Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a333330643a3a2f34382d3438203d3e20323038373533.roa
File:                     326130363a313238373a333330643a3a2f34382d3438203d3e20323038373533.roa (raw, json)
Hash identifier:          7fGoo2f/GTs/7ijxac2FW1vBQ1/1DNttdJnk8RqelIw=
Subject key identifier:   00:DA:8E:58:73:EF:AA:7C:B6:1D:87:E2:52:88:21:9D:21:1A:39:53
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       71C3CFC34CBD911071ABD8A9679D95E508B950CA
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a333330643a3a2f34382d3438203d3e20323038373533.roa
Signing time:             Fri 14 Apr 2023 02:00:33 +0000
ROA not before:           Fri 14 Apr 2023 01:55:33 +0000
ROA not after:            Fri 12 Apr 2024 02:00:33 +0000
asID:                     208753
IP address blocks:        2a06:1287:330d::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c3:cf:c3:4c:bd:91:10:71:ab:d8:a9:67:9d:95:e5:08:b9:50:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:55:33 2023 GMT
            Not After : Apr 12 02:00:33 2024 GMT
        Subject: CN=00DA8E5873EFAA7CB61D87E25288219D211A3953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9f:97:e9:75:6b:73:7d:49:74:d6:d3:32:0e:
                    77:22:d9:b4:a9:31:10:4d:9c:c9:fe:df:b0:8f:b0:
                    90:30:b0:88:17:c2:a8:5c:a7:e4:8a:71:3c:0b:75:
                    80:a4:de:a0:cf:cb:db:d2:bd:19:09:22:0e:d7:8a:
                    5a:00:77:94:8d:78:fd:9b:32:9c:90:0d:f3:2e:d6:
                    76:66:f6:0a:61:38:4a:26:ff:ed:3e:fc:a9:8b:e9:
                    9c:36:f5:45:83:2d:87:7c:2c:16:22:8a:36:cd:ce:
                    46:66:db:ec:14:17:15:77:0e:45:98:22:13:8d:da:
                    d4:17:b7:31:80:1d:33:8f:1b:f7:78:ae:25:11:94:
                    7d:e8:ce:66:d1:52:c6:33:34:96:09:41:49:4e:7e:
                    a3:94:4f:57:2b:69:b4:76:74:d2:b5:c5:2e:1b:4f:
                    94:cb:3a:cb:52:5c:1d:4a:f9:2c:df:db:0a:f7:9b:
                    da:58:5b:6b:da:2f:bf:9d:fb:4e:86:e6:78:08:b8:
                    ca:9b:69:d4:64:2b:c8:c9:1c:65:9b:83:c8:a7:33:
                    9a:1d:b4:56:47:95:ba:64:01:dd:1f:b8:17:db:52:
                    9f:ae:2b:73:ae:df:64:a7:64:55:75:77:e5:95:b5:
                    b4:9a:40:c3:71:b6:6c:c0:55:dc:d4:21:f4:1d:60:
                    17:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DA:8E:58:73:EF:AA:7C:B6:1D:87:E2:52:88:21:9D:21:1A:39:53
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a333330643a3a2f34382d3438203d3e20323038373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:330d::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:6c:bd:51:fd:ce:64:d2:8f:0a:ae:07:72:fb:71:64:ae:f2:
         d3:f5:d3:14:91:17:6c:00:bc:51:27:99:76:9f:9f:ac:f1:f8:
         12:e4:fd:64:2d:86:8c:81:b8:15:45:a9:60:16:ae:27:37:f5:
         9d:91:9a:0b:17:e6:46:30:57:76:3b:03:04:06:a5:c6:f2:46:
         63:71:b3:d9:f5:e4:35:a3:28:2a:ab:1a:3d:f4:de:53:4f:65:
         3a:ec:a0:99:13:f9:67:83:7f:70:c6:de:35:f2:e4:6d:a2:22:
         4c:3c:99:c2:65:df:09:c2:96:4e:ba:d9:8a:62:57:e6:19:5a:
         6e:bf:04:7a:4d:17:8a:c1:6f:e3:90:f7:67:ad:af:34:1f:ad:
         10:4a:15:6a:52:12:e2:bb:af:00:74:49:a6:46:a8:b3:29:ca:
         ad:a6:68:80:db:ab:34:c3:35:92:c2:50:9d:08:26:b9:a6:26:
         3f:62:8f:ed:73:b6:4e:2a:b8:81:fb:24:09:b0:31:28:60:cf:
         88:55:30:22:f4:40:e8:2b:56:99:1f:11:2b:5a:72:6e:4a:7e:
         fc:bf:1f:38:b7:29:8b:f2:bf:9c:94:a1:f0:46:0a:2e:16:3c:
         d7:ad:c9:de:e0:74:c9:eb:a9:87:6d:f9:9f:23:19:00:45:bc:
         59:2b:c9:93
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUccPPw0y9kRBxq9ipZ52V5Qi5UMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA0MTQwMTU1MzNaFw0yNDA0MTIwMjAwMzNaMDMxMTAvBgNV
BAMTKDAwREE4RTU4NzNFRkFBN0NCNjFEODdFMjUyODgyMTlEMjExQTM5NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqn5fpdWtzfUl01tMyDnci2bSp
MRBNnMn+37CPsJAwsIgXwqhcp+SKcTwLdYCk3qDPy9vSvRkJIg7XiloAd5SNeP2b
MpyQDfMu1nZm9gphOEom/+0+/KmL6Zw29UWDLYd8LBYiijbNzkZm2+wUFxV3DkWY
IhON2tQXtzGAHTOPG/d4riURlH3ozmbRUsYzNJYJQUlOfqOUT1crabR2dNK1xS4b
T5TLOstSXB1K+Szf2wr3m9pYW2vaL7+d+06G5ngIuMqbadRkK8jJHGWbg8inM5od
tFZHlbpkAd0fuBfbUp+uK3Ou32SnZFV1d+WVtbSaQMNxtmzAVdzUIfQdYBfnAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUANqOWHPvqny2HYfiUoghnSEaOVMwHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
gYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVMyMDU0MzIvMC8zMjYxMzAzNjNhMzEzMjM4MzczYTMzMzMzMDY0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzIzMDM4MzczNTMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgYShzMN
MA0GCSqGSIb3DQEBCwUAA4IBAQC9bL1R/c5k0o8Krgdy+3FkrvLT9dMUkRdsALxR
J5l2n5+s8fgS5P1kLYaMgbgVRalgFq4nN/WdkZoLF+ZGMFd2OwMEBqXG8kZjcbPZ
9eQ1oygqqxo99N5TT2U67KCZE/lng39wxt418uRtoiJMPJnCZd8JwpZOutmKYlfm
GVpuvwR6TReKwW/jkPdnra80H60QShVqUhLiu68AdEmmRqizKcqtpmiA26s0wzWS
wlCdCCa5piY/Yo/tc7ZOKriB+yQJsDEoYM+IVTAi9EDoK1aZHxErWnJuSn78vx84
tymL8r+clKHwRgouFjzXrcne4HTJ66mHbfmfIxkARbxZK8mT
-----END CERTIFICATE-----