Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a353430303a3a2f33392d3339203d3e20313939333736.roa
File:                     326130363a313238373a353430303a3a2f33392d3339203d3e20313939333736.roa (raw, json)
Hash identifier:          LtRMWMD+J5um7ggcMemDKVDbRQCPyK/iNMrkDeB7sR4=
Subject key identifier:   FA:03:F5:8B:04:B3:1A:89:BB:23:E5:58:6B:F2:D3:94:62:9E:C7:02
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       5676F0D3ABF37E5B7D22747498316D825B8D7812
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a353430303a3a2f33392d3339203d3e20313939333736.roa
Signing time:             Fri 14 Apr 2023 01:43:44 +0000
ROA not before:           Fri 14 Apr 2023 01:38:44 +0000
ROA not after:            Fri 12 Apr 2024 01:43:44 +0000
asID:                     199376
IP address blocks:        2a06:1287:5400::/39 maxlen: 39

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:76:f0:d3:ab:f3:7e:5b:7d:22:74:74:98:31:6d:82:5b:8d:78:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:38:44 2023 GMT
            Not After : Apr 12 01:43:44 2024 GMT
        Subject: CN=FA03F58B04B31A89BB23E5586BF2D394629EC702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:67:3a:53:9f:16:cf:f0:8c:21:01:fa:b7:5e:
                    9d:7f:83:33:1d:e2:25:e5:be:fe:52:dd:e3:92:e8:
                    89:99:2f:0e:6c:ec:19:60:d5:05:7d:72:dd:e4:e0:
                    6f:21:1b:47:5e:46:83:bf:84:62:08:e6:79:5b:c1:
                    69:cb:4e:30:c6:20:47:71:d8:08:aa:2f:14:f3:e1:
                    d2:10:49:5a:60:b6:29:7d:e8:fa:b1:97:e7:7e:dd:
                    10:6d:8e:bf:64:ad:76:a5:d2:95:c0:75:c0:db:54:
                    ae:a0:4e:f1:fd:a6:1c:12:35:c4:93:5e:8a:be:dd:
                    36:4f:d0:4b:bc:89:e4:5c:c1:d7:cd:52:7f:ae:78:
                    ce:77:8e:97:a5:f2:16:bc:eb:3b:ed:c9:83:5f:a7:
                    0a:55:2b:9b:ed:8d:74:b6:f5:ef:e8:a2:18:da:77:
                    8b:eb:70:76:5c:6b:78:ea:7b:2f:fc:44:2d:2d:4e:
                    af:4e:1f:0b:56:8d:3a:95:80:e7:8c:c2:c3:d7:91:
                    8b:fc:8a:9e:e6:35:a8:b4:57:19:31:64:f5:b9:ec:
                    1b:98:4f:f4:0b:83:a6:64:11:77:40:8c:dd:8d:cd:
                    52:3c:ff:4a:88:d2:b1:14:2c:c7:0b:df:9e:b4:64:
                    a4:c8:fe:55:a1:7b:a0:68:f8:53:d9:c2:2d:27:1b:
                    21:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:03:F5:8B:04:B3:1A:89:BB:23:E5:58:6B:F2:D3:94:62:9E:C7:02
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a353430303a3a2f33392d3339203d3e20313939333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:5400::/39

    Signature Algorithm: sha256WithRSAEncryption
         27:a7:49:b6:0c:ea:2e:15:43:cd:d8:76:eb:1c:5e:bd:7b:72:
         39:e9:72:b2:e1:7e:7f:4e:cc:ed:89:02:9e:65:09:31:db:a2:
         b2:33:dd:1b:c6:51:bf:b4:b7:86:d6:63:7e:6d:3e:fd:5b:f0:
         6d:a8:2d:ff:1a:4f:bf:59:41:81:c3:76:fe:c3:d5:36:2b:ab:
         be:7a:69:07:f5:8e:86:91:35:7a:4e:6c:e6:93:2e:5e:27:87:
         86:65:4e:4c:2e:3a:24:df:aa:8f:67:0e:db:1b:94:5a:d7:53:
         d2:a1:66:ba:ec:89:76:02:ed:6a:93:48:68:52:8b:60:31:94:
         9f:61:68:9d:eb:e8:cc:f4:71:2f:44:b5:f2:6f:92:b6:6a:a0:
         31:d8:5b:b1:76:20:4d:ca:35:6f:62:e7:ed:65:05:66:88:0d:
         31:01:fd:0a:eb:b7:43:06:eb:99:27:bb:e8:5c:8b:d0:f2:e9:
         fc:a3:1f:2e:2f:d4:c9:cb:05:e4:7c:fe:39:fc:67:7c:2d:b6:
         d5:84:f7:ce:1b:52:12:33:08:69:cd:b0:93:c3:0a:ad:0b:bb:
         86:28:c8:68:9a:08:16:f2:fa:8f:21:fb:cd:20:f1:d5:73:b6:
         eb:c9:9a:3f:03:3c:16:ee:99:56:37:35:fb:0c:f9:22:2e:78:
         2f:a3:7d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----