Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a313930303a3a2f34332d3433203d3e20323035343332.roa
File:                     326130363a313238373a313930303a3a2f34332d3433203d3e20323035343332.roa (raw, json)
Hash identifier:          ho+ilYsRMI4FgOAy6ozYsKdDnLbUQPv9qZ7j1TME+00=
Subject key identifier:   42:B5:88:71:6E:8A:9D:48:7D:F4:86:C9:33:4A:89:24:E4:C4:5C:36
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       7C7D296FE963A64E21DF49DE1F1F63EF06C2D5FD
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a313930303a3a2f34332d3433203d3e20323035343332.roa
Signing time:             Fri 14 Apr 2023 01:51:17 +0000
ROA not before:           Fri 14 Apr 2023 01:46:17 +0000
ROA not after:            Fri 12 Apr 2024 01:51:17 +0000
asID:                     205432
IP address blocks:        2a06:1287:1900::/43 maxlen: 43

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:7d:29:6f:e9:63:a6:4e:21:df:49:de:1f:1f:63:ef:06:c2:d5:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:46:17 2023 GMT
            Not After : Apr 12 01:51:17 2024 GMT
        Subject: CN=42B588716E8A9D487DF486C9334A8924E4C45C36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:f7:04:e0:8e:89:f6:da:58:80:12:e4:a6:
                    b7:0c:eb:5e:a1:ef:ce:68:4d:5c:26:6c:b8:ed:43:
                    6a:4c:d2:cd:d3:a6:91:12:f0:e7:b8:b9:19:c4:d9:
                    ac:d6:fe:d1:15:bb:61:9e:76:c1:fc:27:3e:c3:38:
                    e0:6d:b2:01:f7:7b:b8:b1:57:4d:e6:36:20:63:82:
                    73:bf:58:b4:88:4e:75:85:43:11:31:9e:08:e1:4c:
                    e3:f5:3d:a6:14:44:81:cd:1f:42:ce:9f:35:98:8b:
                    67:50:57:41:db:81:3c:0d:d5:79:77:d4:4a:47:a3:
                    72:b1:c8:36:01:48:50:87:48:ab:02:5a:cf:d2:71:
                    ee:05:ca:2a:2d:75:e5:85:05:c1:46:3b:2e:07:67:
                    ee:8f:e5:49:ef:fc:ba:1a:fd:e1:6b:2e:0d:2d:30:
                    70:58:62:0d:23:07:12:ff:02:99:1b:ce:3f:6b:2f:
                    9f:67:94:75:76:cf:5f:12:4b:0f:b5:34:af:fe:9f:
                    77:1d:6e:82:ef:94:03:f7:1b:f1:82:2f:6a:f6:b4:
                    fe:63:34:15:04:01:90:8d:fe:48:4e:d2:ec:2d:8d:
                    2c:e9:50:b8:75:39:9a:84:02:7c:da:37:ad:e0:96:
                    0b:3b:f4:99:d5:b0:99:bd:89:a5:25:b3:7f:f6:03:
                    40:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B5:88:71:6E:8A:9D:48:7D:F4:86:C9:33:4A:89:24:E4:C4:5C:36
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a313930303a3a2f34332d3433203d3e20323035343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:1900::/43

    Signature Algorithm: sha256WithRSAEncryption
         b0:02:d7:fb:66:65:78:12:d9:50:d1:f6:0b:38:b2:ea:5f:69:
         bc:32:9b:ab:18:6e:74:2e:55:f7:21:37:e5:05:ba:dc:f3:4f:
         2c:0b:98:8d:de:34:b6:37:78:8b:8a:5c:10:16:b7:a6:d1:27:
         92:9b:77:0b:6d:cc:92:19:13:02:4c:3c:09:d4:ea:a9:7e:f9:
         db:0c:46:5e:e1:68:e7:08:4e:c7:0f:e8:4a:ea:7e:9b:f3:98:
         c1:b1:26:2f:51:6c:23:c1:1e:09:05:a4:db:20:76:73:46:b2:
         ae:c6:98:e1:9c:8e:a3:19:72:74:98:c9:93:13:fe:34:39:43:
         6b:5e:ec:63:c1:53:d3:fe:10:23:0b:91:62:bc:dd:a1:0b:26:
         8d:4d:c8:1b:0f:61:48:15:cc:80:98:2c:d1:59:be:20:67:e3:
         d7:f1:24:01:b2:c0:48:a3:6a:ed:5e:d5:40:a8:19:fc:4e:a3:
         a2:5b:32:87:f8:b1:d1:d0:60:cb:d7:80:7d:11:32:bb:b5:c4:
         8d:ec:f7:e3:04:54:86:f6:19:9b:b7:bc:1b:18:cf:c6:52:88:
         8c:bd:77:bc:35:6e:95:6d:5c:a6:37:66:a7:80:df:f1:f0:d4:
         fa:b1:00:66:68:e0:93:6a:4d:3d:9b:68:c0:45:b0:61:20:69:
         63:c4:7c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----