Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a313330303a3a2f34302d3430203d3e20323034333734.roa
File:                     326130363a313238373a313330303a3a2f34302d3430203d3e20323034333734.roa (raw, json)
Hash identifier:          joMkSfULQah24a1fpQZn6ouMf/Vk/a7cfD5Hd4NhZzY=
Subject key identifier:   5A:CC:8B:53:3C:FF:0C:39:1A:6F:CC:C9:55:70:3B:3E:69:C2:E8:BB
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       0899227D319AC002687462206BB92886A37B4247
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a313330303a3a2f34302d3430203d3e20323034333734.roa
Signing time:             Fri 14 Apr 2023 02:13:24 +0000
ROA not before:           Fri 14 Apr 2023 02:08:24 +0000
ROA not after:            Fri 12 Apr 2024 02:13:24 +0000
asID:                     204374
IP address blocks:        2a06:1287:1300::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:99:22:7d:31:9a:c0:02:68:74:62:20:6b:b9:28:86:a3:7b:42:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:08:24 2023 GMT
            Not After : Apr 12 02:13:24 2024 GMT
        Subject: CN=5ACC8B533CFF0C391A6FCCC955703B3E69C2E8BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:65:6b:ad:e9:26:1f:9e:cd:49:d2:82:5a:ac:
                    75:ce:d3:32:06:8c:3e:aa:b0:5c:e1:21:6e:1b:b4:
                    3e:30:65:49:cf:2d:e4:8a:b7:7b:52:a6:10:fd:82:
                    7a:53:9f:fe:e8:29:22:d5:e2:e2:57:3e:a5:48:1b:
                    dd:2d:f0:e0:38:de:aa:54:55:e8:c3:79:75:3f:65:
                    f5:78:8f:19:b6:93:16:64:db:53:f4:6c:bb:0f:56:
                    2f:1f:c1:69:0d:e1:8c:07:a0:23:6c:ca:a8:c4:e7:
                    28:27:de:a2:9b:79:df:db:4b:1b:8c:6a:7d:e4:ee:
                    1e:5b:58:84:57:a5:7c:e5:4d:53:93:ed:69:2d:bb:
                    2f:5b:0d:c0:6b:cd:bf:ca:c9:89:c9:f7:7a:a0:b2:
                    44:5d:a9:e9:3a:68:98:dd:85:5e:55:20:c1:6d:4d:
                    b3:a5:81:9d:3d:90:83:fa:c3:b1:16:dc:06:58:49:
                    08:97:e7:49:ba:98:b6:43:f4:4d:fa:81:5b:0f:06:
                    68:aa:7f:8e:5a:1a:bb:e6:ad:26:5c:0c:dd:c0:70:
                    e2:0e:0d:97:49:62:0d:b6:e6:3f:5d:03:79:46:1c:
                    7f:08:9d:cc:c7:19:d2:3a:8b:71:a2:5c:fe:ad:d6:
                    4f:80:f4:1f:de:d3:15:c4:a7:63:93:cf:da:25:e4:
                    94:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CC:8B:53:3C:FF:0C:39:1A:6F:CC:C9:55:70:3B:3E:69:C2:E8:BB
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a313330303a3a2f34302d3430203d3e20323034333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:17:f8:55:32:69:25:26:84:63:36:ea:50:fa:22:39:3e:0e:
         ce:82:b3:a2:a7:34:9a:82:83:ae:a1:c9:4f:1b:26:65:69:c0:
         4c:e9:f4:e6:7a:4d:4b:ef:b2:7d:1f:b0:5f:4c:f7:57:1e:7f:
         7f:f6:ce:6d:73:46:11:8e:e3:54:04:54:84:b0:9f:df:6e:b5:
         9d:c6:91:ea:db:0d:04:b4:76:43:fa:b9:6f:40:f4:03:40:32:
         2e:ec:b5:e9:49:6b:2c:d2:1f:fe:e7:5e:fa:3b:4d:dc:9b:2b:
         26:a4:3a:36:04:61:46:dd:3b:c8:fe:90:8e:55:97:45:bb:24:
         e7:3b:cf:a5:19:69:56:ca:03:8e:2f:4e:2b:34:09:6a:81:f1:
         5d:b2:37:7e:f4:41:f6:fc:1a:a2:31:d6:7a:7c:48:6d:1f:43:
         80:9f:d3:a0:6b:77:3d:f8:9b:3e:b3:42:f7:74:5a:f0:e7:c3:
         a9:6f:40:9a:b1:df:cb:50:a6:c8:b8:cf:22:3e:88:81:95:44:
         6f:22:87:75:f3:c8:2e:cc:c6:be:fd:c2:96:9b:ce:40:9f:d4:
         f0:8a:08:cc:2a:60:7c:9e:a5:27:ea:13:ad:15:fe:08:80:1b:
         b1:2e:40:88:14:f1:cb:aa:fb:9d:d5:6b:17:06:fc:88:ed:50:
         60:9e:fa:e6
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUCJkifTGawAJodGIga7kohqN7QkcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA0MTQwMjA4MjRaFw0yNDA0MTIwMjEzMjRaMDMxMTAvBgNV
BAMTKDVBQ0M4QjUzM0NGRjBDMzkxQTZGQ0NDOTU1NzAzQjNFNjlDMkU4QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ZWut6SYfns1J0oJarHXO0zIG
jD6qsFzhIW4btD4wZUnPLeSKt3tSphD9gnpTn/7oKSLV4uJXPqVIG90t8OA43qpU
VejDeXU/ZfV4jxm2kxZk21P0bLsPVi8fwWkN4YwHoCNsyqjE5ygn3qKbed/bSxuM
an3k7h5bWIRXpXzlTVOT7Wktuy9bDcBrzb/KyYnJ93qgskRdqek6aJjdhV5VIMFt
TbOlgZ09kIP6w7EW3AZYSQiX50m6mLZD9E36gVsPBmiqf45aGrvmrSZcDN3AcOIO
DZdJYg225j9dA3lGHH8InczHGdI6i3GiXP6t1k+A9B/e0xXEp2OTz9ol5JRRAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUWsyLUzz/DDkab8zJVXA7PmnC6LswHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
gYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVMyMDU0MzIvMC8zMjYxMzAzNjNhMzEzMjM4MzczYTMxMzMzMDMwM2EzYTJm
MzQzMDJkMzQzMDIwM2QzZTIwMzIzMDM0MzMzNzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgYShxMw
DQYJKoZIhvcNAQELBQADggEBAIUX+FUyaSUmhGM26lD6Ijk+Ds6Cs6KnNJqCg66h
yU8bJmVpwEzp9OZ6TUvvsn0fsF9M91cef3/2zm1zRhGO41QEVISwn99utZ3Gkerb
DQS0dkP6uW9A9ANAMi7stelJayzSH/7nXvo7TdybKyakOjYEYUbdO8j+kI5Vl0W7
JOc7z6UZaVbKA44vTis0CWqB8V2yN370Qfb8GqIx1np8SG0fQ4Cf06Brdz34mz6z
Qvd0WvDnw6lvQJqx38tQpsi4zyI+iIGVRG8ih3XzyC7Mxr79wpabzkCf1PCKCMwq
YHyepSfqE60V/giAG7EuQIgU8cuq+53VaxcG/IjtUGCe+uY=
-----END CERTIFICATE-----