Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a373430303a3a2f33392d3339203d3e20313439323936.roa
File:                     326130363a313238373a373430303a3a2f33392d3339203d3e20313439323936.roa (raw, json)
Hash identifier:          nqT0hFAtrNCPYZOZ9IC34Hck1WDZ24HQjSYvdfblDvw=
Subject key identifier:   58:E8:67:64:5A:F9:DA:4E:5A:C8:6B:F3:D2:A5:45:53:FC:8F:E3:D3
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       65CAA2570EDE1166A6BEE08684EED8A23E24FC76
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a373430303a3a2f33392d3339203d3e20313439323936.roa
Signing time:             Fri 16 Jun 2023 13:52:39 +0000
ROA not before:           Fri 16 Jun 2023 13:47:39 +0000
ROA not after:            Fri 14 Jun 2024 13:52:39 +0000
asID:                     149296
IP address blocks:        2a06:1287:7400::/39 maxlen: 39

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ca:a2:57:0e:de:11:66:a6:be:e0:86:84:ee:d8:a2:3e:24:fc:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun 16 13:47:39 2023 GMT
            Not After : Jun 14 13:52:39 2024 GMT
        Subject: CN=58E867645AF9DA4E5AC86BF3D2A54553FC8FE3D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:40:00:0c:81:4b:ac:ae:1d:14:67:49:ae:a7:
                    d7:9e:2d:71:f1:81:18:45:08:4e:18:8d:32:94:96:
                    6e:3d:02:ed:49:a5:18:a6:49:eb:16:df:b2:78:86:
                    5d:16:e9:c4:2f:d2:a6:97:7c:00:17:5e:41:90:24:
                    4d:35:75:40:76:b4:bc:14:bc:74:06:5d:ba:a6:3c:
                    b1:d9:19:a0:0b:ff:54:0f:d2:30:1c:dc:d2:d4:fc:
                    2e:ce:ad:17:cc:fc:ef:22:ea:98:c7:e1:0f:c9:c9:
                    5b:ef:cc:e6:4a:49:f6:c6:f5:b2:dc:f2:ea:c6:c0:
                    f4:3e:47:81:a6:46:53:1a:cc:13:b8:e5:52:69:e1:
                    cf:0d:3b:b8:51:97:9a:60:6f:2a:59:88:f8:17:89:
                    16:13:e8:2f:fe:9d:54:6f:aa:f4:d0:c5:e7:71:1f:
                    c1:5b:0f:29:af:5c:eb:3f:6d:06:71:df:19:e1:6d:
                    33:30:d7:a3:d5:a2:71:b1:e8:3a:03:49:85:80:c3:
                    1c:76:cb:d0:f8:28:5a:72:da:fc:22:24:38:b9:b7:
                    f8:49:67:ad:57:b7:d6:be:6a:c9:b8:43:58:cf:e9:
                    d6:c9:55:a7:0d:95:de:f9:c7:e8:a1:53:36:54:18:
                    f7:ca:91:c6:a9:be:1d:f9:4e:17:8d:a0:9b:9d:1e:
                    ac:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E8:67:64:5A:F9:DA:4E:5A:C8:6B:F3:D2:A5:45:53:FC:8F:E3:D3
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a373430303a3a2f33392d3339203d3e20313439323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:7400::/39

    Signature Algorithm: sha256WithRSAEncryption
         13:3d:db:fe:06:06:36:03:fb:2f:4f:31:63:a2:ec:bf:eb:f2:
         fe:27:5b:7c:f4:b8:76:61:ae:96:f0:39:26:b5:98:fe:a6:52:
         01:7c:b2:43:d4:07:cb:34:bc:12:62:ac:f1:3e:b9:46:4a:e5:
         86:cb:8b:08:ef:7f:0e:da:f2:ee:3c:68:59:6a:69:46:ec:6f:
         91:d2:99:a8:ba:fc:96:c3:13:be:82:49:7d:32:fc:69:0f:01:
         6e:c1:35:21:06:60:2e:72:91:8c:c2:ac:b4:6e:f9:4c:81:97:
         a0:b9:b6:3c:2d:96:39:7b:8f:52:41:75:a8:8b:7c:b2:72:21:
         df:2f:2f:2c:ab:21:f8:31:08:c8:ff:8c:bc:b2:7b:37:b2:8c:
         34:09:b5:ca:a5:9b:f3:da:1e:d4:19:a8:e2:7c:e2:47:80:5f:
         43:53:96:17:19:f2:fd:e6:a8:9e:a2:7b:e7:89:47:45:b7:d8:
         63:35:f4:1b:e2:b8:80:79:d6:84:79:20:7d:2c:72:fb:63:f9:
         14:a9:34:a8:6a:37:0e:c8:f6:14:f1:cd:81:11:4e:1c:b0:62:
         73:5a:d3:8b:b5:a4:6c:90:c5:e0:d9:22:32:5b:d0:65:c3:84:
         e5:90:40:67:ad:41:94:1d:f8:d3:c0:0a:8e:6c:4b:e5:2d:c1:
         bc:5c:11:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----