Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a313830303a3a2f34302d3430203d3e20323033383532.roa
File:                     326130363a313238373a313830303a3a2f34302d3430203d3e20323033383532.roa (raw, json)
Hash identifier:          8HXT87BMSThz1PO9ZTGWBRMWxf0Z4jOHFT8sK1vvBio=
Subject key identifier:   B3:4D:E8:21:DF:96:DB:6E:7E:1F:FC:03:C8:F1:33:D8:0A:64:28:B9
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       63EA43520416FEE2E4C5530E64D7740522048ECB
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a313830303a3a2f34302d3430203d3e20323033383532.roa
Signing time:             Fri 14 Apr 2023 02:09:59 +0000
ROA not before:           Fri 14 Apr 2023 02:04:59 +0000
ROA not after:            Fri 12 Apr 2024 02:09:59 +0000
asID:                     203852
IP address blocks:        2a06:1287:1800::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ea:43:52:04:16:fe:e2:e4:c5:53:0e:64:d7:74:05:22:04:8e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:04:59 2023 GMT
            Not After : Apr 12 02:09:59 2024 GMT
        Subject: CN=B34DE821DF96DB6E7E1FFC03C8F133D80A6428B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:68:c9:c0:6c:f2:6b:68:23:70:26:14:13:80:
                    0f:ec:0f:36:eb:61:5e:bd:33:0e:2d:e3:3f:72:5f:
                    ef:7a:26:00:4e:c2:bf:92:9e:65:ee:d6:6b:0e:e6:
                    54:f4:62:0d:63:30:fe:b4:69:2a:ad:94:d1:4a:9f:
                    58:4e:88:0d:25:18:d7:b8:72:f9:58:2a:b4:30:86:
                    dc:56:b0:80:e0:6f:57:5d:45:44:ad:19:b1:78:29:
                    3b:1b:7c:17:1a:5a:46:ca:85:5b:38:69:f2:79:49:
                    ff:e7:b9:a4:ce:bb:f1:b2:d0:b3:02:25:11:19:28:
                    3b:ed:38:18:32:1f:66:80:24:5a:4d:d7:02:8f:f9:
                    17:56:f7:8e:d5:5b:1d:90:f9:36:72:2a:1e:f9:28:
                    05:8a:93:7b:29:e0:e5:52:9e:2a:47:40:08:9a:dc:
                    ed:1e:b2:32:87:4b:07:06:5a:f8:e6:5c:10:12:c9:
                    ad:62:e6:32:6a:2a:e2:a8:08:29:b3:3e:e2:21:c2:
                    25:eb:ff:49:63:48:cc:ef:10:53:18:e7:29:5b:fa:
                    ca:99:3c:69:1a:49:78:30:66:53:a3:fd:c9:cb:80:
                    17:3a:11:08:f8:c2:93:1f:ac:2f:4c:6f:e2:e8:42:
                    9b:c7:14:9a:8c:49:65:a6:4a:11:33:78:4c:be:2e:
                    72:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4D:E8:21:DF:96:DB:6E:7E:1F:FC:03:C8:F1:33:D8:0A:64:28:B9
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a313830303a3a2f34302d3430203d3e20323033383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:1800::/40

    Signature Algorithm: sha256WithRSAEncryption
         a8:52:f4:08:4f:9e:8d:3b:a1:92:a9:e9:dc:ed:62:ed:18:48:
         4c:48:b9:44:63:42:8b:01:7f:64:82:69:d4:a1:30:ab:cc:c7:
         49:5a:4e:9d:56:6b:ef:4e:c5:1c:2b:8e:00:31:d8:92:43:91:
         2f:a1:58:ec:eb:7d:36:6a:22:4b:de:18:c8:da:7e:0e:42:6a:
         6d:1f:dc:3d:fc:a2:11:86:85:55:5e:46:58:4e:9d:40:ca:de:
         22:1f:31:cc:b4:10:a0:d4:c4:be:93:85:8e:18:b4:80:97:9a:
         4d:42:a8:e4:c9:6f:28:34:42:c1:95:a4:e1:77:7f:f6:cb:0e:
         7b:f7:68:e1:f7:c4:85:7a:21:6e:4f:0e:ff:53:f0:77:af:84:
         0e:01:c4:16:db:c3:74:e3:35:03:f5:80:85:cc:d9:c3:0f:45:
         f0:f1:d4:9b:9e:24:2b:0e:41:1a:17:7d:8b:8b:cc:d2:ce:2b:
         a0:a3:48:f7:ea:75:1d:89:0a:e8:cf:09:39:29:f5:e3:e0:a5:
         4f:ea:f6:6b:af:df:db:70:cb:b9:32:6e:b5:16:fe:31:a8:a0:
         94:4a:c7:5f:a0:c5:02:98:02:54:6a:bc:07:fa:b6:ab:70:37:
         2a:14:06:19:70:7a:74:b1:9a:5b:6e:63:45:38:ca:6b:e9:20:
         00:dc:4a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----