Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a353630313a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a313238373a353630313a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          798fZtcgxHh1StnYJvjH9gGA1VVJLUKlJXa2UGDtmOg=
Subject key identifier:   FE:F0:DA:BF:02:AD:2B:9A:20:75:4C:91:D8:D8:11:87:E0:3D:DD:EF
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       355310F12F9141DBC15FDA1E28E295FDDC7CC409
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a353630313a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Fri 09 Jun 2023 14:47:14 +0000
ROA not before:           Fri 09 Jun 2023 14:42:14 +0000
ROA not after:            Fri 07 Jun 2024 14:47:14 +0000
asID:                     151349
IP address blocks:        2a06:1287:5601::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:53:10:f1:2f:91:41:db:c1:5f:da:1e:28:e2:95:fd:dc:7c:c4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun  9 14:42:14 2023 GMT
            Not After : Jun  7 14:47:14 2024 GMT
        Subject: CN=FEF0DABF02AD2B9A20754C91D8D81187E03DDDEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:ae:40:63:8b:3c:c3:96:7a:8a:57:36:b1:
                    6c:e0:fd:a9:1c:76:ce:43:b7:70:7e:fe:49:74:f8:
                    5f:32:e4:12:0c:78:17:c3:2a:03:64:2f:b7:96:38:
                    75:c5:19:08:73:69:d4:4b:58:ec:e0:96:b7:87:e3:
                    8f:1f:15:fa:a1:5e:b9:17:91:a5:6d:89:fa:56:0d:
                    d7:6c:8a:3c:b0:26:7c:77:d1:a6:d8:5b:8d:2d:ae:
                    33:af:03:67:11:13:f9:72:b0:8e:2e:93:27:63:b4:
                    ee:1a:32:73:46:a9:d8:44:aa:dd:2c:e7:b9:97:51:
                    72:2b:f7:7f:cf:49:bd:fb:a8:11:45:15:f9:98:38:
                    b0:c0:24:1c:08:69:b7:25:83:9f:ba:51:67:5d:e6:
                    ec:98:36:14:d1:fa:f6:49:f6:43:19:af:fc:44:4f:
                    bb:76:9b:9e:9c:8a:cf:db:59:a6:82:c6:ee:77:8d:
                    d8:14:ad:dc:23:c3:24:1f:75:f0:54:f4:64:17:7e:
                    76:df:06:a8:be:a3:db:c9:4c:1b:aa:f0:d3:d9:c1:
                    3e:76:c0:0b:fa:f0:07:14:55:57:c9:b3:48:c4:33:
                    2c:fe:ce:69:a0:1c:f8:33:ed:d3:4f:db:90:c6:a2:
                    da:37:45:d1:5d:ca:2f:d7:4a:f9:38:66:d7:c0:07:
                    81:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F0:DA:BF:02:AD:2B:9A:20:75:4C:91:D8:D8:11:87:E0:3D:DD:EF
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a353630313a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:5601::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:eb:10:90:60:a5:df:34:55:cc:72:ad:56:d7:12:72:58:2c:
         ca:e7:2d:4d:63:a6:a0:93:ca:a7:b3:2b:54:81:40:31:fa:ef:
         68:57:83:b3:1f:46:6c:dd:37:bf:0c:c7:42:ef:0a:97:e7:3a:
         7a:8f:d2:c5:0d:48:11:bc:ec:7a:85:43:00:05:ca:d5:79:1a:
         58:45:c8:b0:fd:f5:83:28:f6:58:c8:a7:61:1c:aa:71:6b:60:
         4f:dd:b6:71:1f:49:a3:61:f6:0d:ba:f0:ef:a0:22:fc:80:cc:
         e9:bd:49:8f:11:b1:93:fc:5e:95:71:c8:6a:bc:7a:5f:df:18:
         41:d0:d4:c5:4b:a7:12:59:63:3b:8b:e5:b4:81:b0:8f:33:01:
         35:c5:c7:48:e1:08:e8:8f:5e:f9:cb:41:7b:bd:4b:a1:98:d2:
         44:08:5a:1b:e5:a3:26:aa:4d:6e:48:91:7d:5b:12:5e:96:b9:
         f7:7c:e0:e2:fe:66:5c:76:4b:36:2e:3e:f4:46:02:5b:87:86:
         67:43:83:cd:5b:1c:34:9d:d5:65:ae:92:af:0c:49:f4:72:dd:
         9a:a1:78:72:27:d3:05:e9:b9:9c:2a:ac:77:07:e4:29:3f:0d:
         2d:b4:84:43:c5:ff:0b:94:08:b9:08:eb:f5:98:a2:13:1a:cd:
         9c:2f:e5:12
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUNVMQ8S+RQdvBX9oeKOKV/dx8xAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA2MDkxNDQyMTRaFw0yNDA2MDcxNDQ3MTRaMDMxMTAvBgNV
BAMTKEZFRjBEQUJGMDJBRDJCOUEyMDc1NEM5MUQ4RDgxMTg3RTAzRERERUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3zK5AY4s8w5Z6ilc2sWzg/akc
ds5Dt3B+/kl0+F8y5BIMeBfDKgNkL7eWOHXFGQhzadRLWOzglreH448fFfqhXrkX
kaVtifpWDddsijywJnx30abYW40trjOvA2cRE/lysI4ukydjtO4aMnNGqdhEqt0s
57mXUXIr93/PSb37qBFFFfmYOLDAJBwIabclg5+6UWdd5uyYNhTR+vZJ9kMZr/xE
T7t2m56cis/bWaaCxu53jdgUrdwjwyQfdfBU9GQXfnbfBqi+o9vJTBuq8NPZwT52
wAv68AcUVVfJs0jEMyz+zmmgHPgz7dNP25DGoto3RdFdyi/XSvk4ZtfAB4HxAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU/vDavwKtK5ogdUyR2NgRh+A93e8wHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
gYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVMyMDU0MzIvMC8zMjYxMzAzNjNhMzEzMjM4MzczYTM1MzYzMDMxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNTMxMzMzNDM5LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSh1YB
MA0GCSqGSIb3DQEBCwUAA4IBAQB16xCQYKXfNFXMcq1W1xJyWCzK5y1NY6agk8qn
sytUgUAx+u9oV4OzH0Zs3Te/DMdC7wqX5zp6j9LFDUgRvOx6hUMABcrVeRpYRciw
/fWDKPZYyKdhHKpxa2BP3bZxH0mjYfYNuvDvoCL8gMzpvUmPEbGT/F6VcchqvHpf
3xhB0NTFS6cSWWM7i+W0gbCPMwE1xcdI4Qjoj175y0F7vUuhmNJECFob5aMmqk1u
SJF9WxJelrn3fODi/mZcdks2Lj70RgJbh4ZnQ4PNWxw0ndVlrpKvDEn0ct2aoXhy
J9MF6bmcKqx3B+QpPw0ttIRDxf8LlAi5COv1mKITGs2cL+US
-----END CERTIFICATE-----