Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a323930303a3a2f34342d3438203d3e20323037313530.roa
File:                     326130363a313238373a323930303a3a2f34342d3438203d3e20323037313530.roa (raw, json)
Hash identifier:          jUnNPGGK3Y41uCJt9PbtVVKc9c1Wxf+ro4b2gyp3tIg=
Subject key identifier:   F7:EE:20:88:D6:89:3B:22:D6:05:01:C4:50:B5:25:DA:7E:AB:40:D6
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       0158CD2949CA114485C242716F5DF7851F4DF39B
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a323930303a3a2f34342d3438203d3e20323037313530.roa
Signing time:             Fri 14 Apr 2023 01:56:36 +0000
ROA not before:           Fri 14 Apr 2023 01:51:36 +0000
ROA not after:            Fri 12 Apr 2024 01:56:36 +0000
asID:                     207150
IP address blocks:        2a06:1287:2900::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:58:cd:29:49:ca:11:44:85:c2:42:71:6f:5d:f7:85:1f:4d:f3:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:51:36 2023 GMT
            Not After : Apr 12 01:56:36 2024 GMT
        Subject: CN=F7EE2088D6893B22D60501C450B525DA7EAB40D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:53:43:57:c1:80:da:72:ff:c4:38:03:31:b3:
                    a5:a3:db:70:0b:4f:b5:7f:fe:6e:6f:f4:d7:8a:ae:
                    6a:3a:d6:1d:af:f6:ff:05:59:79:d3:fc:42:af:23:
                    69:ff:db:52:07:8f:1b:75:23:44:c1:cb:a9:7a:63:
                    9e:77:0a:e6:10:31:d4:85:75:7c:ca:dd:35:65:00:
                    4e:bc:07:25:11:f0:a4:a8:ed:6d:ee:08:af:f6:c9:
                    31:5a:74:5b:9c:ff:2d:fc:98:7a:0b:cb:49:89:3f:
                    de:82:a5:21:e3:79:3c:61:02:f6:fd:20:8b:bd:e2:
                    48:ee:bf:f6:8f:e4:39:46:d7:c4:52:de:58:4c:65:
                    38:cb:06:3d:86:19:d9:40:ca:28:4c:fa:2a:cd:e5:
                    41:02:aa:31:35:77:f7:e4:3a:0a:9a:64:5f:b7:3f:
                    fa:a3:47:68:f4:b1:f8:dc:a2:28:17:dc:fb:15:ab:
                    63:f7:06:96:63:29:bb:5f:12:2d:58:eb:f7:f1:6f:
                    32:81:79:97:c7:bd:de:ce:af:e9:bb:24:d7:ea:37:
                    e7:2d:90:bf:b6:40:06:17:55:0b:e4:81:79:f8:97:
                    c1:b9:f5:27:c7:2f:cb:6c:07:64:ee:98:af:f3:8e:
                    71:ed:e1:ea:92:81:a9:f9:0d:70:1d:a2:d3:fb:7c:
                    9b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EE:20:88:D6:89:3B:22:D6:05:01:C4:50:B5:25:DA:7E:AB:40:D6
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a323930303a3a2f34342d3438203d3e20323037313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:2900::/44

    Signature Algorithm: sha256WithRSAEncryption
         65:5f:4f:ae:0c:ec:f9:ae:31:1e:f8:0b:11:e8:38:26:74:23:
         3d:3a:4c:c3:39:70:ad:66:49:3d:de:c7:99:15:3b:1f:1c:cb:
         62:4f:f8:52:74:53:d5:f3:ff:b3:d4:d4:64:20:f4:04:33:98:
         b8:4a:88:df:1c:36:bd:f4:bf:dd:de:34:a8:30:4f:cb:00:ed:
         a4:c5:8f:55:66:a9:2f:a6:dc:3f:ea:b1:51:c1:72:f3:57:0d:
         26:18:a0:e0:28:95:32:c3:6b:b6:8c:33:57:6d:a3:dc:56:74:
         43:f9:58:85:a9:fb:c9:97:bd:35:7e:8d:45:a4:85:ec:61:9a:
         b5:72:38:fc:46:e7:a1:c0:33:65:22:85:33:77:88:31:44:32:
         cc:b8:1d:82:03:e7:73:c0:a2:f7:a7:23:da:9b:c2:a0:11:46:
         ef:00:51:67:cb:65:08:27:62:b3:2b:22:2a:6a:40:c9:72:c1:
         ea:98:01:06:7a:5a:d2:1f:fc:7b:1a:bc:c3:6b:26:83:10:82:
         98:32:a5:f2:d9:92:54:8b:b9:dd:b5:8d:7d:e0:e8:58:a0:30:
         ab:90:64:77:54:61:8e:21:99:b2:08:fa:0b:0a:2e:50:c8:3c:
         6d:38:c4:b4:a1:5b:9f:c8:94:e3:de:b3:e9:3a:2e:18:22:43:
         86:52:f4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----