Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a333730303a3a2f34302d3438203d3e20313439323936.roa
File:                     326130363a313238373a333730303a3a2f34302d3438203d3e20313439323936.roa (raw, json)
Hash identifier:          Qs/ItfZMG9xlS3BmWQM5R3LV0ypNeu/yDjaBk7E4FeU=
Subject key identifier:   59:C4:9D:03:4F:87:B4:15:EC:4A:ED:3D:F6:0A:F7:BC:FE:52:00:BB
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       56BBE9E89C972F63D3B085A2EF5C6A8A1EDA8F07
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a333730303a3a2f34302d3438203d3e20313439323936.roa
Signing time:             Fri 16 Jun 2023 14:38:26 +0000
ROA not before:           Fri 16 Jun 2023 14:33:26 +0000
ROA not after:            Fri 14 Jun 2024 14:38:26 +0000
asID:                     149296
IP address blocks:        2a06:1287:3700::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:bb:e9:e8:9c:97:2f:63:d3:b0:85:a2:ef:5c:6a:8a:1e:da:8f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun 16 14:33:26 2023 GMT
            Not After : Jun 14 14:38:26 2024 GMT
        Subject: CN=59C49D034F87B415EC4AED3DF60AF7BCFE5200BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:d1:64:7a:6e:3a:a5:f6:ee:11:da:06:db:
                    b7:b2:8a:0d:0e:62:7a:82:fe:50:ab:f9:b7:06:00:
                    43:b0:9b:c0:c6:5b:34:01:ae:37:0a:91:35:7e:5c:
                    f7:1f:9a:61:e1:2a:c7:00:ad:bf:ad:8d:ee:a5:fe:
                    5d:b5:79:55:d4:81:0b:a0:c1:4d:cb:23:9f:82:f4:
                    40:58:da:88:82:39:e4:73:74:ca:84:b8:7b:38:3f:
                    31:1c:75:1b:6b:7b:ce:fa:29:a0:12:11:e7:6e:bd:
                    f5:3b:51:88:a4:7d:76:76:2e:e1:86:f0:8d:b6:f9:
                    66:e6:47:2b:fc:b5:63:38:53:42:c8:7d:4d:47:66:
                    05:02:b5:88:ee:4b:d9:36:ea:11:60:85:fc:08:a3:
                    73:48:69:4e:49:18:55:20:4b:3b:7d:2b:8d:df:52:
                    27:34:bd:82:8d:2b:51:98:ba:29:52:1e:e6:66:bc:
                    fc:c8:eb:a1:d7:24:37:86:4e:5c:aa:10:b1:94:10:
                    40:97:8e:4f:c0:e5:a1:60:23:93:40:92:ec:cf:d0:
                    8a:4c:5c:80:66:2c:24:8a:45:eb:08:2a:4e:56:5e:
                    a3:9a:ba:55:c0:68:9b:ba:46:09:15:7d:51:74:5b:
                    63:46:7a:16:46:12:36:0c:54:fe:7a:d1:bf:16:8a:
                    3a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C4:9D:03:4F:87:B4:15:EC:4A:ED:3D:F6:0A:F7:BC:FE:52:00:BB
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a333730303a3a2f34302d3438203d3e20313439323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:3700::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:f5:18:c3:b6:eb:4f:d4:8e:4c:3a:71:e0:28:ad:01:dd:70:
         b1:4b:2f:cb:23:67:30:84:8f:b0:c1:01:54:27:7e:7d:53:95:
         45:52:8f:51:74:f4:9b:1c:59:4e:ed:92:32:db:75:69:eb:65:
         02:1b:b9:53:b7:5d:e3:66:55:7f:2f:c6:26:83:5d:aa:a4:b5:
         65:0d:14:2f:d7:b4:61:b9:6d:d6:1c:d8:a4:f1:1e:b9:98:ac:
         9c:f7:17:d3:fa:1a:a7:c1:ef:39:ff:9a:e2:6b:70:44:09:c2:
         73:74:5b:cb:05:d6:82:02:2d:97:b7:29:a1:69:31:41:28:40:
         68:c2:11:10:e4:75:ae:29:26:c1:66:43:11:a0:d2:af:b2:29:
         67:4c:ff:ad:16:09:3c:5e:61:af:08:92:cd:69:20:19:44:fe:
         76:82:bd:c4:5e:73:6f:94:1e:52:b9:28:32:95:a7:67:ea:2f:
         f5:78:c9:83:3c:69:3b:97:c5:85:1d:9e:5e:61:f4:5a:1f:de:
         51:52:5a:4f:d9:77:6a:d8:f3:68:26:c7:a8:38:20:ad:b1:4b:
         c1:49:d3:39:26:7f:26:d7:48:5e:80:c3:2b:47:37:84:c9:91:
         a6:dc:bb:8a:89:cf:7a:03:30:4a:a4:b8:e1:cd:1d:dd:56:23:
         a0:dc:fa:01
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUVrvp6JyXL2PTsIWi71xqih7ajwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA2MTYxNDMzMjZaFw0yNDA2MTQxNDM4MjZaMDMxMTAvBgNV
BAMTKDU5QzQ5RDAzNEY4N0I0MTVFQzRBRUQzREY2MEFGN0JDRkU1MjAwQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ29Fkem46pfbuEdoG27eyig0O
YnqC/lCr+bcGAEOwm8DGWzQBrjcKkTV+XPcfmmHhKscArb+tje6l/l21eVXUgQug
wU3LI5+C9EBY2oiCOeRzdMqEuHs4PzEcdRtre876KaASEeduvfU7UYikfXZ2LuGG
8I22+WbmRyv8tWM4U0LIfU1HZgUCtYjuS9k26hFghfwIo3NIaU5JGFUgSzt9K43f
Uic0vYKNK1GYuilSHuZmvPzI66HXJDeGTlyqELGUEECXjk/A5aFgI5NAkuzP0IpM
XIBmLCSKResIKk5WXqOaulXAaJu6RgkVfVF0W2NGehZGEjYMVP560b8WijpnAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUWcSdA0+HtBXsSu099gr3vP5SALswHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
gYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVMyMDU0MzIvMC8zMjYxMzAzNjNhMzEzMjM4MzczYTMzMzczMDMwM2EzYTJm
MzQzMDJkMzQzODIwM2QzZTIwMzEzNDM5MzIzOTM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgYShzcw
DQYJKoZIhvcNAQELBQADggEBABD1GMO260/Ujkw6ceAorQHdcLFLL8sjZzCEj7DB
AVQnfn1TlUVSj1F09JscWU7tkjLbdWnrZQIbuVO3XeNmVX8vxiaDXaqktWUNFC/X
tGG5bdYc2KTxHrmYrJz3F9P6GqfB7zn/muJrcEQJwnN0W8sF1oICLZe3KaFpMUEo
QGjCERDkda4pJsFmQxGg0q+yKWdM/60WCTxeYa8Iks1pIBlE/naCvcRec2+UHlK5
KDKVp2fqL/V4yYM8aTuXxYUdnl5h9Fof3lFSWk/Zd2rY82gmx6g4IK2xS8FJ0zkm
fybXSF6AwytHN4TJkabcu4qJz3oDMEqkuOHNHd1WI6Dc+gE=
-----END CERTIFICATE-----