Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a34303a3a2f34382d3438203d3e20323035343332.roa
File:                     326130363a313238373a34303a3a2f34382d3438203d3e20323035343332.roa (raw, json)
Hash identifier:          FqJaZskTEEbW7a6XXoDdakY/WAugFPRTvnNTX5P6DMY=
Subject key identifier:   13:E3:E9:12:63:90:86:EC:5A:E0:DD:BE:53:65:28:84:7F:6A:CC:35
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       5FA64212F7C766725F42E487A9AAC97F0BF012CE
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a34303a3a2f34382d3438203d3e20323035343332.roa
Signing time:             Fri 14 Apr 2023 01:55:52 +0000
ROA not before:           Fri 14 Apr 2023 01:50:52 +0000
ROA not after:            Fri 12 Apr 2024 01:55:52 +0000
asID:                     205432
IP address blocks:        2a06:1287:40::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a6:42:12:f7:c7:66:72:5f:42:e4:87:a9:aa:c9:7f:0b:f0:12:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:50:52 2023 GMT
            Not After : Apr 12 01:55:52 2024 GMT
        Subject: CN=13E3E912639086EC5AE0DDBE536528847F6ACC35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:eb:a0:e4:f5:b6:f5:b7:5d:da:c7:73:c3:78:
                    6b:fc:be:05:dc:84:15:5f:88:5e:8a:2b:68:8f:d5:
                    ca:8f:a6:40:dc:17:27:1e:f5:24:49:20:e6:2c:23:
                    02:4e:bb:7c:b9:40:d6:94:b5:23:99:e1:c0:5a:11:
                    f2:df:e4:19:54:3c:65:f5:68:af:a7:8e:17:30:ef:
                    b2:f3:09:9f:ab:5d:65:70:ab:72:a3:b5:9c:05:e6:
                    ab:3d:8f:0f:93:c5:16:ef:21:6f:8a:b4:8e:66:ee:
                    7d:84:e8:e5:b4:15:40:ec:43:36:96:a8:3a:d8:cd:
                    77:bf:86:97:5b:38:9a:1a:b2:a1:c6:b9:20:14:5f:
                    36:51:7e:07:ff:cf:89:49:9f:08:b1:b9:3a:b4:e3:
                    a6:94:2c:d8:7b:d3:a0:09:63:81:42:42:55:5d:5c:
                    9d:5b:ab:38:cd:22:21:ba:2a:df:7c:08:bf:28:0b:
                    68:87:c1:65:78:f4:ab:9b:b3:d5:da:ce:e7:b1:b5:
                    50:ff:b0:f3:2b:58:5d:88:9f:5e:b8:2d:f8:d2:67:
                    64:27:e4:8d:bd:fa:5e:45:9f:aa:ea:a6:9d:6d:05:
                    0c:29:d7:a1:35:73:e7:3b:59:50:a0:57:e7:6d:78:
                    84:42:be:0c:a7:1d:6e:f1:d8:33:4e:09:e0:f1:1e:
                    0a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E3:E9:12:63:90:86:EC:5A:E0:DD:BE:53:65:28:84:7F:6A:CC:35
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a34303a3a2f34382d3438203d3e20323035343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:2d:0a:14:dc:88:ea:97:9b:d1:f2:df:62:84:f5:f3:6e:cb:
         8b:49:ae:db:51:7f:8d:2d:06:bd:6d:f9:f4:d5:02:5c:33:3e:
         87:a3:64:bd:84:db:ae:2c:8a:5f:30:df:0f:49:5c:4e:73:a2:
         bf:9b:39:a7:30:d8:08:ed:0d:1b:f1:c1:ad:3c:16:0d:a4:7c:
         5f:2e:de:a2:9b:37:29:09:3c:69:bd:b5:77:74:8c:b4:19:f0:
         49:dd:6b:08:a2:31:da:6e:00:bf:bc:4e:5a:c6:86:53:00:89:
         c6:8e:6c:e2:d3:9b:22:44:2f:dd:5f:8f:5b:2d:9a:7c:17:aa:
         5b:50:47:6e:25:dc:3a:bc:50:f1:89:33:2f:e2:49:23:10:cf:
         1c:cb:5b:f6:96:a0:d8:1f:48:86:61:4a:b2:c7:ca:1d:d3:8c:
         bd:41:5b:29:11:ca:70:fd:ed:59:ab:53:a8:ef:78:4f:42:65:
         7b:34:3a:90:41:50:a7:e9:d1:e2:a2:b9:52:c8:cd:08:7e:d9:
         ca:15:6c:f1:7d:d6:12:4d:c0:65:95:71:ff:3d:19:6f:f4:15:
         69:71:19:63:0a:1a:26:3c:38:4f:40:64:b1:76:42:46:7f:6a:
         25:3c:38:50:26:28:e2:fc:a6:54:bf:0c:21:e9:ad:1a:de:ab:
         82:80:2a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----