Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a393365303a3a2f34332d3433203d3e20323132353034.roa
File:                     326130353a646663373a393365303a3a2f34332d3433203d3e20323132353034.roa (raw, json)
Hash identifier:          cxpFJxS3eCAEugHtkLQVeieXL5XVWpj9wbBqQjuQ0HY=
Subject key identifier:   2F:20:89:42:95:27:5B:B6:EB:07:C1:30:55:18:2F:F5:C4:8A:A3:33
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       31C0FC1D176D0475C8318CAF00A125F8D785CEC6
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a393365303a3a2f34332d3433203d3e20323132353034.roa
Signing time:             Fri 14 Apr 2023 02:16:32 +0000
ROA not before:           Fri 14 Apr 2023 02:11:32 +0000
ROA not after:            Fri 12 Apr 2024 02:16:32 +0000
asID:                     212504
IP address blocks:        2a05:dfc7:93e0::/43 maxlen: 43

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c0:fc:1d:17:6d:04:75:c8:31:8c:af:00:a1:25:f8:d7:85:ce:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:11:32 2023 GMT
            Not After : Apr 12 02:16:32 2024 GMT
        Subject: CN=2F20894295275BB6EB07C13055182FF5C48AA333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:87:de:92:a3:97:fd:c2:c1:a2:67:85:51:64:
                    f4:91:f0:ab:2e:f2:de:77:40:ee:af:30:94:fd:04:
                    e8:28:34:b0:6a:5e:34:16:2a:ad:ae:cd:03:48:e0:
                    9f:1a:f7:d5:5e:7b:47:e7:78:ce:1c:fb:4d:ab:1d:
                    18:41:c6:84:0a:e5:db:b3:31:6e:8f:6c:70:b1:ce:
                    73:65:e9:dd:88:6d:66:b3:6e:f1:e7:b7:cc:fc:2f:
                    eb:d8:e9:db:29:bc:c4:2b:6b:86:f2:73:4e:a9:6a:
                    a4:79:c7:bf:23:59:8c:96:ae:46:e0:3b:10:d7:23:
                    f1:cb:dc:f3:ab:22:b2:0c:99:86:1b:89:2d:97:74:
                    22:c8:ee:0f:e1:82:5e:91:d8:e6:6b:93:98:75:c8:
                    00:4d:e7:6f:a2:55:3c:95:20:58:d2:b7:af:c6:f4:
                    79:6a:61:78:47:09:a8:df:19:87:d6:22:c1:f1:4b:
                    c2:5a:93:a8:3c:ff:ed:ad:6f:98:3a:31:4f:aa:59:
                    2b:75:7c:10:71:12:ab:42:85:e9:db:9d:b9:4c:c1:
                    35:83:88:2f:c8:32:ae:4d:fc:23:46:b0:60:e3:47:
                    42:9a:e8:04:27:55:79:30:ba:dc:7f:18:3a:2b:e7:
                    22:9c:70:11:fd:ac:72:0b:62:61:ad:90:a7:36:2a:
                    d3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:20:89:42:95:27:5B:B6:EB:07:C1:30:55:18:2F:F5:C4:8A:A3:33
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a393365303a3a2f34332d3433203d3e20323132353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:93e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         8f:ba:e6:c5:f6:22:84:f8:f6:9e:db:64:c9:09:5c:41:cb:6e:
         76:60:49:c5:bb:b7:ba:10:d0:e7:f3:5c:e5:61:f9:f8:c8:c0:
         59:bb:c7:e3:a4:cc:3c:23:53:31:73:e7:38:63:19:07:e1:54:
         7e:6e:76:62:e7:17:22:f1:fa:87:44:72:80:24:24:56:da:11:
         89:5a:db:10:3e:82:a5:3d:46:2a:b8:ef:87:91:b0:b7:a3:a6:
         85:3b:c2:21:fd:8e:25:cb:60:73:a7:39:5f:39:62:db:57:db:
         1a:da:af:70:05:18:0d:c8:86:64:00:da:95:16:31:66:68:33:
         44:8b:18:2a:93:e1:ef:65:c4:b4:64:90:7f:fc:11:61:ca:a7:
         d8:83:0a:39:55:3b:1b:55:d0:e4:16:19:9c:19:4a:b8:db:38:
         89:82:8d:e7:3a:8f:91:6c:1b:9a:7c:02:62:e7:aa:8d:c4:0d:
         17:54:09:d9:8e:86:b9:63:5f:1b:9a:c9:cf:bb:8d:20:70:de:
         a0:58:f8:fb:17:79:9f:80:cf:c1:5e:77:55:ad:bc:7a:32:b5:
         e6:a1:98:05:1a:35:5f:aa:a9:eb:9d:8a:9e:ad:67:77:67:fa:
         ed:48:03:1a:c6:f9:8e:81:67:e4:27:de:37:0b:e0:3b:81:d1:
         5e:b0:fb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----