Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a353631313a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a313238373a353631313a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          h+5zIKDz9hW3eHc2+u3fhBiAsx7WMc+kMNH4/UzhsEE=
Subject key identifier:   E2:44:7C:6A:02:9E:62:69:56:DD:8E:77:EA:34:04:AB:4D:1A:7F:D1
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       1E8C03CBB6EF2AB36C9BCF74913BE27D644F6107
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a353631313a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Fri 09 Jun 2023 14:47:55 +0000
ROA not before:           Fri 09 Jun 2023 14:42:55 +0000
ROA not after:            Fri 07 Jun 2024 14:47:55 +0000
asID:                     151349
IP address blocks:        2a06:1287:5611::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8c:03:cb:b6:ef:2a:b3:6c:9b:cf:74:91:3b:e2:7d:64:4f:61:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun  9 14:42:55 2023 GMT
            Not After : Jun  7 14:47:55 2024 GMT
        Subject: CN=E2447C6A029E626956DD8E77EA3404AB4D1A7FD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5f:1d:a7:97:2f:3f:15:0f:65:b4:4c:1c:8f:
                    02:13:e8:7e:d2:08:ea:c5:1d:8a:59:60:1e:31:3e:
                    98:a2:b8:dd:f6:a8:b8:b8:d2:f2:77:e1:04:61:23:
                    0d:6e:90:0e:73:59:73:6d:07:8d:a1:cf:50:a4:20:
                    38:e7:e0:32:84:d9:55:ca:1b:76:41:9c:ca:66:7d:
                    e0:59:c6:9b:e6:52:03:9b:bb:f8:ea:8c:db:b5:b5:
                    fc:66:59:03:1d:fc:01:3c:15:5b:70:5c:4e:19:8f:
                    78:9c:88:79:66:1d:59:38:e3:16:92:9d:fa:e4:c1:
                    25:1a:59:13:49:b4:69:a9:cb:41:e3:c4:bd:4a:04:
                    4d:03:5b:55:31:e3:af:fc:63:83:94:7e:75:02:0a:
                    ad:6b:e2:44:68:d7:bd:87:25:30:65:df:70:a4:4b:
                    2e:b4:d9:65:8e:be:de:a6:a8:24:e0:8a:35:19:6b:
                    99:73:fa:90:4e:26:7c:df:f9:b0:31:d9:25:aa:3a:
                    2d:eb:b8:a3:39:43:87:7a:ca:4d:8c:94:d0:c5:55:
                    c0:8c:49:5a:94:fb:ce:ee:b7:ad:d8:69:48:ed:64:
                    f3:43:a1:f6:64:6c:0c:98:85:e0:af:47:3e:72:de:
                    9e:39:5d:50:d9:b2:c6:4b:ae:74:bb:9c:59:42:6f:
                    f5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:44:7C:6A:02:9E:62:69:56:DD:8E:77:EA:34:04:AB:4D:1A:7F:D1
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a353631313a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:5611::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:77:e9:4a:b0:4c:3e:37:c3:df:a6:d5:ef:c9:7f:6b:b8:b6:
         92:b2:a8:00:09:f2:1a:cd:dc:d2:c9:8d:f6:99:6b:e4:94:e7:
         8e:a3:6b:72:22:3c:fb:f9:18:55:bc:69:d7:ab:d5:ac:ce:4c:
         8f:fc:0c:7a:9b:c6:a8:7f:99:de:2b:81:3b:01:73:21:5e:01:
         f3:f6:e3:d0:38:1d:27:84:6f:68:2c:49:2e:21:d9:63:c0:02:
         b1:a3:72:bc:36:cb:72:62:89:8f:08:77:d6:9f:b9:f1:71:55:
         c0:03:0b:ce:ee:0b:ff:21:7c:1a:94:79:ff:67:c7:3b:e1:57:
         20:fc:7d:7d:00:25:9d:52:1a:87:34:7a:6c:79:f5:87:35:c0:
         91:68:8c:e7:3b:bd:ab:4e:06:1b:53:95:d9:ab:ee:e9:9f:05:
         17:2d:94:f2:cc:3e:fa:45:3a:de:97:63:d9:be:75:a3:64:e8:
         88:39:ed:08:d6:03:83:65:cf:15:8f:fc:a8:fd:a6:cc:33:dc:
         f9:a4:4e:95:77:68:10:c3:95:a9:4e:9f:6f:4e:7d:50:cc:03:
         61:57:08:88:a8:41:ea:16:ed:ea:81:4b:af:60:c3:ca:0d:71:
         07:a5:42:5c:cf:b3:fa:eb:ff:35:79:74:2f:7b:a9:ca:0a:38:
         08:34:7a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----