Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a363430303a3a2f33392d3438203d3e20313439323936.roa
File:                     326130363a313238373a363430303a3a2f33392d3438203d3e20313439323936.roa (raw, json)
Hash identifier:          Nru9jLqNp4+MyR7YRwHYmorlyo/2qLMIK2ibKPAyugU=
Subject key identifier:   9C:21:6F:12:76:01:25:6E:58:15:1E:F6:E6:62:6D:68:30:95:73:A3
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       44A2150E6EED2BB28DE31FB429944FC710263A2E
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a363430303a3a2f33392d3438203d3e20313439323936.roa
Signing time:             Fri 16 Jun 2023 11:58:22 +0000
ROA not before:           Fri 16 Jun 2023 11:53:22 +0000
ROA not after:            Fri 14 Jun 2024 11:58:22 +0000
asID:                     149296
IP address blocks:        2a06:1287:6400::/39 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a2:15:0e:6e:ed:2b:b2:8d:e3:1f:b4:29:94:4f:c7:10:26:3a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun 16 11:53:22 2023 GMT
            Not After : Jun 14 11:58:22 2024 GMT
        Subject: CN=9C216F127601256E58151EF6E6626D68309573A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8e:38:8c:fc:26:7b:7d:20:d3:14:7e:a7:45:
                    7f:2b:fa:dd:55:37:33:e1:6a:0f:84:49:6e:fd:12:
                    b4:3f:2a:ce:fc:69:db:99:a6:69:f3:95:e2:c7:00:
                    ea:f0:da:6f:00:ba:59:7c:ff:21:eb:07:22:cd:2a:
                    67:45:ca:5e:f6:9b:23:a6:b8:2e:1c:8c:1f:45:cf:
                    e7:3b:3e:39:96:d0:30:bd:9b:b0:72:61:ea:54:1b:
                    ee:f9:a4:46:95:53:7f:07:12:f5:53:9d:d0:85:a9:
                    a3:e2:bb:25:14:05:94:03:2b:d9:01:bf:a7:b4:f6:
                    36:2d:09:78:2b:e9:49:3a:4e:69:02:0f:4c:df:4b:
                    6a:b5:4e:f4:d0:57:7b:30:42:c4:b8:cf:5f:ed:55:
                    a2:fe:b7:3e:74:8c:93:0f:8c:9e:3e:b8:15:d5:7b:
                    d8:84:92:82:ce:08:01:1c:b6:7e:b8:b4:fd:c8:9f:
                    ef:b8:43:26:3b:05:b0:0c:20:ef:3d:a8:53:8d:b9:
                    16:7d:1f:f8:29:44:12:ee:95:7a:6b:49:d6:5e:02:
                    66:7c:85:b3:56:97:e4:02:2c:e6:81:e6:f4:bd:1b:
                    36:5a:b1:67:45:aa:60:d9:c9:56:9a:1e:b2:25:ea:
                    c6:24:9c:c3:41:9d:9e:37:21:66:a2:be:bf:0f:4b:
                    9e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:21:6F:12:76:01:25:6E:58:15:1E:F6:E6:62:6D:68:30:95:73:A3
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a363430303a3a2f33392d3438203d3e20313439323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:6400::/39

    Signature Algorithm: sha256WithRSAEncryption
         8f:a8:da:1c:99:4c:93:ba:d4:02:a3:da:63:01:9a:87:ba:cf:
         dc:73:7c:61:4b:2a:ba:0f:70:52:18:5a:e1:ae:dc:8f:c3:c6:
         6f:ec:37:d3:ca:04:e9:d0:02:04:a7:8a:91:52:63:81:ce:bd:
         c4:cf:62:b0:48:73:b7:44:b2:77:d5:15:dc:6d:9d:47:9d:e5:
         73:b2:ff:a2:f8:a9:fc:9d:7a:57:b3:bb:bc:29:6b:b2:82:c7:
         47:cc:2f:03:28:c8:88:84:be:d5:ec:4d:0f:44:f1:d8:cd:b9:
         82:00:a2:4b:c4:c6:5a:24:b5:93:14:ee:bf:f3:04:72:98:9e:
         ac:ec:10:f6:f2:17:6d:ec:37:57:6a:31:7f:c4:09:e5:24:90:
         13:2d:e5:a6:07:d1:3e:ee:80:03:79:c9:88:3f:7b:21:2e:85:
         95:aa:6a:70:6c:16:24:59:97:4e:61:bf:a0:76:a8:21:69:12:
         51:73:31:14:58:98:b1:c9:49:17:62:9e:b7:ea:de:e4:b8:40:
         0c:59:03:2b:30:0d:5a:eb:1f:aa:8a:87:30:56:c0:57:13:af:
         b4:0c:9f:98:cb:9d:12:9d:10:c5:31:32:13:7e:e0:fe:30:a2:
         17:78:b8:a3:4c:17:d5:2c:a5:77:df:61:dc:b8:43:01:a9:67:
         cc:ce:60:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----