Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a333930303a3a2f34302d3438203d3e20323038323233.roa
File:                     326130363a313238373a333930303a3a2f34302d3438203d3e20323038323233.roa (raw, json)
Hash identifier:          iksUv8K0QCamtyf2AWU8hDANp2zLAQzOYtOC3MLmZe4=
Subject key identifier:   AA:04:98:36:28:B1:3B:5C:B0:C1:0B:EB:4B:56:2A:01:93:65:AB:FE
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       30FDBC571F5AE833C81E4084BDB099BEB5D1E9E0
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a333930303a3a2f34302d3438203d3e20323038323233.roa
Signing time:             Fri 14 Apr 2023 01:59:54 +0000
ROA not before:           Fri 14 Apr 2023 01:54:54 +0000
ROA not after:            Fri 12 Apr 2024 01:59:54 +0000
asID:                     208223
IP address blocks:        2a06:1287:3900::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:fd:bc:57:1f:5a:e8:33:c8:1e:40:84:bd:b0:99:be:b5:d1:e9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:54:54 2023 GMT
            Not After : Apr 12 01:59:54 2024 GMT
        Subject: CN=AA04983628B13B5CB0C10BEB4B562A019365ABFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:68:e6:67:3b:86:d3:16:45:ac:98:bc:36:a6:
                    7f:c1:85:90:fe:86:5e:ba:a7:98:86:bd:5d:b9:1b:
                    89:a5:fc:50:6a:24:fd:c4:bb:17:c1:a9:0a:8e:5c:
                    b4:e5:a8:01:59:60:9e:ca:4c:ab:ef:2a:c8:bc:ea:
                    6e:88:16:8a:ac:69:55:5a:45:37:66:8f:1e:40:35:
                    69:8b:b4:38:cd:60:ee:a8:41:db:36:cd:3f:3b:26:
                    5f:f1:28:25:91:e3:49:ad:da:93:c3:3e:37:c2:a6:
                    26:fc:bd:a4:64:80:da:ea:74:2b:7b:a8:f0:c0:29:
                    6c:66:84:e2:52:39:0a:51:2e:49:15:3f:7a:ae:df:
                    9a:1b:59:99:2b:6d:1b:6d:fd:85:3a:71:2c:ed:6d:
                    46:fc:c5:c4:f1:e4:b6:9f:ca:cc:9b:d9:43:2d:85:
                    41:2c:f4:bf:b6:25:e7:0f:47:d5:ac:24:54:05:61:
                    bc:e5:c6:0f:63:87:99:59:84:3a:e5:24:90:29:2d:
                    da:ca:7d:11:a0:f7:77:d8:d6:49:35:d6:e2:4f:35:
                    73:86:49:8e:08:df:82:10:65:6f:61:0e:de:03:60:
                    54:cd:31:93:49:2f:96:34:a9:07:32:52:c7:d2:8d:
                    a4:14:c2:35:84:81:05:cf:75:bb:0c:cc:09:6d:26:
                    49:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:04:98:36:28:B1:3B:5C:B0:C1:0B:EB:4B:56:2A:01:93:65:AB:FE
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a333930303a3a2f34302d3438203d3e20323038323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:3900::/40

    Signature Algorithm: sha256WithRSAEncryption
         be:5b:60:54:5e:b2:f2:5f:80:8c:22:be:ee:b7:6d:df:0d:ce:
         7a:ff:2e:ba:d2:20:cd:24:f5:f1:5d:22:f0:ca:70:72:16:3d:
         0e:9c:cd:de:15:de:5b:74:62:36:f7:48:d5:0e:65:d6:55:e2:
         36:ea:dd:18:b3:77:09:47:7b:58:bc:35:7b:3e:4c:e4:ce:50:
         e5:bc:c1:26:72:67:f1:97:ef:af:d3:39:48:6d:f8:eb:43:91:
         bd:46:70:c2:a5:97:13:1a:a6:19:4f:03:02:c6:43:6d:6b:67:
         8b:f0:d9:b9:72:35:a8:3d:c0:a1:83:db:cc:78:0c:44:f8:1b:
         f9:c3:6c:95:e2:ca:31:09:51:32:60:df:da:6f:68:f1:fe:97:
         ab:7f:22:ed:fb:c4:1c:b8:ce:5f:6d:7c:58:3d:1a:fd:f9:1d:
         c0:0e:1e:5b:1b:b9:85:23:fe:7a:65:4d:83:00:4e:74:97:25:
         33:cc:8a:d8:a0:07:c9:b3:bf:8e:0a:b1:2a:f2:58:65:09:14:
         86:ba:88:41:ff:87:1e:98:0f:a9:f3:08:a6:eb:d5:d5:7b:d8:
         5f:dc:84:bb:51:ed:f3:05:ec:74:d9:ed:85:58:b7:ad:fb:e0:
         74:3b:37:4a:85:16:aa:3d:99:20:f1:4a:29:58:59:d5:a5:84:
         eb:aa:9c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----