Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a383430303a3a2f33392d3438203d3e20323131333830.roa
File:                     326130363a313238373a383430303a3a2f33392d3438203d3e20323131333830.roa (raw, json)
Hash identifier:          flvmjftgtXguWoCfeJhXH9XO8/p6w4tWJwJAw6D/CKY=
Subject key identifier:   20:E3:84:5C:21:F6:6C:1D:E5:D6:0E:F8:3E:87:ED:17:2E:08:7E:9D
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       2F0ACE06C3432BC790917DFBE7E4F7BE963CEA91
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a383430303a3a2f33392d3438203d3e20323131333830.roa
Signing time:             Fri 14 Apr 2023 01:57:57 +0000
ROA not before:           Fri 14 Apr 2023 01:52:57 +0000
ROA not after:            Fri 12 Apr 2024 01:57:57 +0000
asID:                     211380
IP address blocks:        2a06:1287:8400::/39 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0a:ce:06:c3:43:2b:c7:90:91:7d:fb:e7:e4:f7:be:96:3c:ea:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:52:57 2023 GMT
            Not After : Apr 12 01:57:57 2024 GMT
        Subject: CN=20E3845C21F66C1DE5D60EF83E87ED172E087E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:28:9f:0c:6d:65:10:f1:28:3d:af:95:63:bc:
                    4c:ca:c1:53:82:84:d9:70:8c:fd:ff:82:af:be:c7:
                    f3:4e:a6:c2:1b:73:07:42:01:55:e1:0d:de:4c:a8:
                    1e:e3:1b:db:ee:a0:f7:d7:5c:ee:43:b2:bb:a6:c2:
                    4b:37:19:60:c9:ce:5a:a1:dd:6f:04:ae:30:85:de:
                    ef:d0:18:35:a2:7f:21:8c:4f:e5:42:ff:30:80:e1:
                    43:53:1d:15:8d:2b:5d:41:cc:6e:6e:9d:14:5f:99:
                    ff:21:a3:4a:a4:a1:20:be:77:b3:0d:d4:3f:d7:2f:
                    38:73:26:17:a1:c8:15:b9:49:a1:78:6f:dc:b5:b7:
                    56:46:c5:df:d7:ba:e6:ca:04:90:cd:d2:5f:a8:64:
                    de:0a:42:f0:54:25:0f:9d:87:5b:9a:4e:99:e5:08:
                    8f:43:43:e4:5a:3a:2d:19:8a:bf:01:69:5b:5b:bd:
                    48:c3:eb:d0:9c:d4:15:44:8f:37:cc:0e:d3:75:b2:
                    e2:a1:0b:aa:25:80:9d:df:7c:2c:aa:33:4d:a0:c3:
                    e4:92:20:fd:05:e5:fa:8e:3e:fa:91:a7:10:d8:4d:
                    d3:6c:d1:d4:a2:de:02:59:ec:5b:89:91:f4:f9:72:
                    e3:e2:11:1c:8b:71:4e:33:6e:3c:a4:c2:a4:aa:06:
                    7e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E3:84:5C:21:F6:6C:1D:E5:D6:0E:F8:3E:87:ED:17:2E:08:7E:9D
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a383430303a3a2f33392d3438203d3e20323131333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:8400::/39

    Signature Algorithm: sha256WithRSAEncryption
         c7:84:33:82:43:35:39:1a:db:c6:ff:5e:bc:88:11:0d:f4:95:
         c0:f2:99:fb:5f:3b:1f:d1:53:12:a4:1c:84:9b:d5:1d:3c:96:
         3c:4b:b5:2e:da:c2:ae:ce:ef:6c:d7:1f:07:02:24:84:5d:51:
         dc:74:65:15:04:fb:aa:2d:66:ee:d8:36:1b:2d:7c:74:3f:4e:
         c9:4d:a2:5c:15:68:ab:75:99:f6:04:b6:60:b6:21:3b:4c:d1:
         1d:81:62:b8:a7:62:b2:69:5d:f4:90:5a:66:84:38:9e:d2:71:
         0f:d3:ed:51:9d:37:13:b0:15:c8:17:bc:57:b8:d6:9b:1d:e7:
         58:2c:28:b5:6b:c3:f6:50:01:a4:8e:51:89:5d:54:a1:b6:ec:
         51:7e:1f:65:26:20:82:e5:8c:9f:91:02:03:49:c6:86:ea:b6:
         4f:11:6c:5a:c5:ce:7f:d2:88:8f:29:12:30:a5:8b:23:15:db:
         3b:44:c4:9f:b4:66:59:b9:09:0b:fe:96:d8:1c:bd:62:72:73:
         82:97:bb:7d:b0:72:be:53:7c:01:34:68:ab:49:ae:d5:ee:f3:
         94:7e:6f:1a:74:c1:a5:c7:24:5b:4b:ea:8d:b7:7e:ee:e8:5e:
         86:6c:5b:f7:4e:e0:93:d8:80:0e:71:38:30:1d:8f:8a:7f:59:
         f5:e2:02:d9
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIULwrOBsNDK8eQkX375+T3vpY86pEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA0MTQwMTUyNTdaFw0yNDA0MTIwMTU3NTdaMDMxMTAvBgNV
BAMTKDIwRTM4NDVDMjFGNjZDMURFNUQ2MEVGODNFODdFRDE3MkUwODdFOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPKJ8MbWUQ8Sg9r5VjvEzKwVOC
hNlwjP3/gq++x/NOpsIbcwdCAVXhDd5MqB7jG9vuoPfXXO5Dsrumwks3GWDJzlqh
3W8ErjCF3u/QGDWifyGMT+VC/zCA4UNTHRWNK11BzG5unRRfmf8ho0qkoSC+d7MN
1D/XLzhzJhehyBW5SaF4b9y1t1ZGxd/XuubKBJDN0l+oZN4KQvBUJQ+dh1uaTpnl
CI9DQ+RaOi0Zir8BaVtbvUjD69Cc1BVEjzfMDtN1suKhC6olgJ3ffCyqM02gw+SS
IP0F5fqOPvqRpxDYTdNs0dSi3gJZ7FuJkfT5cuPiERyLcU4zbjykwqSqBn5tAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUIOOEXCH2bB3l1g74PoftFy4Ifp0wHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
gYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVMyMDU0MzIvMC8zMjYxMzAzNjNhMzEzMjM4MzczYTM4MzQzMDMwM2EzYTJm
MzMzOTJkMzQzODIwM2QzZTIwMzIzMTMxMzMzODMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKgYSh4Qw
DQYJKoZIhvcNAQELBQADggEBAMeEM4JDNTka28b/XryIEQ30lcDymftfOx/RUxKk
HISb1R08ljxLtS7awq7O72zXHwcCJIRdUdx0ZRUE+6otZu7YNhstfHQ/TslNolwV
aKt1mfYEtmC2ITtM0R2BYrinYrJpXfSQWmaEOJ7ScQ/T7VGdNxOwFcgXvFe41psd
51gsKLVrw/ZQAaSOUYldVKG27FF+H2UmIILljJ+RAgNJxobqtk8RbFrFzn/SiI8p
EjCliyMV2ztExJ+0Zlm5CQv+ltgcvWJyc4KXu32wcr5TfAE0aKtJrtXu85R+bxp0
waXHJFtL6o23fu7oXoZsW/dO4JPYgA5xODAdj4p/WfXiAtk=
-----END CERTIFICATE-----