Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a636130303a3a2f33392d3438203d3e20323131313531.roa
File:                     326130353a646663373a636130303a3a2f33392d3438203d3e20323131313531.roa (raw, json)
Hash identifier:          8t4LapZHiLIpNPInSrUrikq6KeojctI88WH4PE43k6Q=
Subject key identifier:   06:94:E1:6F:D7:1E:4D:3F:4E:00:D1:CC:8D:49:12:C8:94:EA:BE:1C
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       12790DA04E8A0AA5308241821B0CA2689C09EB08
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a636130303a3a2f33392d3438203d3e20323131313531.roa
Signing time:             Fri 16 Jun 2023 14:41:09 +0000
ROA not before:           Fri 16 Jun 2023 14:36:09 +0000
ROA not after:            Fri 14 Jun 2024 14:41:09 +0000
asID:                     211151
IP address blocks:        2a05:dfc7:ca00::/39 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:79:0d:a0:4e:8a:0a:a5:30:82:41:82:1b:0c:a2:68:9c:09:eb:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun 16 14:36:09 2023 GMT
            Not After : Jun 14 14:41:09 2024 GMT
        Subject: CN=0694E16FD71E4D3F4E00D1CC8D4912C894EABE1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:32:37:65:bf:45:fa:22:64:e5:4a:9a:f9:e0:
                    cf:f1:4f:1d:2e:c1:47:a4:22:fa:d8:21:69:f3:c2:
                    1e:76:aa:ec:1a:1a:19:c5:4c:e6:15:31:07:95:3c:
                    f2:1b:e1:a7:ba:ba:53:2f:9f:c5:89:a3:6c:09:91:
                    ac:bf:d4:aa:a5:d7:f3:32:96:c6:0f:92:ec:7d:52:
                    60:53:7c:98:b1:de:7d:d6:62:e1:cb:bc:de:51:4d:
                    f8:12:8a:f7:45:ed:22:2a:b4:9f:c6:a5:62:86:7f:
                    b9:69:c6:99:f0:39:ab:78:6c:d5:68:3d:b0:b5:88:
                    c8:bc:9c:3c:5f:e4:df:97:21:35:19:ed:09:60:98:
                    38:e2:d2:ef:1c:c0:57:1a:99:9a:2e:a8:39:7a:02:
                    8a:b2:4a:34:12:1c:23:2b:6e:19:25:2d:c1:f8:50:
                    e6:0a:ce:e7:e2:ea:c4:3e:62:9e:cf:c5:41:a9:41:
                    4a:f8:c5:5a:af:0a:f0:18:a6:35:b7:b9:0a:55:2e:
                    8a:84:b0:7f:dd:48:9b:ba:40:bc:35:59:e1:62:12:
                    5d:2c:01:63:22:ef:15:c8:57:c4:d0:1e:71:ae:f6:
                    57:f5:4a:59:ce:86:20:a1:37:8e:8f:0e:fe:89:2b:
                    f8:2c:ae:7d:2b:b5:9a:20:31:7b:a0:b3:c8:34:3b:
                    49:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:94:E1:6F:D7:1E:4D:3F:4E:00:D1:CC:8D:49:12:C8:94:EA:BE:1C
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a636130303a3a2f33392d3438203d3e20323131313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:ca00::/39

    Signature Algorithm: sha256WithRSAEncryption
         97:25:71:69:0e:a0:12:57:a8:3b:04:a5:ff:e8:eb:fd:cd:b3:
         5d:69:57:b5:7c:51:f1:18:c3:cf:71:ed:35:04:f0:ad:25:8b:
         8c:b5:5f:91:a4:9c:c2:04:59:05:4f:76:e4:fe:ec:31:b3:84:
         2a:4b:1c:95:40:1d:c0:1b:20:ca:0d:ac:35:e2:a5:13:81:17:
         2f:f2:b7:38:3f:4b:08:2f:fc:86:29:7b:00:cf:b0:ac:d6:16:
         98:e8:65:52:fe:cc:73:a6:90:4c:8b:ba:ad:f0:38:57:1f:40:
         da:e8:eb:2a:67:a2:3c:7a:93:73:5b:a2:84:fc:a2:2a:ca:37:
         b6:7d:33:e8:a1:32:c7:0c:6a:4d:0d:21:a9:7e:46:aa:ae:80:
         78:1b:85:0e:42:3c:72:11:e1:55:2a:26:6e:65:09:ea:06:39:
         b0:0a:03:d6:42:72:93:dc:ac:5d:5e:30:2a:06:3d:ba:14:1b:
         5d:52:f9:58:96:d1:e3:14:5e:85:5b:14:ec:22:ae:f5:6c:77:
         e3:dd:7c:c3:ae:50:7f:27:c4:fc:a5:28:b8:0d:64:bb:97:e0:
         f2:fe:53:de:c8:28:2e:45:e9:a4:4c:de:cf:e9:e6:c6:c6:4c:
         f6:a4:62:9b:bf:46:ad:13:1d:81:bc:77:8d:9d:cf:d1:39:95:
         60:5d:a8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----