Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a353631333a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a313238373a353631333a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          GUrOQMfF2IlQPQo3u9Lzyrtftd5NBkb4Um1xhB7lQic=
Subject key identifier:   43:47:F7:E5:D9:30:9F:94:8F:F0:7C:1E:4C:8B:26:52:B6:5F:0E:39
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       45EA125FB677EB2591F26D51E2A9DB2C56BD01D6
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a353631333a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Fri 09 Jun 2023 14:48:15 +0000
ROA not before:           Fri 09 Jun 2023 14:43:15 +0000
ROA not after:            Fri 07 Jun 2024 14:48:15 +0000
asID:                     151349
IP address blocks:        2a06:1287:5613::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ea:12:5f:b6:77:eb:25:91:f2:6d:51:e2:a9:db:2c:56:bd:01:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun  9 14:43:15 2023 GMT
            Not After : Jun  7 14:48:15 2024 GMT
        Subject: CN=4347F7E5D9309F948FF07C1E4C8B2652B65F0E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:05:1b:53:f5:23:af:3c:95:5a:52:40:d5:65:
                    0d:d5:6b:18:b0:ca:24:91:d1:da:26:a0:b3:58:a4:
                    05:e8:1b:b6:01:0d:cf:b8:0f:51:a9:e1:3c:84:d0:
                    60:6e:ef:81:d2:21:75:b7:c7:87:f3:8a:1b:f5:3a:
                    b6:f9:42:c7:0b:33:a9:80:eb:e3:b8:96:89:88:c9:
                    bb:bc:f6:84:5a:72:8e:4c:1f:4c:13:f3:b3:79:6e:
                    f9:b4:c1:75:05:c9:56:94:97:e0:b3:3a:0a:1b:df:
                    1f:ad:a4:5d:4d:c0:f4:76:c1:2e:50:b6:bb:9e:2c:
                    64:ab:af:0b:cc:02:e2:a0:4a:86:9e:43:b1:15:bf:
                    7a:b7:93:76:8b:e5:d5:87:8d:97:98:5f:79:b3:f3:
                    45:64:c4:08:a0:d2:2d:d4:77:8d:94:2f:68:ac:8d:
                    66:d7:92:ab:c1:99:65:fd:5f:46:f5:48:94:86:81:
                    39:46:62:55:2b:ac:01:dc:4f:01:18:c3:aa:97:c2:
                    47:80:cc:3b:9d:2c:da:93:20:38:58:20:fa:c0:24:
                    a3:41:d3:67:7e:25:68:b4:a7:74:21:5e:1f:78:d3:
                    32:fa:cb:18:4a:70:eb:ab:79:dd:59:19:d2:bc:34:
                    85:97:47:bd:96:f8:d0:c0:6d:9c:f1:26:a2:ba:c7:
                    ac:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:47:F7:E5:D9:30:9F:94:8F:F0:7C:1E:4C:8B:26:52:B6:5F:0E:39
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a353631333a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:5613::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:3f:60:eb:41:f1:b3:b6:39:6d:e0:80:84:4d:46:ac:3f:18:
         12:d5:1a:ff:a1:3b:3f:b3:fd:45:cd:bf:f5:d7:82:a0:99:66:
         f4:ee:28:b8:6e:4e:67:d1:6f:40:d3:4d:c7:ad:15:89:99:da:
         84:4f:71:4f:1c:ac:c1:24:cc:a3:f4:95:29:54:61:8b:2b:c4:
         11:4e:86:a8:27:ec:a6:0e:3f:8a:04:33:89:d9:64:ff:4f:07:
         af:b4:86:f3:0e:17:ba:4a:de:8e:09:5e:73:52:45:f5:0c:a3:
         40:ac:43:04:58:92:99:fa:5b:c2:0e:1a:23:05:86:c8:af:6d:
         e3:3f:02:39:a6:2a:6b:c1:ff:9c:f1:f7:17:42:91:54:28:e4:
         70:42:58:76:9a:3a:1a:76:be:02:a8:54:02:b6:6d:9a:4a:ec:
         bb:e8:d9:c8:d0:87:91:60:0b:bd:d9:11:94:7c:a2:7c:6b:ef:
         f6:2a:fd:4d:22:db:f7:bc:d5:35:0f:89:6d:dd:ed:73:21:c6:
         ac:54:f6:a0:11:c6:77:9b:b6:ad:d4:f4:bc:6e:0b:f3:90:84:
         b9:8a:a2:55:34:d3:89:fd:6c:91:de:5e:f5:7a:57:4d:a9:0c:
         8f:62:6e:b2:88:24:60:41:8d:a8:68:95:63:5c:ba:67:34:d5:
         0b:47:97:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----