Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a383030303a3a2f33392d3339203d3e20323032393930.roa
File:                     326130363a313238373a383030303a3a2f33392d3339203d3e20323032393930.roa (raw, json)
Hash identifier:          OVpSalrn8XfL7mqitcAmANWz3o10j4IIVv07ZyefJ7w=
Subject key identifier:   C0:BC:A7:2B:20:31:9F:08:EC:2A:B0:69:5C:3A:FC:60:ED:47:E6:AF
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       218833056E47384D2067D49D32AE3F4D93BE90C2
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a383030303a3a2f33392d3339203d3e20323032393930.roa
Signing time:             Fri 14 Apr 2023 01:48:46 +0000
ROA not before:           Fri 14 Apr 2023 01:43:46 +0000
ROA not after:            Fri 12 Apr 2024 01:48:46 +0000
asID:                     202990
IP address blocks:        2a06:1287:8000::/39 maxlen: 39

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:88:33:05:6e:47:38:4d:20:67:d4:9d:32:ae:3f:4d:93:be:90:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:43:46 2023 GMT
            Not After : Apr 12 01:48:46 2024 GMT
        Subject: CN=C0BCA72B20319F08EC2AB0695C3AFC60ED47E6AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:61:21:31:30:7c:10:9f:26:1e:4f:16:56:7d:
                    c0:09:63:26:ba:c0:65:3e:05:c7:5e:79:d9:74:4a:
                    4a:75:d3:a0:62:83:ad:bc:40:bf:b4:0e:94:4f:46:
                    2c:19:07:91:0f:f0:ef:f2:da:0d:f6:6f:4c:fa:2a:
                    e2:e8:91:aa:fd:4d:1e:b8:79:6a:f8:db:71:74:69:
                    22:fc:22:df:8e:af:5d:1e:d3:f6:46:47:a0:b1:5a:
                    4c:11:a9:e6:b5:54:dc:0a:22:47:e3:bb:f5:e4:18:
                    2e:93:f9:ab:11:a8:af:5a:73:7d:5a:27:77:d2:45:
                    b8:28:b4:76:fb:09:63:e4:49:21:19:1f:4f:30:19:
                    dc:35:c0:97:d7:a0:5c:a8:41:3f:1b:d3:a3:2e:ea:
                    fb:93:27:00:2f:60:25:4a:7f:20:70:70:59:8f:e3:
                    d5:15:a5:cc:9c:c2:02:19:cd:c8:e0:c8:02:04:f5:
                    a2:d1:57:8c:51:e7:1a:34:18:3a:a5:cc:78:22:36:
                    6b:b9:87:fd:85:fe:a3:be:2f:55:30:cf:c1:a2:2b:
                    38:18:83:9f:e6:f8:48:f3:c9:90:09:6f:20:93:37:
                    a3:4a:0e:d1:d2:7d:e0:02:8f:b1:f2:84:7a:3a:96:
                    05:5a:c2:d9:ef:ce:b8:9e:d3:13:df:6e:ee:f3:c2:
                    c8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BC:A7:2B:20:31:9F:08:EC:2A:B0:69:5C:3A:FC:60:ED:47:E6:AF
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a383030303a3a2f33392d3339203d3e20323032393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         3b:55:fc:2e:98:5f:19:44:6c:87:99:12:30:88:f0:26:7c:74:
         2a:08:78:fd:a6:aa:26:ea:04:b6:7a:5e:aa:21:79:d6:22:3c:
         03:7a:1f:ee:0c:ab:83:43:3c:de:6a:1e:c2:cb:2f:00:86:6f:
         d0:7c:30:86:f1:c1:b7:27:35:f1:7e:32:3d:73:aa:66:1c:74:
         20:fc:ee:9d:79:b5:b7:30:63:54:67:68:c6:fb:ac:9a:16:a7:
         18:fa:be:08:72:c4:3c:8e:73:4b:1f:25:ca:cb:af:a2:58:10:
         26:f3:86:9d:3e:e0:07:ad:43:61:43:9c:70:0f:3c:44:c9:b5:
         e3:c0:5f:ee:c5:19:ea:42:79:03:91:9f:8b:c0:2e:54:41:43:
         aa:7a:24:24:6b:b3:46:13:a8:f3:04:cd:86:a8:dc:b4:ba:ba:
         ad:47:37:4d:59:3f:b3:dd:ea:bc:ef:0d:d8:30:76:25:f8:ac:
         15:c7:70:cf:74:c4:ca:34:ba:8f:82:c5:18:b8:f4:ba:73:27:
         e0:39:7b:79:83:d2:d9:f1:19:2f:9f:88:ce:16:27:ee:bb:0c:
         09:03:8b:86:23:75:9b:c4:99:02:04:e9:3c:d7:d7:07:59:15:
         27:78:0f:85:f8:6c:22:05:3c:30:db:e9:9a:87:c9:5a:20:9b:
         8c:b4:21:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----