Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a383630303a3a2f33392d3438203d3e203631333137.roa
File:                     326130363a313238373a383630303a3a2f33392d3438203d3e203631333137.roa (raw, json)
Hash identifier:          umAyLKLUT1B/PMi9Lfk+T8V3yM0tIJdZZqgetejNFAk=
Subject key identifier:   C9:AB:16:6E:BC:25:D8:4E:FA:F8:F0:2A:41:02:7F:A5:96:B7:1E:14
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       27549AF361A7B8429485E54FFDC9D18526EC7D0E
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a383630303a3a2f33392d3438203d3e203631333137.roa
Signing time:             Fri 09 Jun 2023 14:19:27 +0000
ROA not before:           Fri 09 Jun 2023 14:14:27 +0000
ROA not after:            Fri 07 Jun 2024 14:19:27 +0000
asID:                     61317
IP address blocks:        2a06:1287:8600::/39 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:54:9a:f3:61:a7:b8:42:94:85:e5:4f:fd:c9:d1:85:26:ec:7d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun  9 14:14:27 2023 GMT
            Not After : Jun  7 14:19:27 2024 GMT
        Subject: CN=C9AB166EBC25D84EFAF8F02A41027FA596B71E14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1d:13:24:d9:11:3d:26:df:a4:c4:30:63:2e:
                    ad:0c:c1:a9:8d:13:a9:97:ce:ef:3a:c3:cc:4a:ef:
                    86:f9:ba:97:78:7a:26:af:40:6f:53:e3:bb:b6:11:
                    92:4c:d2:a8:1e:b3:f8:bb:6d:79:3b:e2:29:46:d2:
                    4b:0b:05:de:f8:3c:03:b6:74:56:b6:b9:c7:0f:71:
                    da:3d:28:45:05:9c:7a:5e:f9:ab:05:75:28:66:7b:
                    fc:f4:a7:12:b9:6b:58:4b:20:9a:c4:b5:a1:81:c8:
                    99:29:62:5d:4f:cb:82:33:32:65:a2:13:c2:92:44:
                    42:69:b9:52:7a:3b:64:32:7e:2c:83:24:be:ab:6d:
                    b9:a7:d4:74:bf:e1:fd:01:a5:a7:54:97:8c:f5:43:
                    c6:b8:41:b6:3e:d5:2c:9b:04:ac:23:f6:da:ab:a9:
                    3c:5e:b3:4b:e6:d6:aa:bf:8a:fe:25:40:a1:df:bb:
                    cf:ff:6d:be:ad:0f:65:1a:df:cd:82:d5:ae:a5:08:
                    81:80:97:c6:f2:18:65:97:5a:28:77:fb:d0:af:03:
                    52:f5:fe:f3:a2:0e:f1:b5:75:dd:26:f3:30:73:13:
                    da:f1:26:f2:15:6a:1a:42:fa:79:6b:c1:8d:b5:6e:
                    5b:4b:21:cf:0b:22:c3:40:17:cb:63:99:c0:8b:6f:
                    96:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AB:16:6E:BC:25:D8:4E:FA:F8:F0:2A:41:02:7F:A5:96:B7:1E:14
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a383630303a3a2f33392d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:8600::/39

    Signature Algorithm: sha256WithRSAEncryption
         81:c8:cf:45:e1:fb:e7:50:e6:18:6c:4c:0b:76:e6:c2:cc:71:
         ea:a3:77:99:21:95:3b:5e:a3:3b:42:40:d7:51:53:e3:09:8d:
         56:26:55:c3:7e:a6:ac:ee:f0:70:6d:a5:8c:01:3c:d0:ef:c1:
         46:a6:e2:ba:56:7a:8f:a5:23:36:d7:2e:e7:04:0a:e2:fc:6c:
         65:7e:ae:05:28:37:96:59:bc:b3:dc:6c:15:ba:66:c2:4a:27:
         4b:90:ee:68:d9:dd:3c:9c:8c:4f:f5:15:6d:e6:47:50:2c:76:
         62:15:86:a6:fe:e1:e2:64:14:be:a9:ef:ee:5b:8c:44:68:a5:
         2d:04:a0:79:bb:87:26:17:d0:1b:c3:fb:d5:7d:d7:e6:31:dc:
         2d:0a:63:d4:a6:6a:6f:f9:22:08:45:98:73:22:fa:14:0f:a2:
         95:22:14:ff:40:ba:47:f6:53:30:6f:95:71:b0:13:fa:fe:92:
         90:24:55:9e:d1:dd:9c:af:ef:b5:5a:a3:ff:28:c8:11:14:d5:
         73:50:4a:c7:d9:37:73:c0:fc:f8:9a:04:43:ee:92:bc:5c:00:
         d9:0b:69:cb:50:be:62:4f:34:aa:b5:50:dd:18:e0:4e:cd:f5:
         94:15:8d:0c:06:06:2e:a4:4a:15:50:6c:94:3b:5e:3a:65:6a:
         65:95:32:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:22 2023 by rpki-client on console-ams.rpki-client.org