Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a353630333a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a313238373a353630333a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          rN0O6rEr9QygdO2vNA8eMajNMNTd6IRxnSND+RsOc4I=
Subject key identifier:   5B:EB:AE:23:BD:76:AA:71:7D:FC:A9:E5:FC:50:56:B6:3C:93:30:16
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       7CE2DA2DAA59B5BE3BE1F8111F42F2D5042A62BF
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a353630333a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Fri 09 Jun 2023 14:47:41 +0000
ROA not before:           Fri 09 Jun 2023 14:42:41 +0000
ROA not after:            Fri 07 Jun 2024 14:47:41 +0000
asID:                     151349
IP address blocks:        2a06:1287:5603::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e2:da:2d:aa:59:b5:be:3b:e1:f8:11:1f:42:f2:d5:04:2a:62:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun  9 14:42:41 2023 GMT
            Not After : Jun  7 14:47:41 2024 GMT
        Subject: CN=5BEBAE23BD76AA717DFCA9E5FC5056B63C933016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d8:a3:c7:e4:e6:51:61:9a:44:73:48:ef:d5:
                    2b:b8:4b:9a:76:2f:8a:2e:d9:42:a8:24:bf:4d:bc:
                    4f:e2:9c:af:06:e3:b4:66:fd:61:ef:83:21:59:ea:
                    92:62:3b:06:33:a5:b6:b6:3e:9d:65:d9:6b:bd:2f:
                    d4:96:d5:7f:5a:d2:a9:b1:c5:e2:bb:7c:56:98:18:
                    34:af:ac:64:43:79:6c:c0:f4:56:50:4c:59:c1:1c:
                    2e:7d:7b:70:a0:c2:bb:a3:58:e9:7e:dd:59:42:34:
                    59:14:54:20:41:69:1d:c3:66:d4:92:6f:b1:0c:bb:
                    9f:72:f4:53:02:78:89:6b:7a:4f:8a:13:74:aa:aa:
                    e5:76:09:23:7c:d8:7f:29:0f:f1:7a:eb:26:30:04:
                    fd:18:79:7b:3e:11:6a:68:46:02:2f:93:f4:80:a8:
                    50:5e:70:e4:0d:c8:cb:f4:e8:32:57:38:3b:c1:49:
                    7a:de:19:7c:54:02:01:94:13:e0:55:4d:43:60:47:
                    48:e1:f2:01:be:6e:0a:d3:24:83:d2:e3:1b:90:30:
                    8d:29:72:7a:4b:30:49:68:3e:c6:0b:f5:dd:05:31:
                    e6:60:77:cb:1f:7d:4e:e6:8a:fb:07:ac:8e:44:9b:
                    db:08:d2:6a:be:21:07:dd:c9:a6:9c:8d:f7:79:87:
                    f9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EB:AE:23:BD:76:AA:71:7D:FC:A9:E5:FC:50:56:B6:3C:93:30:16
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a353630333a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:5603::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:40:6c:39:df:5f:99:93:03:63:5f:19:10:70:08:93:bd:9d:
         dd:b5:b4:ad:f4:b8:30:a0:c7:d6:f6:6a:11:fd:4c:0c:1d:77:
         c8:a5:cd:3d:c4:42:5b:1a:71:3a:bd:5a:d7:58:3b:2a:05:57:
         cb:ca:9c:8f:93:b3:50:a7:24:7f:f8:10:4a:ab:ca:7a:2a:45:
         d4:1d:40:5f:9e:0a:6f:a5:d7:5c:83:dd:3f:cb:ad:6f:90:1e:
         13:85:27:5d:c4:6b:7b:f6:2d:c2:53:c8:e9:c9:8b:30:33:ed:
         f6:d8:c9:58:0f:31:7e:f0:40:ed:bf:b4:85:3b:0a:9d:9f:a7:
         de:45:51:d1:48:04:5e:15:c5:35:eb:d5:44:44:fb:99:1e:f0:
         b4:a7:b5:4f:33:9a:86:74:72:01:66:86:40:fe:20:cd:e4:3f:
         a0:d9:18:07:49:07:e0:f2:11:0f:19:80:1d:7e:ef:c9:89:53:
         75:6d:8a:7a:ea:ed:8b:36:2a:64:ad:35:95:90:93:fd:e0:8d:
         49:37:99:a4:87:bb:e6:60:6d:01:85:3c:49:39:94:a5:9b:3a:
         9b:17:64:93:fb:5a:ee:a8:c2:77:ca:47:76:1f:49:a5:24:79:
         be:6d:ba:6e:d1:3d:0b:99:cb:bb:df:42:78:af:47:72:35:25:
         33:ac:33:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----