Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a363230303a3a2f33392d3438203d3e203633383030.roa
File:                     326130363a313238373a363230303a3a2f33392d3438203d3e203633383030.roa (raw, json)
Hash identifier:          NcKivWcVL0b+HAV85e3Dqqw3qiq84tYozpEbiu8fy1U=
Subject key identifier:   FE:E5:E2:7B:C5:21:64:73:FE:87:26:50:FD:68:3C:7E:40:37:AC:D4
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       5C71925BD651912374DAF5CBD551FA1CB63E8EB8
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a363230303a3a2f33392d3438203d3e203633383030.roa
Signing time:             Fri 09 Jun 2023 14:37:07 +0000
ROA not before:           Fri 09 Jun 2023 14:32:07 +0000
ROA not after:            Fri 07 Jun 2024 14:37:07 +0000
asID:                     63800
IP address blocks:        2a06:1287:6200::/39 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:71:92:5b:d6:51:91:23:74:da:f5:cb:d5:51:fa:1c:b6:3e:8e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun  9 14:32:07 2023 GMT
            Not After : Jun  7 14:37:07 2024 GMT
        Subject: CN=FEE5E27BC5216473FE872650FD683C7E4037ACD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c4:97:df:91:8d:91:07:5d:37:26:43:a3:c6:
                    bf:f1:03:55:a3:af:e9:8d:64:2f:fd:ea:fe:6d:f3:
                    22:bb:28:dd:71:1a:21:87:3d:4e:67:d0:97:0d:07:
                    b3:f3:ee:93:e9:7b:04:df:1f:d8:bb:39:fa:e5:84:
                    52:02:bd:5f:2e:51:40:64:ef:d3:2e:00:c2:c7:c6:
                    d5:0a:c4:4b:36:c5:e4:90:55:af:63:97:16:14:9c:
                    e9:2a:79:36:a9:dd:57:73:ac:68:5e:48:68:a5:f0:
                    c1:86:dd:38:01:f9:2d:6c:9f:74:dd:c7:a2:69:0d:
                    f8:24:d2:c2:d1:3a:e9:c7:ab:9d:0e:ed:e9:a2:8e:
                    8f:ad:f6:1e:ce:72:72:de:bf:82:3d:da:a9:b1:5f:
                    dc:35:65:51:b4:c4:82:5c:e7:9d:a5:41:1d:6b:18:
                    8b:16:30:7d:62:ff:42:f1:91:b2:7c:e4:91:90:8f:
                    b1:14:32:30:53:37:69:7f:c0:97:91:51:96:9d:32:
                    39:5a:13:4a:7e:bf:fa:b8:ee:a9:fd:46:7b:5e:fa:
                    89:3c:a4:cb:db:cf:91:08:f9:fa:cd:3e:f8:3e:c1:
                    cb:7b:18:a7:6c:53:bc:ff:db:ee:94:ae:8a:87:d4:
                    47:3a:1b:e6:28:e4:93:30:7c:a3:c5:f7:ba:9c:f4:
                    07:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E5:E2:7B:C5:21:64:73:FE:87:26:50:FD:68:3C:7E:40:37:AC:D4
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a363230303a3a2f33392d3438203d3e203633383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:6200::/39

    Signature Algorithm: sha256WithRSAEncryption
         47:f6:0a:d9:5b:e0:bf:d2:77:9d:e1:d6:1a:cd:d4:b5:58:7e:
         9a:58:a9:06:5d:b2:3a:5b:cd:a7:51:2a:7f:e6:e3:95:3a:fb:
         26:fd:be:4f:ca:38:92:1c:8f:e0:35:7f:bd:13:26:b6:ea:b2:
         b2:07:75:a5:41:f2:2b:04:bb:81:a9:8c:b5:fd:1d:55:10:5d:
         03:ee:74:1c:13:b8:5b:e7:16:b1:31:b5:67:79:d0:72:50:2d:
         d2:16:9b:92:f9:d5:38:bd:d0:8c:cd:6c:74:b4:4f:95:81:a7:
         6a:df:80:f5:95:28:63:85:c7:0b:52:5b:1a:cb:94:e4:87:38:
         d3:ee:7b:9e:f7:58:fc:08:ab:77:e7:1e:49:c0:18:60:56:e4:
         35:74:e1:25:9c:cc:62:e1:b5:66:19:e4:1d:11:0e:bc:ee:4e:
         7e:da:67:52:d2:08:58:b1:cb:80:d6:03:e6:c8:4f:89:9e:0a:
         4c:36:14:31:76:f3:98:e5:a2:da:93:ce:e3:7f:17:ef:f7:39:
         fc:e0:bc:f6:dd:a7:b6:2a:8b:52:58:96:7a:2b:22:6a:aa:fb:
         f9:40:be:09:04:45:5f:90:d1:7c:dd:d7:4f:86:80:53:45:d0:
         aa:f8:e3:c3:6f:f4:71:b9:37:bb:02:c6:be:a1:11:83:b2:39:
         c1:e9:8b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:27 2023 by rpki-client on console-fra.rpki-client.org