Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a373230303a3a2f33392d3438203d3e20323131363034.roa
File:                     326130363a313238373a373230303a3a2f33392d3438203d3e20323131363034.roa (raw, json)
Hash identifier:          H3ZRj3XB0RuybU6sTtaJsyF5KjTqEa7TAi8iIftGQuo=
Subject key identifier:   AF:8A:45:3D:5F:E7:86:B6:AB:4F:E0:19:C6:11:0C:BD:68:13:79:1F
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       7A1A983299627196210620864EFFB7890A564D37
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a373230303a3a2f33392d3438203d3e20323131363034.roa
Signing time:             Sat 10 Jun 2023 00:05:35 +0000
ROA not before:           Sat 10 Jun 2023 00:00:35 +0000
ROA not after:            Sat 08 Jun 2024 00:05:35 +0000
asID:                     211604
IP address blocks:        2a06:1287:7200::/39 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1a:98:32:99:62:71:96:21:06:20:86:4e:ff:b7:89:0a:56:4d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun 10 00:00:35 2023 GMT
            Not After : Jun  8 00:05:35 2024 GMT
        Subject: CN=AF8A453D5FE786B6AB4FE019C6110CBD6813791F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:1c:21:e9:61:d9:57:b1:16:62:cf:a2:15:
                    63:27:e4:6e:81:6b:9f:22:7d:a5:07:9e:f1:61:6f:
                    74:ea:1d:68:82:6d:81:9e:1b:8e:70:69:c3:fb:e9:
                    70:9a:a4:fb:c4:8b:9a:6d:6b:5a:09:47:68:15:ca:
                    47:e7:61:4b:1a:9c:af:60:7e:ad:8b:e8:2d:6f:5e:
                    be:43:da:65:13:27:c2:b2:cb:32:68:80:ab:d9:34:
                    d0:f8:0d:78:f5:c0:c4:de:77:6e:11:6e:f9:ca:95:
                    d9:51:ea:19:20:0d:73:73:aa:5f:3e:a9:06:98:14:
                    28:01:2d:48:1e:2a:98:82:eb:61:de:ea:0e:53:c8:
                    b2:bd:21:e7:eb:ee:08:ba:bb:53:98:33:09:57:08:
                    8c:8b:3e:d8:83:10:9f:32:97:86:6d:b6:20:4f:9c:
                    d1:ea:1e:e6:6e:dd:73:6e:95:88:0c:99:36:cc:27:
                    31:a2:56:45:07:ff:25:ae:3e:7b:de:47:fb:7e:96:
                    78:28:1d:82:20:dc:7c:d0:0a:ae:97:95:aa:69:b6:
                    ef:3a:46:c5:aa:a2:3d:cd:f1:49:a7:ad:76:38:b4:
                    67:95:76:77:7b:05:61:df:15:d0:e3:ed:e6:91:9a:
                    90:ae:d2:ce:4d:a9:8c:11:79:7b:ef:a5:9e:07:fb:
                    84:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8A:45:3D:5F:E7:86:B6:AB:4F:E0:19:C6:11:0C:BD:68:13:79:1F
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a373230303a3a2f33392d3438203d3e20323131363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:7200::/39

    Signature Algorithm: sha256WithRSAEncryption
         50:fb:b5:cd:52:1b:4d:c9:e8:01:31:c1:6b:55:96:eb:05:37:
         dd:c5:1b:bc:8e:60:ef:fb:f7:7c:5c:1b:bc:bb:7e:c5:9e:82:
         37:69:52:7a:73:c0:e3:a6:9a:4f:9b:86:df:4a:50:c4:53:f9:
         83:ce:a4:96:28:56:fd:ee:3f:63:fe:1e:fe:50:86:28:a1:57:
         d8:aa:05:fb:69:05:93:d0:85:11:ee:b5:e0:69:26:28:91:b2:
         62:4c:31:d9:6f:a1:b4:d9:32:27:2c:49:9f:b9:37:06:73:54:
         a3:68:6e:87:f4:06:94:3e:17:c5:30:e5:46:3b:c2:9b:1e:07:
         94:88:d8:0e:2f:e7:b0:2a:67:54:c0:e3:c6:70:ac:58:4b:df:
         51:50:5b:05:da:5f:a5:6a:63:ee:01:87:8b:02:ef:47:1f:42:
         e1:72:bd:8d:fc:c8:3b:3b:1c:8b:2b:a7:c1:96:27:70:33:e5:
         eb:a7:57:f8:45:c7:90:09:1c:65:21:9e:05:8e:19:fd:b7:b5:
         c3:22:31:c4:ad:98:9b:5f:15:1a:ab:fe:c6:f0:47:e6:4e:ba:
         5f:48:c8:78:ab:bf:cf:5f:89:c0:b5:cc:69:ee:3f:d0:1f:e5:
         b6:ec:99:a7:f3:0a:7d:f9:ab:33:32:e8:e9:76:08:95:4b:11:
         84:3d:36:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----