Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a333330303a3a2f34342d3438203d3e20323036343939.roa
File:                     326130363a313238373a333330303a3a2f34342d3438203d3e20323036343939.roa (raw, json)
Hash identifier:          lG/E92uTXOa34jyud6492ybtHrBQ8eOi+3Pxngbb/7g=
Subject key identifier:   59:BD:F2:A7:C3:95:86:87:E5:6C:C7:8A:DD:B4:65:DA:F3:DE:E3:7A
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       468179486536CDD86A2651964F35595A5DA3565A
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a333330303a3a2f34342d3438203d3e20323036343939.roa
Signing time:             Fri 14 Apr 2023 01:54:57 +0000
ROA not before:           Fri 14 Apr 2023 01:49:57 +0000
ROA not after:            Fri 12 Apr 2024 01:54:57 +0000
asID:                     206499
IP address blocks:        2a06:1287:3300::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:81:79:48:65:36:cd:d8:6a:26:51:96:4f:35:59:5a:5d:a3:56:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:49:57 2023 GMT
            Not After : Apr 12 01:54:57 2024 GMT
        Subject: CN=59BDF2A7C3958687E56CC78ADDB465DAF3DEE37A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c0:68:49:02:4a:01:42:4d:4c:ce:b8:20:0e:
                    e0:99:18:df:9a:0b:74:34:e5:86:04:8b:26:2e:39:
                    12:2f:4c:dd:97:db:d0:ec:be:e1:42:9a:a9:f4:23:
                    5f:40:70:e8:ca:19:c2:0d:ab:cc:c9:c5:83:9e:05:
                    60:b7:86:31:ae:fd:96:d4:64:87:1c:b8:30:64:c1:
                    4a:66:13:22:f0:95:8d:13:b8:d5:23:30:c0:f9:e2:
                    ac:e4:13:32:2b:0c:37:fd:53:9b:34:56:87:09:54:
                    79:1f:75:ef:2c:b6:7e:6b:f4:ff:95:2c:6f:65:66:
                    7c:3f:b0:a7:08:7e:6b:9d:65:08:41:7e:ce:ca:4b:
                    73:99:04:9c:b3:27:11:3e:17:bc:df:27:c1:57:06:
                    8e:ba:55:d6:f6:5b:4c:2b:61:c8:60:bb:d4:39:96:
                    ad:85:e8:81:ab:92:b7:40:cc:22:48:9d:0b:d1:97:
                    aa:11:e4:6d:c3:00:03:40:cf:19:67:4d:87:70:22:
                    f2:4e:d5:01:09:d3:a7:fa:c2:64:b0:e2:39:64:5f:
                    1e:b3:b8:6f:d6:fc:a5:05:b4:32:27:61:08:c4:5a:
                    e7:67:74:e2:3a:f0:4e:26:45:0e:93:95:0e:74:d3:
                    cb:d1:86:9f:a3:b0:5f:70:05:86:ff:db:b2:c2:6c:
                    c3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BD:F2:A7:C3:95:86:87:E5:6C:C7:8A:DD:B4:65:DA:F3:DE:E3:7A
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a333330303a3a2f34342d3438203d3e20323036343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:3300::/44

    Signature Algorithm: sha256WithRSAEncryption
         44:6b:75:b5:b1:fc:fb:c8:a4:c8:16:92:5a:3a:ac:53:0f:40:
         fb:b9:bd:2d:02:80:7f:eb:ce:d7:07:d9:23:52:45:4f:54:f5:
         8f:06:ed:ca:e8:6e:ba:90:da:85:84:09:d1:42:24:4a:9a:93:
         3e:4f:77:37:7f:29:6c:94:4e:2a:49:32:a2:9e:df:c2:6c:02:
         81:39:f9:9f:39:e5:a6:bb:d6:5e:9f:2e:04:fb:58:33:0b:59:
         da:2c:38:8a:5d:58:b4:81:9a:6c:ef:18:9e:40:19:8b:8e:1b:
         12:57:40:99:7f:2e:c3:45:85:48:b7:d7:82:f6:77:45:ea:52:
         69:dc:d1:f9:97:1d:9a:9f:ae:0f:4c:e0:49:9e:3a:14:fa:76:
         c0:95:b7:cc:95:4b:ed:69:2b:b2:81:9d:9d:bb:86:9e:4e:c9:
         63:89:b5:64:69:7d:0f:62:bd:bb:54:2d:15:84:ef:35:df:78:
         4c:f7:31:07:04:ce:5c:7e:d8:5c:79:b3:07:f4:dc:5c:b7:43:
         a5:43:e6:05:9a:b2:69:fd:2e:60:d0:67:25:68:a3:c0:40:91:
         5e:4b:1d:d3:29:55:34:47:df:c1:70:a7:82:30:06:92:54:e4:
         d2:ce:a2:ac:d4:e9:74:d0:d6:b1:27:94:b9:9b:de:b4:5d:ad:
         6a:a1:14:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----