Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a3330303a3a2f34302d3430203d3e20323033303233.roa
File:                     326130363a313238373a3330303a3a2f34302d3430203d3e20323033303233.roa (raw, json)
Hash identifier:          YlA6xNhZ0FXmHs6dhBt5deR0c73gEVP5Cri923S0zWU=
Subject key identifier:   36:C3:D9:7F:CE:DD:A9:6C:B1:C6:BD:3F:B7:52:55:33:07:BB:5D:C1
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       214B1EEEA3DB828D55D0906340CF7028669F7264
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a3330303a3a2f34302d3430203d3e20323033303233.roa
Signing time:             Fri 14 Apr 2023 01:49:08 +0000
ROA not before:           Fri 14 Apr 2023 01:44:08 +0000
ROA not after:            Fri 12 Apr 2024 01:49:08 +0000
asID:                     203023
IP address blocks:        2a06:1287:300::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:4b:1e:ee:a3:db:82:8d:55:d0:90:63:40:cf:70:28:66:9f:72:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:44:08 2023 GMT
            Not After : Apr 12 01:49:08 2024 GMT
        Subject: CN=36C3D97FCEDDA96CB1C6BD3FB752553307BB5DC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b4:87:ba:42:9d:88:27:78:01:fb:81:93:8b:
                    ab:a2:5a:03:18:24:73:23:12:84:c9:99:0d:42:7a:
                    72:d0:fe:a3:0d:58:6a:03:38:8e:48:b2:33:b5:8e:
                    4b:7a:a7:2f:b2:15:21:b4:50:bb:0d:34:90:fc:b7:
                    b0:28:57:78:3c:71:1d:a1:98:b2:6d:93:04:dc:42:
                    70:1a:3d:a9:fe:93:5a:f4:04:50:1d:bf:55:e2:d5:
                    3d:6e:24:a8:b9:9c:f4:6f:89:70:8e:3b:65:14:c6:
                    28:7e:6d:1d:64:b2:9f:01:fe:05:57:74:6a:a2:9b:
                    59:12:76:eb:a7:7c:2b:f6:69:d4:38:22:38:c4:6a:
                    c3:0e:5d:9c:1a:cf:46:43:04:29:d6:07:91:95:a4:
                    cb:51:a8:65:e0:45:a9:b2:f0:9f:8d:2b:51:bc:49:
                    56:25:b8:c9:64:9d:7c:5e:7f:ca:fe:21:5c:ec:14:
                    e7:99:98:de:43:35:b0:82:61:d1:e0:8a:a1:dc:07:
                    47:dd:3b:32:da:c5:b1:c1:bd:15:d5:ab:ef:96:d0:
                    05:e5:9e:f7:ff:93:d3:90:e5:dc:bb:38:30:02:7e:
                    08:fc:6f:66:37:66:4b:1e:60:7a:df:83:4a:35:77:
                    3d:ab:21:cb:b8:cd:99:d1:77:e8:3b:af:b5:6e:7f:
                    7f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C3:D9:7F:CE:DD:A9:6C:B1:C6:BD:3F:B7:52:55:33:07:BB:5D:C1
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a3330303a3a2f34302d3430203d3e20323033303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:7b:d6:08:48:0f:7c:1e:6b:fb:22:dd:8d:45:42:0a:ad:3a:
         bb:65:ce:0d:79:62:6e:e8:65:4a:8b:da:b4:ab:6b:cf:52:c7:
         18:22:7f:b5:99:54:b2:9b:37:dc:07:36:68:1d:ff:22:48:88:
         75:d2:7a:66:ea:f2:bf:c1:f8:fe:ae:56:82:3d:c8:26:62:77:
         c7:41:58:c9:ae:0e:53:c3:3f:e1:4c:62:b7:88:77:4b:1f:24:
         8b:4d:f7:6a:37:38:03:5d:a1:40:a7:51:b8:c0:4a:b4:42:c0:
         79:49:46:4c:7c:0c:67:96:0b:5f:54:55:62:16:81:09:5e:c7:
         6e:cd:eb:26:2f:18:21:09:82:6d:69:70:a1:40:00:5c:d4:af:
         be:b4:39:f3:8f:88:4f:14:7b:68:6d:c5:ec:5d:70:10:e6:ba:
         a3:1e:6c:4b:e2:89:9f:4f:14:a3:47:45:81:59:58:bc:97:ce:
         1e:2d:ae:ac:1a:7d:e8:8d:84:c9:89:70:02:a9:d9:73:bd:d7:
         5f:a0:5d:4d:41:2a:ab:e9:cd:d9:4e:57:2f:00:d7:df:98:0b:
         6e:33:96:d7:52:48:61:ce:4a:c0:34:e0:d6:12:af:13:fb:a5:
         cb:90:6e:7b:55:20:30:4c:91:5c:29:67:6f:8e:53:d2:aa:1d:
         40:8c:9e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----