Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a3a2f33322d3438203d3e20323035343332.roa
File:                     326130353a646663373a3a2f33322d3438203d3e20323035343332.roa (raw, json)
Hash identifier:          qpQGx7EXJo5iNdhMQvanG2lftMoOA2Glb59jo0e9Ejk=
Subject key identifier:   B2:0B:54:4C:47:BC:32:31:B7:79:7E:FB:F6:91:F6:8A:AF:7B:37:9A
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       1C0CCFE51273713F8F7328C0D13C273BD1BAACE4
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a3a2f33322d3438203d3e20323035343332.roa
Signing time:             Fri 14 Apr 2023 02:18:45 +0000
ROA not before:           Fri 14 Apr 2023 02:13:45 +0000
ROA not after:            Fri 12 Apr 2024 02:18:45 +0000
asID:                     205432
IP address blocks:        2a05:dfc7::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:0c:cf:e5:12:73:71:3f:8f:73:28:c0:d1:3c:27:3b:d1:ba:ac:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:13:45 2023 GMT
            Not After : Apr 12 02:18:45 2024 GMT
        Subject: CN=B20B544C47BC3231B7797EFBF691F68AAF7B379A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:57:6f:02:86:6a:2d:04:47:2a:04:2f:7d:30:
                    3f:3a:a4:7b:25:aa:ec:74:ce:d2:d7:d0:e9:0b:c5:
                    be:30:b1:4c:8e:8b:f4:6a:26:da:1f:82:87:41:72:
                    dd:a8:4f:4b:1c:a0:aa:28:78:1e:23:11:70:43:a0:
                    a9:58:16:f4:be:be:65:84:b5:4a:8b:bb:4c:57:47:
                    fe:06:b9:11:1e:fd:29:f3:80:72:72:8a:53:fb:ef:
                    39:c9:f3:68:9d:87:60:df:6e:b9:d2:76:e2:f0:24:
                    a5:98:ea:4d:5c:f3:e1:b8:bb:f1:0d:b3:4c:08:ec:
                    9a:65:b3:67:49:0e:e1:3f:c0:ae:29:cb:e3:c7:c3:
                    aa:5b:13:9f:d1:d7:9a:fa:d2:c0:41:31:45:2d:67:
                    fc:e3:29:13:d4:78:2b:c3:93:ad:5e:4a:39:b3:fe:
                    df:70:f8:60:45:7b:1b:02:80:66:9c:98:5e:53:00:
                    65:bf:4c:91:72:9f:c8:e3:ef:d0:91:50:c3:3a:8f:
                    3a:bc:7f:18:17:ed:57:bd:08:af:9f:89:e0:54:94:
                    53:1b:e9:b4:cd:c2:74:8c:f5:1f:89:db:b5:9e:b7:
                    a2:38:23:ad:8a:54:e2:ab:c7:44:39:c2:eb:92:5f:
                    ff:ce:e9:94:92:3d:05:96:a5:47:ec:cd:94:bb:2e:
                    f1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0B:54:4C:47:BC:32:31:B7:79:7E:FB:F6:91:F6:8A:AF:7B:37:9A
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a3a2f33322d3438203d3e20323035343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:09:9b:62:33:83:57:84:a3:8b:f1:2c:f9:fb:3d:17:b2:9e:
         55:da:01:e5:92:95:57:20:a5:28:67:80:59:4b:2c:95:5a:0a:
         3f:0a:fc:7c:55:52:4a:29:d4:2d:44:43:bb:98:ea:c1:66:1d:
         12:b3:09:c4:42:df:26:17:1a:08:cc:b0:a7:ef:3d:6e:dc:4d:
         b4:7f:e5:d4:3a:85:62:3c:d1:1c:c6:c6:14:b6:68:61:65:a8:
         41:e1:05:b5:26:6d:9d:d8:ed:dc:98:6c:72:d9:e6:2b:68:a4:
         0d:88:b6:f2:06:95:1c:56:e7:f0:b9:4e:b5:18:69:b2:e2:72:
         d7:59:58:42:8f:9f:f3:c7:b3:fc:79:57:e3:25:60:2b:7e:e2:
         8e:dd:9e:b5:f2:ef:e8:2a:ce:01:33:d6:fa:b4:88:ea:24:85:
         28:43:8b:58:62:9a:cc:19:a3:ed:03:c7:db:cd:c3:9f:44:99:
         fe:b0:8c:58:b7:c8:90:2a:1a:c1:8f:68:d5:2b:bf:ef:93:d9:
         2b:41:f6:6c:3b:35:05:48:2c:cc:a5:f5:80:2e:0c:29:dd:bb:
         8c:ca:c6:4a:08:3a:41:cd:d4:7b:a0:cd:90:ca:24:4c:69:cc:
         03:9e:6d:f7:19:e0:18:7a:24:89:3a:63:18:a5:4d:71:2a:7e:
         10:c1:f5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----