Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a353630303a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a313238373a353630303a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          kdyaI5SyJma/i85rrSu3MI704w+9+hwyK19zAr6ZFr0=
Subject key identifier:   B8:23:D4:46:B4:84:3A:6A:2F:FD:76:02:07:A9:44:DC:E0:FD:56:B7
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       01B024EED2BC97E327E7395E99B6D2D40F20C46C
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a353630303a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Fri 09 Jun 2023 14:46:58 +0000
ROA not before:           Fri 09 Jun 2023 14:41:58 +0000
ROA not after:            Fri 07 Jun 2024 14:46:58 +0000
asID:                     151349
IP address blocks:        2a06:1287:5600::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b0:24:ee:d2:bc:97:e3:27:e7:39:5e:99:b6:d2:d4:0f:20:c4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun  9 14:41:58 2023 GMT
            Not After : Jun  7 14:46:58 2024 GMT
        Subject: CN=B823D446B4843A6A2FFD760207A944DCE0FD56B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f2:7f:b2:0a:b4:2b:ad:79:7e:0e:53:16:32:
                    df:98:be:1b:da:08:87:c1:35:b6:22:09:79:17:00:
                    76:72:ae:b4:da:8d:0b:37:93:3b:54:db:f4:4a:6f:
                    6c:7c:fb:c6:ba:52:92:80:9e:62:93:5b:3a:c5:cb:
                    75:f6:b0:6c:7f:5f:e6:0a:0d:bc:34:b4:e8:a8:10:
                    ca:f0:3c:78:5b:1a:c4:c4:30:6a:07:66:f1:e9:24:
                    fb:81:c4:17:2a:46:85:cf:3d:12:eb:dd:53:0a:e1:
                    16:8d:73:f5:5e:a9:4c:f3:18:c0:f8:b2:61:3f:ae:
                    71:0e:05:ed:83:29:bd:ad:7b:8a:84:3f:e6:bd:a0:
                    e9:6a:a6:32:b0:9a:63:2a:bc:0d:67:92:e6:78:52:
                    62:67:57:0c:fb:87:15:c0:34:e9:1b:b9:b5:5a:9b:
                    3e:ca:2f:b5:89:83:95:a4:4d:ff:41:e7:ed:6f:d3:
                    61:66:4b:a2:cf:6a:35:93:fe:cd:77:99:09:4d:d3:
                    77:eb:ca:ea:6d:24:d0:f3:6a:17:a0:03:26:d1:bd:
                    bd:0f:15:e1:98:e5:0a:9b:ba:b4:ce:44:09:2a:30:
                    9e:c7:48:eb:3d:cc:b7:a4:2d:47:43:b4:75:14:1e:
                    61:07:08:01:1e:c4:83:ca:4e:f8:fe:6b:2d:77:86:
                    94:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:23:D4:46:B4:84:3A:6A:2F:FD:76:02:07:A9:44:DC:E0:FD:56:B7
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a353630303a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:5600::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:b6:3e:b6:57:84:9e:cc:70:ff:ed:55:b7:01:c1:8c:c6:ce:
         f4:06:75:f7:c8:38:5e:b1:47:bd:7d:61:a7:cc:03:86:4f:42:
         74:92:3d:f1:80:99:e1:69:be:8e:ab:aa:8f:82:5a:92:d2:24:
         d1:99:9b:7c:6b:e3:8d:fe:c6:40:63:f5:83:e8:ac:d4:eb:4e:
         90:af:92:93:74:dc:55:25:0b:dc:58:18:60:08:a6:a9:13:4d:
         e7:25:9a:06:ea:bc:3a:ee:2c:25:bb:0f:6e:38:17:f3:1d:80:
         03:3a:66:ec:0d:65:90:eb:2f:51:ab:44:87:c7:1e:82:88:2b:
         ce:6a:07:5a:f4:31:70:0b:93:9e:a7:97:ad:ca:d7:18:34:4f:
         80:fa:9d:c0:ea:b2:7d:ef:38:cd:12:8e:89:d1:83:b4:3c:15:
         87:cb:1b:52:69:b1:18:c9:38:62:48:74:97:e4:d1:68:46:d2:
         07:b0:6f:d2:90:26:3f:ea:17:10:64:af:85:ba:a1:98:6b:bf:
         eb:1d:6e:80:36:6a:51:9f:1b:88:8e:6c:37:45:08:82:00:2b:
         20:98:b3:ab:fa:3c:58:0c:18:9b:85:21:0a:e2:c6:36:c7:88:
         7c:87:32:1d:4c:f8:5f:b3:9c:5e:c9:ef:07:81:fb:ac:83:d7:
         e6:c5:85:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----