Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a646663373a3a2f34382d3438203d3e20323034313336.roa
File:                     326130353a646663373a646663373a3a2f34382d3438203d3e20323034313336.roa (raw, json)
Hash identifier:          OQSefyfO83ROyLke9fhmOctrHajJw5dXbxtsR9gETuk=
Subject key identifier:   1E:55:CE:38:61:81:38:34:CF:4B:B8:32:C8:46:84:D4:FA:C1:40:BB
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       6CA495910A882CD16EC62F8840178F4A9A7DD8C6
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a646663373a3a2f34382d3438203d3e20323034313336.roa
Signing time:             Fri 14 Apr 2023 02:12:51 +0000
ROA not before:           Fri 14 Apr 2023 02:07:51 +0000
ROA not after:            Fri 12 Apr 2024 02:12:51 +0000
asID:                     204136
IP address blocks:        2a05:dfc7:dfc7::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a4:95:91:0a:88:2c:d1:6e:c6:2f:88:40:17:8f:4a:9a:7d:d8:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:07:51 2023 GMT
            Not After : Apr 12 02:12:51 2024 GMT
        Subject: CN=1E55CE3861813834CF4BB832C84684D4FAC140BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:22:2a:ba:83:7a:6b:26:16:8c:31:ca:6b:5e:
                    ef:9b:ba:cf:de:6c:e6:54:f6:db:a5:72:45:52:fe:
                    3b:ae:b5:ac:ee:e0:73:b2:d1:70:2b:d7:b1:b4:d2:
                    a2:23:c2:8e:e2:82:73:75:87:62:2a:20:b6:dd:d8:
                    a9:6b:38:9c:c7:1e:dd:47:f4:f7:2d:b1:44:ae:95:
                    35:24:4b:3e:58:f1:0b:4e:84:57:20:00:9a:50:06:
                    18:44:d9:1d:9b:a4:35:25:9d:00:49:ef:bf:25:ed:
                    8d:ed:e8:ca:f7:72:08:bd:23:34:15:ff:1a:58:b2:
                    db:76:f1:66:d4:5f:29:3d:8f:cb:e4:5c:d5:cd:81:
                    85:b0:78:fc:10:9d:e5:70:af:e4:4b:b9:20:19:b1:
                    02:bc:d2:06:96:d2:e0:1c:84:11:e5:b4:7f:77:5c:
                    bb:30:c7:50:fb:09:4f:0f:17:b7:e5:8a:d9:bf:43:
                    68:f1:dd:7d:e4:ce:4c:ee:b5:9a:fb:3b:cb:d3:69:
                    f3:c9:90:75:6a:0f:82:27:07:36:7a:25:5c:1a:f0:
                    85:db:05:a9:33:a4:f8:c5:e2:b8:fa:b9:9c:d4:66:
                    23:fb:96:22:db:7e:e9:e3:2b:96:99:b3:3d:1d:4e:
                    ea:b4:6a:b3:17:af:70:ee:6a:04:17:f3:82:7a:ea:
                    83:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:55:CE:38:61:81:38:34:CF:4B:B8:32:C8:46:84:D4:FA:C1:40:BB
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a646663373a3a2f34382d3438203d3e20323034313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:dfc7::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:75:65:f9:4c:fb:af:49:57:2f:9f:44:02:2b:89:0f:60:df:
         2e:92:2d:9c:11:9a:b4:61:15:15:ff:64:a9:ee:c3:0f:c9:6e:
         73:1f:f7:99:10:84:87:d5:0c:35:8b:c9:0c:41:2c:ad:8c:ab:
         97:c0:7b:4f:c6:e8:d4:19:6c:5a:51:80:19:7f:03:7f:37:1b:
         85:ad:a1:68:36:65:a4:ce:aa:f2:0e:70:b0:5f:b7:6f:ee:14:
         18:78:ca:0a:9c:9c:87:87:a1:f1:e8:6d:cc:e8:44:6d:3b:bc:
         66:2e:63:64:ee:5a:72:6c:e8:20:f6:3e:50:62:c0:d8:7f:4a:
         87:3c:4d:76:4b:de:db:a8:b8:1f:cd:86:6f:da:23:1d:c8:d8:
         60:3a:44:94:63:3b:08:60:de:97:0a:60:a6:eb:3f:5a:52:97:
         39:12:49:dc:08:52:1b:8f:95:09:d1:f0:21:a2:56:3b:0c:58:
         78:43:dd:b2:8e:09:b8:f0:1f:e7:90:4a:90:b0:c3:7c:27:35:
         fc:cc:c5:18:0f:fe:96:a8:49:2d:e9:4f:9a:64:f8:a9:0c:b6:
         1a:ae:c7:f6:11:93:be:d3:75:bb:a2:ba:40:0f:fb:1d:02:b0:
         96:35:cf:7a:15:a2:5d:17:70:b2:c6:a8:9c:62:7c:ca:13:ee:
         a3:97:e4:ba
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUbKSVkQqILNFuxi+IQBePSpp92MYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA0MTQwMjA3NTFaFw0yNDA0MTIwMjEyNTFaMDMxMTAvBgNV
BAMTKDFFNTVDRTM4NjE4MTM4MzRDRjRCQjgzMkM4NDY4NEQ0RkFDMTQwQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Iiq6g3prJhaMMcprXu+bus/e
bOZU9tulckVS/juutazu4HOy0XAr17G00qIjwo7ignN1h2IqILbd2KlrOJzHHt1H
9PctsUSulTUkSz5Y8QtOhFcgAJpQBhhE2R2bpDUlnQBJ778l7Y3t6Mr3cgi9IzQV
/xpYstt28WbUXyk9j8vkXNXNgYWwePwQneVwr+RLuSAZsQK80gaW0uAchBHltH93
XLswx1D7CU8PF7flitm/Q2jx3X3kzkzutZr7O8vTafPJkHVqD4InBzZ6JVwa8IXb
BakzpPjF4rj6uZzUZiP7liLbfunjK5aZsz0dTuq0arMXr3DuagQX84J66oOTAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUHlXOOGGBODTPS7gyyEaE1PrBQLswHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
gYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVMyMDU0MzIvMC8zMjYxMzAzNTNhNjQ2NjYzMzczYTY0NjY2MzM3M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzIzMDM0MzEzMzM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfx9/H
MA0GCSqGSIb3DQEBCwUAA4IBAQAkdWX5TPuvSVcvn0QCK4kPYN8uki2cEZq0YRUV
/2Sp7sMPyW5zH/eZEISH1Qw1i8kMQSytjKuXwHtPxujUGWxaUYAZfwN/NxuFraFo
NmWkzqryDnCwX7dv7hQYeMoKnJyHh6Hx6G3M6ERtO7xmLmNk7lpybOgg9j5QYsDY
f0qHPE12S97bqLgfzYZv2iMdyNhgOkSUYzsIYN6XCmCm6z9aUpc5EkncCFIbj5UJ
0fAholY7DFh4Q92yjgm48B/nkEqQsMN8JzX8zMUYD/6WqEkt6U+aZPipDLYarsf2
EZO+03W7orpAD/sdArCWNc96FaJdF3CyxqicYnzKE+6jl+S6
-----END CERTIFICATE-----