Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a646663383a3a2f34382d3438203d3e20323034313336.roa
File:                     326130353a646663373a646663383a3a2f34382d3438203d3e20323034313336.roa (raw, json)
Hash identifier:          +W8qKViH0rbnSLlXu3kHxN3CH74N9YQmAXEU13hc6aw=
Subject key identifier:   1F:EF:F3:7B:F6:91:8B:C0:AC:5D:89:6D:EA:96:5D:6E:3A:7B:BB:A9
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       5665ECEA7E306039DF334ED932A3EE2CC71925C6
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a646663383a3a2f34382d3438203d3e20323034313336.roa
Signing time:             Fri 14 Apr 2023 02:13:07 +0000
ROA not before:           Fri 14 Apr 2023 02:08:07 +0000
ROA not after:            Fri 12 Apr 2024 02:13:07 +0000
asID:                     204136
IP address blocks:        2a05:dfc7:dfc8::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:65:ec:ea:7e:30:60:39:df:33:4e:d9:32:a3:ee:2c:c7:19:25:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:08:07 2023 GMT
            Not After : Apr 12 02:13:07 2024 GMT
        Subject: CN=1FEFF37BF6918BC0AC5D896DEA965D6E3A7BBBA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:ff:92:e2:1c:5d:a9:58:15:be:ce:a4:52:
                    38:8f:f3:8d:89:88:56:4c:92:8e:89:0d:2a:62:c7:
                    01:8c:ee:36:b0:82:c9:9d:4c:41:e9:db:60:c7:8d:
                    1b:4b:e9:37:cc:c2:c0:04:59:e3:45:3f:7f:4b:b1:
                    17:ed:e5:60:47:a6:1f:f4:8c:f6:79:84:0e:98:8e:
                    83:e7:ce:82:01:1b:95:8c:3d:f3:16:20:33:56:2a:
                    6e:14:90:7e:2a:3a:51:52:f6:6c:b3:cc:c6:31:7e:
                    97:5e:f4:2b:c0:ec:6a:ca:2f:5e:bf:a8:3e:82:1a:
                    80:20:cd:59:01:00:98:14:3e:ce:f8:d9:bc:ae:3c:
                    0c:52:24:b4:07:ca:b3:50:9c:66:d4:1a:1b:36:b4:
                    3d:ff:ae:37:70:3f:2f:15:c1:66:87:8c:84:57:90:
                    6b:d0:26:1c:b5:46:bc:91:26:b7:bb:54:a3:fc:bd:
                    93:7a:12:ae:1c:7c:c1:f9:b1:50:45:8b:1e:ef:fd:
                    69:71:c2:e8:5a:5b:1e:1a:c9:d2:da:6c:96:bf:00:
                    15:19:43:ca:6e:1f:29:c9:fc:1e:6e:b2:7c:33:72:
                    35:68:ab:6f:d8:7f:04:0c:04:fd:00:02:1d:c3:b1:
                    ac:6d:b1:ea:c2:71:cc:00:77:e2:f6:86:4a:2d:1c:
                    09:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EF:F3:7B:F6:91:8B:C0:AC:5D:89:6D:EA:96:5D:6E:3A:7B:BB:A9
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a646663383a3a2f34382d3438203d3e20323034313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:dfc8::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:92:a5:b3:93:95:81:fa:0a:7b:cf:6c:ab:93:51:ae:fb:c8:
         7b:71:49:43:2a:65:35:78:3e:60:53:85:ad:7f:5b:3c:87:6c:
         c8:cf:d9:87:78:28:1a:7b:6a:96:e3:73:8c:e1:a3:c5:9c:b5:
         3b:3b:79:5d:cf:d9:78:3b:d7:81:43:ac:d4:d3:01:57:81:65:
         20:48:11:c9:b4:44:61:06:12:03:a9:9a:f9:1d:43:98:70:86:
         e7:30:39:69:59:73:23:58:01:7c:1e:8d:34:37:2f:bc:9e:a2:
         f6:64:69:3f:ce:63:cb:04:91:61:b7:29:24:eb:13:89:d0:16:
         bf:1b:37:87:e1:98:49:7f:10:d3:21:ca:47:43:68:c8:16:35:
         44:43:20:98:a2:f8:ce:ca:9c:9f:8a:a6:e8:89:9b:17:dc:b5:
         b6:60:8d:c9:45:a7:61:3f:cf:c0:51:98:92:56:7f:2a:fa:e5:
         8c:c3:03:aa:54:9e:11:76:e3:e8:0c:2c:2e:89:dc:72:22:15:
         a3:f9:d8:da:03:84:ba:80:81:c6:48:35:80:c4:fe:06:da:15:
         c0:a8:71:7e:7c:87:5c:43:c7:19:f0:6c:a2:3a:5d:e4:83:93:
         a0:4f:59:94:c6:21:16:67:1e:47:9e:b0:2e:dd:8f:ce:94:42:
         da:30:df:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----