Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a33303a3a2f34342d3434203d3e20323033393039.roa
File:                     326130363a313238373a33303a3a2f34342d3434203d3e20323033393039.roa (raw, json)
Hash identifier:          SwfdmOAPvO992C2r7JfUcguuMdObIwI4/RbjQAxyo+U=
Subject key identifier:   96:F6:F4:C0:3F:D6:E6:FC:75:88:31:D4:BD:FF:F3:DF:DF:10:E4:7A
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       305D2AA763242C7A73420A1DB229445241830E27
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a33303a3a2f34342d3434203d3e20323033393039.roa
Signing time:             Fri 14 Apr 2023 02:11:30 +0000
ROA not before:           Fri 14 Apr 2023 02:06:30 +0000
ROA not after:            Fri 12 Apr 2024 02:11:30 +0000
asID:                     203909
IP address blocks:        2a06:1287:30::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5d:2a:a7:63:24:2c:7a:73:42:0a:1d:b2:29:44:52:41:83:0e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:06:30 2023 GMT
            Not After : Apr 12 02:11:30 2024 GMT
        Subject: CN=96F6F4C03FD6E6FC758831D4BDFFF3DFDF10E47A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:07:02:59:88:8d:e6:25:7f:a9:45:88:e0:bd:
                    24:bc:d1:dd:a0:98:50:1a:4b:67:55:a1:50:b2:5e:
                    d7:3d:b4:23:13:91:80:b5:f7:4c:31:8d:cc:3a:e3:
                    8d:3b:6f:b3:10:b6:6d:c9:c1:44:ff:cb:45:42:51:
                    43:78:fa:fd:6e:00:6d:cc:5c:3d:cb:36:02:1b:55:
                    40:55:ed:60:8a:9f:ce:b3:25:9c:00:44:c6:5c:1f:
                    59:be:87:0b:44:08:33:8e:c8:4f:dc:88:82:6c:61:
                    61:bf:29:92:3d:e2:85:03:ef:f0:70:17:ac:b1:66:
                    46:b1:36:a5:18:a7:d3:48:4c:5f:df:51:d7:2f:b2:
                    73:25:03:55:c2:13:3b:c5:d1:ed:bb:94:2a:0f:20:
                    e6:d9:2a:99:d7:c7:58:8d:cc:0e:59:af:80:aa:9f:
                    e2:80:9d:f1:56:71:db:0f:85:af:27:d9:b0:67:88:
                    42:2b:eb:81:f4:8b:11:48:36:50:ef:b0:29:36:cf:
                    ee:23:85:67:5a:b8:07:af:31:d6:75:f7:79:4c:50:
                    04:89:4a:6e:a1:16:4a:03:15:62:74:c0:7c:03:e7:
                    2a:e6:89:83:9b:c5:ff:58:bd:fa:4a:da:78:52:0d:
                    d6:d4:69:70:af:26:b6:54:46:87:34:96:10:8e:03:
                    d0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F6:F4:C0:3F:D6:E6:FC:75:88:31:D4:BD:FF:F3:DF:DF:10:E4:7A
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a33303a3a2f34342d3434203d3e20323033393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         11:dc:91:a9:d9:a7:1c:09:8f:e8:8f:80:8c:d2:4e:f9:c8:bf:
         ab:7d:17:89:0c:e0:19:0f:ea:d0:8b:92:8c:ed:32:c3:af:85:
         3c:6e:94:ba:7c:93:c4:fc:29:97:6e:8f:de:10:cb:d3:2d:a4:
         35:77:15:80:b2:77:7c:7b:59:23:5e:58:18:45:05:d7:63:71:
         ce:f4:65:98:70:7a:17:6a:19:db:c4:bb:eb:ec:40:a3:33:1e:
         3c:8d:30:0a:34:9d:97:2a:ee:94:c8:47:0d:b0:f8:2c:bd:d2:
         1d:a9:df:fc:cc:b0:27:3c:be:85:a4:f1:27:fb:5e:3a:9c:94:
         93:9c:7f:c4:79:a9:ad:1d:5d:d3:7a:65:1b:97:37:9d:b1:83:
         c3:73:0e:2b:a5:d2:6a:75:e0:4d:9b:56:f9:4c:a4:30:f4:1d:
         56:ac:e4:67:15:d6:c0:84:da:d9:9e:25:30:b0:60:69:19:4c:
         0a:17:37:a2:a5:6f:96:e5:f1:50:21:cc:61:de:c4:ce:af:a7:
         d0:87:8c:fa:56:34:82:01:ff:4d:60:4e:13:65:1d:7e:82:d1:
         8a:33:78:2f:2f:ec:5e:9c:a7:1b:97:1d:cb:00:c7:30:1b:39:
         20:6e:bd:77:1b:96:0e:4e:6b:5d:a3:23:be:20:f4:d0:0c:0e:
         2b:69:26:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----