Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a333830303a3a2f34302d3430203d3e20323038303738.roa
File:                     326130363a313238373a333830303a3a2f34302d3430203d3e20323038303738.roa (raw, json)
Hash identifier:          GpMzysmYZrWZcERlPEmMRCJNXwcxwJxdSM1aN5uVC9E=
Subject key identifier:   78:CF:F8:02:C5:38:D2:02:BF:B6:3E:2F:B4:82:59:D6:81:A5:88:A7
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       1F10358C41E4B3F14246F24A8034DAA71D312E87
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a333830303a3a2f34302d3430203d3e20323038303738.roa
Signing time:             Fri 14 Apr 2023 01:59:11 +0000
ROA not before:           Fri 14 Apr 2023 01:54:11 +0000
ROA not after:            Fri 12 Apr 2024 01:59:11 +0000
asID:                     208078
IP address blocks:        2a06:1287:3800::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:10:35:8c:41:e4:b3:f1:42:46:f2:4a:80:34:da:a7:1d:31:2e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:54:11 2023 GMT
            Not After : Apr 12 01:59:11 2024 GMT
        Subject: CN=78CFF802C538D202BFB63E2FB48259D681A588A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:27:14:b6:61:8d:7c:b6:fe:a4:65:da:b1:78:
                    25:75:90:0d:d1:2f:1b:9c:48:e1:f0:61:e4:ed:e2:
                    d4:8f:12:c5:45:26:7c:03:0d:a9:e7:74:d0:d8:7a:
                    07:6e:fc:41:49:ce:d4:ad:c6:92:6e:e1:51:cf:3f:
                    29:d0:7c:40:bd:bd:b9:69:9a:56:84:0d:fc:bb:f3:
                    62:24:1e:98:01:65:c5:3a:de:37:3f:9f:ef:52:25:
                    c9:ee:bf:fd:0d:bd:ae:ed:72:2c:62:07:b9:c0:70:
                    93:a9:dd:a4:e6:a3:92:0b:a4:4d:9f:0f:ba:36:ef:
                    1f:32:51:9d:14:0b:97:1d:bc:bc:73:22:35:01:a8:
                    1b:80:17:f0:79:31:b8:90:11:eb:75:d1:77:3a:c1:
                    3b:87:a8:2d:6e:c4:bc:69:4c:1c:61:6a:8b:84:46:
                    ea:a6:6a:97:6e:67:10:bc:6e:c1:f0:f6:8d:1c:c8:
                    22:94:60:ef:0a:06:47:31:cd:be:0e:11:59:e0:f3:
                    1d:d9:c3:e8:7d:b7:4d:ee:a5:ae:c4:86:d1:96:f8:
                    cc:c7:c4:84:f8:f4:41:61:12:8b:96:38:86:01:c3:
                    7f:6d:65:66:04:95:14:06:e5:fb:fe:14:03:d3:4e:
                    a7:e6:eb:73:d7:73:19:0b:c6:67:0b:72:3c:9b:2a:
                    bf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CF:F8:02:C5:38:D2:02:BF:B6:3E:2F:B4:82:59:D6:81:A5:88:A7
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a333830303a3a2f34302d3430203d3e20323038303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:3800::/40

    Signature Algorithm: sha256WithRSAEncryption
         c1:bb:a0:07:02:aa:06:7a:93:dc:45:90:65:3f:7e:9b:2c:9a:
         e2:e5:46:80:45:92:66:4c:20:01:54:ac:bb:d7:b4:26:7d:b3:
         41:90:20:ae:81:79:e1:a2:2a:e7:1c:00:6f:9a:cb:10:eb:64:
         93:20:c0:33:3d:41:ea:03:a0:12:69:c9:57:72:58:ce:bb:ec:
         8d:21:23:c8:74:b9:70:50:18:01:10:17:b6:ef:ed:3e:53:d1:
         53:23:2d:eb:cb:1d:c9:fb:69:e2:b0:8b:20:62:94:b9:75:33:
         cf:36:c9:02:c2:4a:39:9b:c6:05:b9:e9:96:c7:02:2b:bb:9e:
         69:65:6c:24:ac:e4:b9:42:b3:20:2c:96:ae:37:a0:07:99:7d:
         61:83:d0:1c:bf:4b:c2:85:d2:2a:1a:43:c0:fc:4f:e0:b6:75:
         09:b4:45:80:31:79:e0:57:4e:92:6c:5b:38:43:cd:32:16:c7:
         7e:66:39:97:05:77:ad:67:11:df:43:fa:06:85:dd:2d:15:d5:
         39:2a:47:5a:55:89:e9:b7:c9:62:d2:a6:3a:3c:79:8c:ea:76:
         61:72:aa:ef:21:06:00:5a:05:14:54:d9:9f:a9:df:1b:64:f8:
         20:15:9e:1d:54:91:50:eb:7e:4a:76:44:7f:d5:bb:4d:0d:48:
         22:9f:aa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----