Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a393430303a3a2f33392d3339203d3e20323033333233.roa
File:                     326130353a646663373a393430303a3a2f33392d3339203d3e20323033333233.roa (raw, json)
Hash identifier:          ql5EAuAlB9JjWMAfrAZ/LZ0TILC/GpomaXEYFDvMpMc=
Subject key identifier:   91:8D:A7:C1:40:16:76:FB:36:D3:29:94:71:99:D8:96:7D:3E:4C:7A
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       6728954982E29A99C6BE15256506D5F7B0FD6484
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a393430303a3a2f33392d3339203d3e20323033333233.roa
Signing time:             Fri 14 Apr 2023 02:07:23 +0000
ROA not before:           Fri 14 Apr 2023 02:02:23 +0000
ROA not after:            Fri 12 Apr 2024 02:07:23 +0000
asID:                     203323
IP address blocks:        2a05:dfc7:9400::/39 maxlen: 39

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:28:95:49:82:e2:9a:99:c6:be:15:25:65:06:d5:f7:b0:fd:64:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:02:23 2023 GMT
            Not After : Apr 12 02:07:23 2024 GMT
        Subject: CN=918DA7C1401676FB36D329947199D8967D3E4C7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:26:b4:69:dd:31:e8:cb:0d:1e:9c:8f:89:09:
                    27:73:e3:ba:fd:02:5d:a8:e0:d8:8c:ac:9e:84:2c:
                    a0:25:b9:26:5a:e6:e2:3f:59:5f:0a:41:de:1b:57:
                    17:79:e4:3a:89:5a:f0:05:44:14:8d:10:98:22:3e:
                    7b:44:a8:93:25:2b:66:fc:a0:01:a1:f2:23:71:f9:
                    04:70:4a:76:98:e2:ab:ed:79:ab:b8:a2:cf:d4:31:
                    bd:6a:84:27:f8:b9:0f:82:92:48:dd:7f:b2:9d:49:
                    4b:bd:75:65:73:72:f4:d3:7a:79:a1:48:37:8f:05:
                    a3:0e:c9:26:76:c0:7c:57:7f:71:11:59:80:ad:1a:
                    d1:a9:e6:d1:4f:5f:38:44:74:93:af:4b:77:19:cb:
                    8c:9b:a5:d8:9c:d7:08:42:08:d7:1c:8b:6e:fe:bf:
                    80:d0:5c:08:07:55:11:96:9a:02:eb:bd:f7:f7:cc:
                    66:4d:2f:a9:88:14:b3:f2:e0:47:89:da:b7:1f:a2:
                    eb:35:55:fe:1a:b2:07:e6:b8:d3:e5:82:24:be:36:
                    12:6c:8b:7a:0b:c6:bc:67:03:98:55:52:f6:91:70:
                    d1:70:0f:2c:31:6e:37:3e:d4:c3:3c:3f:2c:d8:4e:
                    4e:97:fc:b3:70:3d:f4:28:d0:a4:dc:43:4d:ea:e2:
                    24:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8D:A7:C1:40:16:76:FB:36:D3:29:94:71:99:D8:96:7D:3E:4C:7A
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a393430303a3a2f33392d3339203d3e20323033333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:9400::/39

    Signature Algorithm: sha256WithRSAEncryption
         36:de:79:78:a9:93:5e:1a:f8:27:67:d3:18:ca:73:13:e9:78:
         0f:70:aa:40:71:37:9c:d6:9e:46:3d:18:57:19:2c:ce:6b:91:
         a1:a9:05:ff:1b:e6:c5:d6:f4:bc:9a:44:86:06:58:74:d5:6d:
         b2:56:4b:ba:ed:cb:3b:26:93:2c:10:08:d5:cc:13:2b:a6:4c:
         43:8a:bc:a4:57:9a:8f:7d:d1:bb:7e:ea:8e:a1:b8:64:1f:31:
         72:b9:3d:75:99:0d:f8:5f:d5:7a:fe:1c:fd:19:d6:75:5e:0b:
         b4:59:90:14:d6:71:98:51:5d:62:c8:35:00:49:2c:81:6f:95:
         5e:74:97:fb:a0:ed:e2:2e:60:9d:db:d6:5b:d9:c9:06:56:ff:
         5c:9b:6e:b5:d8:9c:0b:d1:2a:fd:ad:4c:df:ab:51:ac:8d:11:
         af:70:40:b1:26:98:09:a2:f6:a9:59:c5:f3:7b:14:8f:db:7f:
         ba:31:81:8e:4e:2c:fb:59:c7:80:dc:ef:f3:ff:e6:3f:97:0d:
         d5:45:37:de:c3:54:c8:fb:e1:ac:bb:c0:f4:3a:dd:90:8c:b1:
         2f:74:04:af:00:50:06:cd:f6:3d:f5:18:42:1b:d0:74:0c:11:
         2c:5c:5b:e0:94:19:c6:d1:87:bb:93:1a:01:d7:95:fe:7c:d4:
         2c:ff:39:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----