Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a393030303a3a2f33392d3438203d3e20313939363830.roa
File:                     326130353a646663373a393030303a3a2f33392d3438203d3e20313939363830.roa (raw, json)
Hash identifier:          yxqi+0lcH5gZwqppjfjcHJTwJQyVPti3K+en/A8+g6Q=
Subject key identifier:   62:99:B8:F0:D5:41:43:7B:6A:5A:98:34:1B:9F:C6:08:FC:9B:04:55
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       26D6AA4F8F4444ABE3C1E82577C118A4F01F45E8
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a393030303a3a2f33392d3438203d3e20313939363830.roa
Signing time:             Fri 14 Apr 2023 01:44:20 +0000
ROA not before:           Fri 14 Apr 2023 01:39:20 +0000
ROA not after:            Fri 12 Apr 2024 01:44:20 +0000
asID:                     199680
IP address blocks:        2a05:dfc7:9000::/39 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d6:aa:4f:8f:44:44:ab:e3:c1:e8:25:77:c1:18:a4:f0:1f:45:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:39:20 2023 GMT
            Not After : Apr 12 01:44:20 2024 GMT
        Subject: CN=6299B8F0D541437B6A5A98341B9FC608FC9B0455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:64:fd:41:51:c9:8c:c2:a3:78:91:98:5f:b5:
                    48:8d:37:a4:55:7a:ab:32:15:c0:88:19:6b:74:84:
                    72:e5:7c:d3:55:ef:8e:cb:5c:e7:c3:8c:b6:f7:ed:
                    79:67:2b:83:98:d6:58:a6:7c:82:bf:85:87:1f:02:
                    7c:01:f9:e2:97:21:78:56:1d:e2:5d:f5:ee:d5:98:
                    52:05:18:a3:3b:4c:62:4e:1a:a3:62:6a:b3:99:d9:
                    91:0c:93:61:f6:5e:85:f7:d0:49:8e:78:32:df:f9:
                    9f:f3:24:f2:19:12:7f:8e:97:c4:d1:a4:10:e7:3c:
                    e6:9b:7e:18:14:5e:eb:ed:99:c8:10:41:ec:1d:ac:
                    a9:bb:c5:36:24:9a:75:44:5a:4e:85:6a:57:55:84:
                    26:8b:40:db:98:99:1b:e0:da:cf:c9:52:8d:3e:e8:
                    8e:23:69:4c:95:bb:a0:f7:b7:22:0a:c4:7a:5a:6c:
                    e5:0e:68:23:2f:4a:d2:7e:6f:18:c4:7c:a4:f5:93:
                    ec:a0:3a:a6:53:12:49:5d:6e:90:d1:04:05:28:34:
                    78:60:04:cf:37:44:c5:7b:9c:53:af:c5:08:55:6a:
                    d7:25:31:c6:f7:a5:80:ae:db:5a:62:54:f7:80:4f:
                    24:e7:0e:f6:62:46:6e:e4:f6:6b:8d:42:9c:bb:f0:
                    37:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:99:B8:F0:D5:41:43:7B:6A:5A:98:34:1B:9F:C6:08:FC:9B:04:55
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a393030303a3a2f33392d3438203d3e20313939363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:9000::/39

    Signature Algorithm: sha256WithRSAEncryption
         72:34:4d:91:a7:01:79:74:e3:64:c4:7c:c8:09:77:f9:1f:bd:
         96:7c:fc:aa:c2:03:08:79:12:5e:63:42:bd:3e:c0:32:66:d0:
         a9:9b:ee:b6:80:45:69:0d:a9:22:ab:ce:67:2c:0f:48:09:72:
         dc:05:f8:f4:8c:f3:d9:e2:fc:a6:25:2f:42:0a:ce:91:c2:d9:
         00:66:7c:e7:3f:34:ad:fc:fc:e0:f8:4b:fb:5a:4e:23:ef:66:
         cf:26:95:b7:3e:1b:1c:9c:34:e6:13:3e:f1:8f:4c:61:5e:f5:
         61:ff:90:b5:14:5f:6c:9f:9e:b5:76:24:da:5a:c7:06:8d:a5:
         9b:ca:2d:c4:43:4c:6f:79:84:85:c2:21:97:21:61:1c:ce:db:
         fc:08:ba:c5:5e:5c:d7:2d:98:f4:fa:32:08:d4:85:f5:7b:15:
         b6:99:01:4e:04:d0:49:8e:78:31:ae:9c:94:aa:5a:2f:a7:4d:
         83:4d:73:db:bd:a2:d8:19:c9:5c:2f:73:75:5d:6b:48:db:99:
         92:3e:91:4d:31:47:d5:97:0a:3f:71:bf:96:25:16:fd:53:0e:
         13:4f:ad:17:f6:b0:47:48:7b:13:0d:28:ae:96:11:fd:f2:2e:
         1e:5d:0b:b2:d9:69:18:90:51:2b:fa:90:ab:41:74:7e:3d:f1:
         62:87:cb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----