Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a3130303a3a2f34302d3430203d3e20323038353438.roa
File:                     326130363a313238373a3130303a3a2f34302d3430203d3e20323038353438.roa (raw, json)
Hash identifier:          SrKCTynxXQ1Dt3D0OXpNw8R4uJl8bz6O4Wo7evkjopU=
Subject key identifier:   A6:B2:86:83:45:8B:19:BC:B8:9D:F6:B5:FE:E9:22:5D:8E:DF:72:A5
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       3A5679D6F0BA5AB1CE15FD90FA41B2BF4FC05B2A
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a3130303a3a2f34302d3430203d3e20323038353438.roa
Signing time:             Fri 14 Apr 2023 02:02:06 +0000
ROA not before:           Fri 14 Apr 2023 01:57:06 +0000
ROA not after:            Fri 12 Apr 2024 02:02:06 +0000
asID:                     208548
IP address blocks:        2a06:1287:100::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:56:79:d6:f0:ba:5a:b1:ce:15:fd:90:fa:41:b2:bf:4f:c0:5b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:57:06 2023 GMT
            Not After : Apr 12 02:02:06 2024 GMT
        Subject: CN=A6B28683458B19BCB89DF6B5FEE9225D8EDF72A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:fc:57:b7:b4:36:30:55:c5:10:92:e4:14:
                    a4:48:41:b4:8e:38:00:51:41:49:dc:45:91:30:c2:
                    6a:5c:12:af:8e:39:45:05:96:99:1f:3d:00:eb:8b:
                    29:81:6e:a7:70:37:94:78:af:26:db:4a:8d:b8:be:
                    4f:82:09:b1:4d:e1:14:46:f2:a6:b5:d0:3b:d3:23:
                    4d:00:d1:0c:c0:53:81:05:f8:1c:4f:60:9f:31:fa:
                    48:b7:af:f6:c9:93:f5:e4:c9:98:6a:90:fb:2a:b4:
                    d9:a3:60:d3:bd:30:7d:73:a5:df:2a:99:21:b5:c5:
                    cc:a7:82:ac:31:cd:2f:28:9b:21:ff:91:e1:c5:84:
                    66:7d:ae:a0:8f:19:9e:ff:36:65:1b:28:5d:a6:c7:
                    fc:ee:3c:f0:1f:ff:1e:25:a8:5b:5f:75:5e:a8:4e:
                    a9:74:ea:07:b1:77:34:32:95:28:27:6d:aa:5f:80:
                    93:c8:8c:f2:f6:57:04:a7:63:ed:a3:5e:02:dc:c8:
                    1d:4a:65:08:ab:02:e7:5d:21:c3:3c:f0:af:3c:23:
                    fd:eb:f1:21:37:90:61:0f:a5:e1:88:8e:12:81:dc:
                    91:0b:a3:6e:c3:5f:5a:1f:a3:ef:50:23:0e:44:6f:
                    92:aa:13:c3:30:64:88:e9:7c:64:0e:4f:f8:b0:1a:
                    0f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B2:86:83:45:8B:19:BC:B8:9D:F6:B5:FE:E9:22:5D:8E:DF:72:A5
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a3130303a3a2f34302d3430203d3e20323038353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5c:e7:eb:15:b2:2d:52:7b:38:5c:be:3d:59:a3:20:e6:3e:41:
         cb:28:33:a2:ce:6a:de:c1:a1:9f:72:27:77:cd:f2:21:ba:fd:
         57:4a:ea:6b:46:93:ea:5d:d0:13:b5:57:41:7a:b9:e2:18:ca:
         6a:ca:3f:d7:a0:88:d0:7c:b8:56:84:d7:a2:be:c5:04:88:03:
         f9:c7:34:e6:81:d1:9e:1d:84:8c:c4:cd:20:e1:4e:f9:f0:7f:
         9a:bd:a8:d0:8b:af:54:e9:28:d2:3d:98:74:ea:32:c0:9d:9d:
         52:7a:bb:4d:e6:9b:2a:b7:34:33:1c:95:00:1b:1a:28:2a:d0:
         26:67:03:f7:0d:81:0b:b2:cb:ea:c4:8e:d6:be:ce:56:71:5d:
         23:97:00:f4:ff:d3:14:cf:dc:9c:3a:0c:e4:80:32:eb:e4:08:
         b1:72:23:fe:72:f0:bf:8b:5a:7b:dc:ff:85:ce:14:35:12:30:
         09:28:9f:32:75:94:91:50:c9:ed:89:af:d3:7b:a9:39:58:7a:
         ac:e8:86:42:0f:ae:92:cd:8b:df:41:d6:51:a4:92:16:b8:c8:
         9b:60:88:b1:c5:48:59:68:f9:4f:74:3c:df:de:7d:da:37:d3:
         3b:4d:85:ec:13:9a:9a:f2:f4:58:59:10:0f:38:d3:69:aa:7d:
         a4:1b:cb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----