Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a313630303a3a2f34302d3438203d3e20323033393133.roa
File:                     326130363a313238373a313630303a3a2f34302d3438203d3e20323033393133.roa (raw, json)
Hash identifier:          P/GN67xU19JUCGVcOggrswLLJfvt3/cKhJretsmmH7s=
Subject key identifier:   75:84:7D:85:54:5C:BE:39:CC:B4:EA:FB:A4:11:7C:F8:60:BD:86:40
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       66559813BD17BDF8FA518621ECB5C179051882A9
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a313630303a3a2f34302d3438203d3e20323033393133.roa
Signing time:             Fri 14 Apr 2023 02:12:11 +0000
ROA not before:           Fri 14 Apr 2023 02:07:11 +0000
ROA not after:            Fri 12 Apr 2024 02:12:11 +0000
asID:                     203913
IP address blocks:        2a06:1287:1600::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:55:98:13:bd:17:bd:f8:fa:51:86:21:ec:b5:c1:79:05:18:82:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:07:11 2023 GMT
            Not After : Apr 12 02:12:11 2024 GMT
        Subject: CN=75847D85545CBE39CCB4EAFBA4117CF860BD8640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:03:89:f0:46:4a:47:94:82:83:4a:19:05:4e:
                    e0:d2:5c:a8:6a:28:ab:4d:3c:bf:3e:ea:65:31:85:
                    9b:c5:66:41:5f:dd:ff:41:96:45:6e:fa:af:98:60:
                    43:12:c8:7a:13:eb:5f:84:ed:fd:34:f7:b0:c5:3c:
                    f7:2b:49:4b:6c:ac:8f:de:ab:b0:30:09:03:83:ca:
                    9b:0f:be:69:ee:3b:d4:28:cc:2f:eb:c5:2d:71:ac:
                    7b:c6:ce:b6:97:5d:62:75:c3:eb:c6:e8:98:bc:b5:
                    08:6c:a6:70:be:a4:ee:28:a6:74:ec:35:b9:df:4f:
                    6b:31:98:0c:51:56:91:85:9e:b5:43:1e:5f:bd:25:
                    ed:e6:a3:fd:0a:dc:79:b7:8d:d0:af:09:4e:52:3e:
                    d3:25:e8:77:da:0b:77:33:dc:0a:79:a2:eb:b9:f4:
                    1f:8e:7f:c1:ed:ff:4b:3d:c1:df:30:91:f4:44:7b:
                    cb:3c:d1:0c:25:f8:de:f7:01:5f:9a:97:63:99:46:
                    ad:79:2b:c6:42:dc:af:37:27:a3:f8:65:59:cb:46:
                    da:fd:85:85:55:9f:b1:a6:9a:9e:94:81:8d:9a:a3:
                    48:0d:92:60:15:c6:6f:0f:44:5b:5f:85:4b:32:1b:
                    36:90:b8:23:bb:52:0f:10:b8:cf:57:66:9d:35:5d:
                    2d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:84:7D:85:54:5C:BE:39:CC:B4:EA:FB:A4:11:7C:F8:60:BD:86:40
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a313630303a3a2f34302d3438203d3e20323033393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:3a:c8:29:8e:6b:5d:59:ed:74:eb:00:ca:05:a0:e8:28:d4:
         b5:aa:5d:fa:ce:1c:c2:2c:a5:21:c2:2b:73:85:86:3e:ec:5c:
         80:ff:e0:4f:fe:5f:f0:0d:6b:cd:50:49:c2:5c:dd:92:65:85:
         4c:bd:33:1b:6a:d4:a7:86:37:ae:51:c9:cb:e2:72:af:b0:bd:
         47:70:67:83:20:58:9c:db:3d:2c:82:3c:1e:ab:79:de:aa:db:
         7e:8c:db:97:97:99:15:3a:f0:cb:0e:f8:5c:f3:8e:5c:0a:dd:
         59:f2:61:72:79:71:6b:c9:54:84:07:f0:2f:7e:24:8a:6c:43:
         25:bc:fb:77:d4:1a:20:2a:7d:58:01:93:7f:7a:12:ac:89:db:
         94:af:9a:2a:d2:ed:92:6e:03:25:9c:ab:64:ab:5d:30:f2:c3:
         e7:4e:6f:d5:b5:00:01:06:bc:ca:11:cd:3e:86:f3:3c:6e:07:
         d3:0f:2b:75:8a:de:75:fe:11:1d:58:c9:ff:9a:c7:fc:98:73:
         45:5a:84:22:7b:c3:1c:e6:a2:88:c2:bb:7a:13:34:a5:7e:ff:
         ed:b1:7c:99:47:50:16:a2:46:ed:24:21:13:6b:2c:df:d2:eb:
         09:b2:79:94:86:a5:4d:a7:eb:6c:38:ed:f6:24:a6:f2:75:58:
         c6:00:57:ec
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUZlWYE70Xvfj6UYYh7LXBeQUYgqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA0MTQwMjA3MTFaFw0yNDA0MTIwMjEyMTFaMDMxMTAvBgNV
BAMTKDc1ODQ3RDg1NTQ1Q0JFMzlDQ0I0RUFGQkE0MTE3Q0Y4NjBCRDg2NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXA4nwRkpHlIKDShkFTuDSXKhq
KKtNPL8+6mUxhZvFZkFf3f9BlkVu+q+YYEMSyHoT61+E7f0097DFPPcrSUtsrI/e
q7AwCQODypsPvmnuO9QozC/rxS1xrHvGzraXXWJ1w+vG6Ji8tQhspnC+pO4opnTs
NbnfT2sxmAxRVpGFnrVDHl+9Je3mo/0K3Hm3jdCvCU5SPtMl6HfaC3cz3Ap5ouu5
9B+Of8Ht/0s9wd8wkfREe8s80Qwl+N73AV+al2OZRq15K8ZC3K83J6P4ZVnLRtr9
hYVVn7Gmmp6UgY2ao0gNkmAVxm8PRFtfhUsyGzaQuCO7Ug8QuM9XZp01XS33AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUdYR9hVRcvjnMtOr7pBF8+GC9hkAwHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
gYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVMyMDU0MzIvMC8zMjYxMzAzNjNhMzEzMjM4MzczYTMxMzYzMDMwM2EzYTJm
MzQzMDJkMzQzODIwM2QzZTIwMzIzMDMzMzkzMTMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgYShxYw
DQYJKoZIhvcNAQELBQADggEBAGM6yCmOa11Z7XTrAMoFoOgo1LWqXfrOHMIspSHC
K3OFhj7sXID/4E/+X/ANa81QScJc3ZJlhUy9Mxtq1KeGN65Rycvicq+wvUdwZ4Mg
WJzbPSyCPB6red6q236M25eXmRU68MsO+FzzjlwK3VnyYXJ5cWvJVIQH8C9+JIps
QyW8+3fUGiAqfVgBk396EqyJ25SvmirS7ZJuAyWcq2SrXTDyw+dOb9W1AAEGvMoR
zT6G8zxuB9MPK3WK3nX+ER1Yyf+ax/yYc0VahCJ7wxzmoojCu3oTNKV+/+2xfJlH
UBaiRu0kIRNrLN/S6wmyeZSGpU2n62w47fYkpvJ1WMYAV+w=
-----END CERTIFICATE-----