Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a353630323a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a313238373a353630323a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          8mrLkQ2NObF+NMeK+3vcNGRYijl0/qK45a8PKmyoAQE=
Subject key identifier:   05:24:50:DA:51:AD:69:9B:9E:13:E7:F5:C6:D9:25:2E:CE:85:28:8B
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       2EFACE663C1EB57F91074A71595BF41DA021543D
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a353630323a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Fri 09 Jun 2023 14:47:28 +0000
ROA not before:           Fri 09 Jun 2023 14:42:28 +0000
ROA not after:            Fri 07 Jun 2024 14:47:28 +0000
asID:                     151349
IP address blocks:        2a06:1287:5602::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:fa:ce:66:3c:1e:b5:7f:91:07:4a:71:59:5b:f4:1d:a0:21:54:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun  9 14:42:28 2023 GMT
            Not After : Jun  7 14:47:28 2024 GMT
        Subject: CN=052450DA51AD699B9E13E7F5C6D9252ECE85288B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:eb:30:22:b4:99:ab:c8:02:4d:95:7e:c2:80:
                    19:8a:7d:80:83:9e:3f:48:d6:48:a8:89:c4:b1:28:
                    03:0f:b6:7c:6e:39:b7:b1:f6:bc:8d:ba:27:7d:e1:
                    8b:ac:a4:e0:bd:ed:40:d8:8f:ff:1c:b1:88:07:86:
                    ec:9b:55:94:d3:ae:53:83:df:8a:42:0d:4e:11:ef:
                    06:9e:22:90:0f:92:cc:a9:77:02:9b:fe:f8:7a:da:
                    b4:2c:52:2e:66:e6:41:d2:d1:27:67:af:20:90:b6:
                    29:09:e1:93:9e:ab:43:c3:6b:71:55:19:21:df:8f:
                    3a:26:e9:a9:cd:51:3e:79:e8:c6:22:56:54:55:c3:
                    10:a0:f2:78:90:c5:a8:8b:ad:2a:21:de:ba:aa:fd:
                    7a:c7:be:de:e3:30:42:49:83:80:e7:f2:54:1a:ba:
                    ea:fd:d3:fb:b7:db:4f:a9:0c:48:84:bc:0c:86:58:
                    5d:fd:b5:4a:3a:4d:41:52:04:12:17:c6:72:53:0e:
                    5c:93:a1:14:96:db:cc:77:02:ec:e3:8f:61:21:9a:
                    ec:04:45:36:aa:cb:02:b5:be:95:65:80:dd:1b:5e:
                    55:f0:0c:ff:b2:58:6c:a8:63:54:3c:d8:4f:35:85:
                    7b:7e:0d:f3:00:17:bc:9a:d6:a3:70:70:a7:aa:4d:
                    96:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:24:50:DA:51:AD:69:9B:9E:13:E7:F5:C6:D9:25:2E:CE:85:28:8B
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a353630323a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:5602::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:be:b4:19:61:f9:52:0c:a6:41:1c:0a:7e:42:c4:a1:f8:ce:
         fe:e8:60:b6:67:a6:69:23:37:11:9a:c5:71:65:97:27:7a:e7:
         1a:aa:9c:49:a3:55:46:2d:25:05:f1:56:e1:d2:05:91:be:4f:
         6f:bb:2e:d3:82:ae:65:50:a0:92:61:68:d4:df:4b:fd:cc:22:
         c1:d5:ee:3a:fa:20:29:39:f7:b1:59:fa:cb:2d:5d:05:16:2a:
         80:e9:4a:f2:9f:85:68:82:d3:37:74:ad:6a:ca:8f:0a:43:c6:
         5c:73:bc:cf:e7:8e:07:6b:94:9d:d7:83:ed:26:5e:cc:2e:b5:
         ff:49:6a:3a:55:92:76:03:30:1d:f7:b5:81:cb:ac:a6:63:6a:
         2c:12:75:b0:f2:2c:e1:64:f9:ac:cb:d9:ac:94:c6:16:72:d1:
         80:ca:9f:58:e2:7f:8b:36:7e:ca:5f:25:60:77:21:67:0c:76:
         99:06:15:f7:29:39:cc:d1:e7:5e:c0:48:c9:8c:22:50:16:e0:
         45:09:4e:84:43:6c:a7:a2:09:fc:22:34:6b:91:29:01:ef:44:
         a0:38:75:7c:3f:80:9e:37:e4:cc:9d:b8:a1:f2:f7:3d:53:0d:
         b9:f4:60:22:bb:7d:a8:a1:1a:25:c5:41:7f:51:7e:79:70:7a:
         8d:84:bd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----