Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a343930303a3a2f34302d3438203d3e20323033343538.roa
File:                     326130363a313238373a343930303a3a2f34302d3438203d3e20323033343538.roa (raw, json)
Hash identifier:          X2V3ZgJJuyK4ioKE49OZZ16UyoKrn6a2iu6FhOyb2NM=
Subject key identifier:   FD:D0:FB:62:EF:E8:39:10:53:89:85:20:F9:B1:60:50:00:6E:B6:61
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       3B9C53EB2AFEF56F2334DFE557578663895BC628
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a343930303a3a2f34302d3438203d3e20323033343538.roa
Signing time:             Fri 14 Apr 2023 02:08:55 +0000
ROA not before:           Fri 14 Apr 2023 02:03:55 +0000
ROA not after:            Fri 12 Apr 2024 02:08:55 +0000
asID:                     203458
IP address blocks:        2a06:1287:4900::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9c:53:eb:2a:fe:f5:6f:23:34:df:e5:57:57:86:63:89:5b:c6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:03:55 2023 GMT
            Not After : Apr 12 02:08:55 2024 GMT
        Subject: CN=FDD0FB62EFE8391053898520F9B16050006EB661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:36:d4:62:35:74:d0:05:60:1c:fb:44:50:
                    08:e0:17:71:da:06:04:17:25:18:34:05:22:7e:bd:
                    05:4b:3d:77:f0:ad:9f:f9:03:6f:d3:e2:cd:85:ea:
                    a9:1a:44:4a:3d:45:d9:e3:8d:ba:f5:b1:6b:2f:5f:
                    6d:9e:c7:dc:48:41:04:6b:6f:45:31:7f:6a:7a:54:
                    0b:70:ed:a7:75:69:85:4a:0d:a9:2c:e8:a8:77:a1:
                    da:ac:2a:61:71:c1:a6:e4:63:ce:22:df:8b:0a:1e:
                    d2:7b:99:49:fc:a2:a4:4e:96:99:0a:42:d2:cc:03:
                    73:ec:a4:1a:89:09:56:21:a4:7e:aa:e7:09:55:3e:
                    ec:41:f0:42:59:25:3d:7d:f8:f4:9b:05:04:24:b4:
                    7e:c4:15:c0:10:23:58:0e:ba:ef:09:b7:66:0f:0b:
                    84:0f:41:0d:fe:5e:42:05:61:8a:ee:33:3d:2a:ff:
                    0e:f5:1f:f9:3b:36:af:34:9f:8b:e7:80:be:59:ce:
                    42:7d:0b:b6:ad:31:b5:d8:e5:61:5e:8d:34:11:a6:
                    5f:37:a8:29:bb:0d:b8:7f:16:53:e8:d5:90:08:b5:
                    6e:0e:9f:20:d4:17:05:19:1a:a8:4c:e4:4b:0c:d4:
                    80:40:ce:b9:d8:0c:9b:06:fb:f8:35:87:1d:de:54:
                    f3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D0:FB:62:EF:E8:39:10:53:89:85:20:F9:B1:60:50:00:6E:B6:61
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a343930303a3a2f34302d3438203d3e20323033343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:4900::/40

    Signature Algorithm: sha256WithRSAEncryption
         32:ff:6b:a9:5f:18:38:1e:ac:ff:58:69:3c:86:8a:86:45:09:
         de:b6:ee:5e:12:d1:32:4b:a5:bc:50:f1:1d:68:69:ff:b0:e3:
         61:62:af:fa:47:40:6c:8b:95:d0:4d:55:45:d8:6f:39:88:34:
         ca:bc:fc:da:56:75:11:9d:26:5a:86:02:7f:13:fa:be:77:9f:
         8f:05:ff:24:84:b2:32:c1:23:15:f7:49:27:70:6d:8d:43:74:
         b2:e8:fb:aa:10:d5:18:2f:a5:e5:74:b1:36:f4:dd:54:07:a4:
         9d:3b:86:6a:65:30:72:14:e6:8a:84:1c:78:cb:aa:9f:5a:69:
         a4:46:72:4c:75:65:e6:70:cb:27:27:b8:69:4b:e2:bb:34:1e:
         7a:61:0e:43:3e:36:70:7d:00:41:98:90:3c:78:46:78:cd:6a:
         bb:eb:33:ec:69:7b:f9:c9:8d:32:34:c5:1c:ef:02:1d:05:42:
         70:a6:56:13:8d:24:c2:b5:ee:b9:13:61:fa:5a:60:28:34:84:
         68:5a:8a:e7:62:bb:94:7b:b1:5e:5c:2c:c9:bc:21:9b:8b:07:
         b9:77:e8:1a:65:9e:ee:9e:14:c0:44:40:a8:3a:82:cf:7b:02:
         3c:c6:a1:86:64:30:3e:3c:42:61:d2:d8:32:7a:03:4c:45:b9:
         2a:10:f4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----