Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a363430303a3a2f33392d3438203d3e203633383030.roa
File:                     326130363a313238373a363430303a3a2f33392d3438203d3e203633383030.roa (raw, json)
Hash identifier:          /Q4HP8FLMpbnq2fN8whXXDCpTuf7fjla7HKB5n43fq4=
Subject key identifier:   DA:0C:FF:38:C6:18:02:D6:B4:85:72:C0:A2:B5:10:13:30:57:B1:07
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       71D7541551EFA7047399E566ED098829ABC197AC
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a363430303a3a2f33392d3438203d3e203633383030.roa
Signing time:             Fri 09 Jun 2023 14:36:30 +0000
ROA not before:           Fri 09 Jun 2023 14:31:30 +0000
ROA not after:            Fri 07 Jun 2024 14:36:30 +0000
asID:                     63800
IP address blocks:        2a06:1287:6400::/39 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d7:54:15:51:ef:a7:04:73:99:e5:66:ed:09:88:29:ab:c1:97:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun  9 14:31:30 2023 GMT
            Not After : Jun  7 14:36:30 2024 GMT
        Subject: CN=DA0CFF38C61802D6B48572C0A2B510133057B107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ed:14:38:2f:c9:cb:17:8c:e5:d0:ec:64:70:
                    8b:f8:2a:b6:7d:bf:be:54:ea:33:f7:35:9a:f0:2d:
                    20:18:07:68:a1:7d:9f:48:e2:84:90:82:0f:06:7c:
                    40:c6:27:33:1c:87:a8:73:d6:a0:e3:86:01:df:27:
                    02:9b:48:02:1f:3b:09:2c:23:c4:7f:1a:e8:14:ff:
                    66:70:ca:6e:ba:2f:75:98:d0:22:d0:cc:97:25:e5:
                    fd:cb:ab:16:df:89:71:6a:60:6b:05:5a:86:cc:35:
                    42:95:d6:e5:88:55:81:f0:f1:b3:25:88:16:72:c2:
                    90:02:36:65:30:4b:83:04:ff:3b:5c:38:05:8a:9b:
                    a1:35:c3:cf:88:b4:21:fa:0d:28:88:ba:5c:8d:38:
                    67:57:f1:fe:a6:7d:37:c4:4f:e4:e6:10:8b:36:39:
                    0d:6e:48:01:1b:85:96:d9:f3:14:95:af:61:dd:1c:
                    33:04:b0:ce:cb:b7:05:b7:6b:21:fa:39:80:65:c8:
                    04:d9:f7:0e:6a:35:92:9a:23:ba:92:dc:0c:8a:09:
                    61:cd:18:24:78:92:ca:cf:c9:d2:64:bc:c2:8a:fb:
                    1b:6c:7f:d6:35:35:3c:38:51:8e:e7:a5:43:c6:65:
                    ff:98:3f:40:a6:20:b3:d6:a0:59:73:20:3a:2c:47:
                    c9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0C:FF:38:C6:18:02:D6:B4:85:72:C0:A2:B5:10:13:30:57:B1:07
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a363430303a3a2f33392d3438203d3e203633383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:6400::/39

    Signature Algorithm: sha256WithRSAEncryption
         c3:a3:16:1c:0b:6a:56:ee:56:ab:1f:10:f0:80:23:20:7a:8e:
         cd:07:61:9e:34:b8:a7:61:2c:06:7a:b5:d2:a4:65:93:3f:40:
         c5:3d:2b:81:0f:a0:97:7f:58:cc:f6:37:41:24:67:30:0d:ce:
         d1:9b:63:f5:f9:3e:5c:6b:b1:c6:9d:e7:c8:e0:56:03:a5:fe:
         30:0c:dc:36:c5:98:df:4f:53:38:09:de:8c:28:e7:06:48:6c:
         dd:a6:c7:75:83:d8:3b:69:ce:cd:a9:13:99:d8:3e:21:6e:39:
         78:a3:97:f7:8c:cf:92:f3:df:ec:86:7e:91:9e:70:88:c7:d9:
         0a:47:bc:01:1c:fa:f1:26:ee:fb:6f:c3:eb:b8:76:ef:73:46:
         48:d7:8c:af:be:1c:9d:a4:d0:e9:46:4b:78:dc:8a:ca:39:ee:
         7b:34:aa:f4:4d:f3:7c:b8:0d:c0:93:8d:17:f2:95:48:0d:f1:
         8f:09:3c:33:0a:3b:f8:e2:6a:34:fe:7f:23:0e:79:0b:c4:f3:
         a4:77:0f:11:b2:8a:8d:46:68:70:a0:7a:1a:ca:fc:56:1f:da:
         da:e3:fc:66:72:4b:14:c1:86:1a:0d:13:a4:77:93:19:71:be:
         6e:5e:95:86:6d:c4:6c:be:1a:a9:52:11:5f:24:87:e1:13:25:
         08:58:2f:5a
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIUcddUFVHvpwRzmeVm7QmIKavBl6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA2MDkxNDMxMzBaFw0yNDA2MDcxNDM2MzBaMDMxMTAvBgNV
BAMTKERBMENGRjM4QzYxODAyRDZCNDg1NzJDMEEyQjUxMDEzMzA1N0IxMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD37RQ4L8nLF4zl0OxkcIv4KrZ9
v75U6jP3NZrwLSAYB2ihfZ9I4oSQgg8GfEDGJzMch6hz1qDjhgHfJwKbSAIfOwks
I8R/GugU/2Zwym66L3WY0CLQzJcl5f3LqxbfiXFqYGsFWobMNUKV1uWIVYHw8bMl
iBZywpACNmUwS4ME/ztcOAWKm6E1w8+ItCH6DSiIulyNOGdX8f6mfTfET+TmEIs2
OQ1uSAEbhZbZ8xSVr2HdHDMEsM7LtwW3ayH6OYBlyATZ9w5qNZKaI7qS3AyKCWHN
GCR4ksrPydJkvMKK+xtsf9Y1NTw4UY7npUPGZf+YP0CmILPWoFlzIDosR8kZAgMB
AAGjggIGMIICAjAdBgNVHQ4EFgQU2gz/OMYYAta0hXLAorUQEzBXsQcwHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wLzMyNjEzMDM2M2EzMTMyMzgzNzNhMzYzNDMwMzAzYTNhMmYz
MzM5MmQzNDM4MjAzZDNlMjAzNjMzMzgzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKgYSh2QwDQYJ
KoZIhvcNAQELBQADggEBAMOjFhwLalbuVqsfEPCAIyB6js0HYZ40uKdhLAZ6tdKk
ZZM/QMU9K4EPoJd/WMz2N0EkZzANztGbY/X5Plxrscad58jgVgOl/jAM3DbFmN9P
UzgJ3owo5wZIbN2mx3WD2Dtpzs2pE5nYPiFuOXijl/eMz5Lz3+yGfpGecIjH2QpH
vAEc+vEm7vtvw+u4du9zRkjXjK++HJ2k0OlGS3jciso57ns0qvRN83y4DcCTjRfy
lUgN8Y8JPDMKO/jiajT+fyMOeQvE86R3DxGyio1GaHCgehrK/FYf2trj/GZySxTB
hhoNE6R3kxlxvm5elYZtxGy+GqlSEV8kh+ETJQhYL1o=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:27 2023 by rpki-client on console-fra.rpki-client.org