Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a383830303a3a2f33392d3438203d3e20323033303632.roa
File:                     326130353a646663373a383830303a3a2f33392d3438203d3e20323033303632.roa (raw, json)
Hash identifier:          8RXCD3IqpU95H0M9UREyN3UIwigy2iUDNAo6VnIxwdM=
Subject key identifier:   07:FC:FA:76:7E:C1:69:5E:CE:7E:5B:4D:A2:50:1A:22:90:A2:D7:09
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       4B3C7D810568257A1014A66C5A8726A08AF4CEB6
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a383830303a3a2f33392d3438203d3e20323033303632.roa
Signing time:             Fri 14 Apr 2023 01:49:52 +0000
ROA not before:           Fri 14 Apr 2023 01:44:52 +0000
ROA not after:            Fri 12 Apr 2024 01:49:52 +0000
asID:                     203062
IP address blocks:        2a05:dfc7:8800::/39 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3c:7d:81:05:68:25:7a:10:14:a6:6c:5a:87:26:a0:8a:f4:ce:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:44:52 2023 GMT
            Not After : Apr 12 01:49:52 2024 GMT
        Subject: CN=07FCFA767EC1695ECE7E5B4DA2501A2290A2D709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bd:c2:ad:47:1e:f6:64:91:ed:c4:e3:ff:59:
                    1f:9e:db:41:08:cb:90:61:9e:d4:9d:c9:c1:2b:35:
                    95:6c:e0:d9:49:5d:7c:de:33:ae:f5:f3:25:64:67:
                    3d:89:9d:1a:ce:7b:a4:4f:b0:0c:bd:d3:e9:79:8e:
                    c4:e7:61:d3:a4:7a:08:e5:8e:f2:e4:98:d8:37:44:
                    40:a6:04:cc:8d:2a:a2:42:44:57:7c:f1:37:55:6e:
                    67:15:6d:45:4c:7e:df:83:29:39:a9:b1:60:c6:b9:
                    aa:fb:32:a3:a7:f8:93:c6:38:06:8d:45:2d:9e:3d:
                    61:51:86:31:cd:e3:78:75:3d:be:f8:a0:00:5b:06:
                    ec:51:8a:f2:d2:af:42:7c:af:52:f3:fa:9b:bc:b2:
                    09:36:92:ba:2b:10:b8:23:a4:ac:e1:86:66:a2:a1:
                    39:ac:b1:13:20:02:9a:6e:3b:08:33:6d:93:ad:ae:
                    35:9d:55:1d:3d:02:2a:72:48:d3:4b:02:b1:ef:25:
                    c3:a3:f9:40:29:be:88:9b:fb:2d:56:13:17:32:fb:
                    71:97:7b:e2:ea:8c:49:ab:e7:db:12:d9:4b:ee:e9:
                    8d:d8:f5:cb:85:ee:0d:2b:30:6e:59:d9:f1:f7:3d:
                    2a:63:ce:85:35:3f:c1:9a:2a:bc:a2:9d:5c:d4:2c:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FC:FA:76:7E:C1:69:5E:CE:7E:5B:4D:A2:50:1A:22:90:A2:D7:09
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a383830303a3a2f33392d3438203d3e20323033303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:8800::/39

    Signature Algorithm: sha256WithRSAEncryption
         37:bd:e1:87:76:cc:8e:26:a3:23:81:1a:30:7c:06:7c:a2:ea:
         69:f2:d0:c2:d3:d7:91:87:6f:5f:7e:8c:f6:2b:6a:8a:57:80:
         e0:d2:fc:01:0d:e2:aa:36:8c:4e:dc:3e:02:2f:c7:39:2f:4f:
         03:6a:bd:32:e9:dd:b2:f4:03:22:74:74:64:29:df:20:50:d8:
         ae:45:81:eb:d9:6e:d7:f0:e8:10:06:21:8b:e4:46:0e:02:f3:
         89:a3:09:a4:e1:4d:7b:e7:63:d0:c0:e3:7d:99:c3:56:b5:65:
         fb:f5:a0:7e:90:28:88:92:76:df:0f:34:73:8c:f1:53:b9:1a:
         45:f2:51:34:88:e4:66:eb:9f:79:ad:80:bc:e8:fd:50:cc:12:
         17:9a:c8:aa:db:01:6a:8f:04:76:44:5e:c1:43:02:15:7a:07:
         9e:28:67:99:af:3c:c9:f4:df:83:95:b8:00:96:8a:05:c0:b0:
         22:14:c7:cc:fe:e1:e4:81:bf:69:7e:0a:93:4d:7d:42:19:c1:
         98:29:16:01:da:85:7c:39:ee:d6:6d:da:5e:58:76:96:75:4f:
         f8:1a:7d:6b:5d:f4:af:bb:d6:82:ca:bc:9c:37:36:5a:3f:ec:
         8d:b8:ee:df:39:61:8b:68:2e:9c:e2:a1:aa:c2:d5:a5:a2:43:
         6b:b2:37:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----