
         59:25:76:5f:d5:8e:c2:cd:9f:8c:d7:dc:64:fd:74:a1:f3:18:
         67:05:8f:c5:4d:4c:c6:69:ec:55:84:e7:2c:ad:40:02:04:ca:
         4e:7b:a7:ba:30:28:8c:ef:3e:c2:80:7d:05:f7:13:95:30:b7:
         44:8c:54:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----