Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a393030303a3a2f33362d3336203d3e20323034373839.roa
File:                     326130363a313238373a393030303a3a2f33362d3336203d3e20323034373839.roa (raw, json)
Hash identifier:          EjhN/BB+Et7IEYKYG79WRoN5PIP2W4Py5ASjTiuotJk=
Subject key identifier:   FE:A0:F1:7C:AD:94:80:81:61:2B:1E:C9:A9:7A:1F:11:9F:D4:D5:1F
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       6876C42FD9C144FD9B94206CC9B0E38190FEED7E
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a393030303a3a2f33362d3336203d3e20323034373839.roa
Signing time:             Fri 14 Apr 2023 02:15:26 +0000
ROA not before:           Fri 14 Apr 2023 02:10:26 +0000
ROA not after:            Fri 12 Apr 2024 02:15:26 +0000
asID:                     204789
IP address blocks:        2a06:1287:9000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:76:c4:2f:d9:c1:44:fd:9b:94:20:6c:c9:b0:e3:81:90:fe:ed:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:10:26 2023 GMT
            Not After : Apr 12 02:15:26 2024 GMT
        Subject: CN=FEA0F17CAD948081612B1EC9A97A1F119FD4D51F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f0:60:12:8a:4c:0d:64:3c:ee:96:70:02:64:
                    b2:30:71:30:34:ed:5b:90:2b:7e:61:56:0e:aa:5f:
                    a1:f8:14:ca:cd:bb:70:8e:86:92:43:af:f1:8b:13:
                    13:06:3e:aa:ea:73:a0:06:85:f2:2c:3d:ba:20:41:
                    86:85:76:9c:0a:69:bd:52:4d:af:17:dc:b9:44:53:
                    f6:4f:27:02:2c:29:df:37:83:f4:56:c3:bf:59:19:
                    84:c4:48:cd:fc:e8:5d:32:40:54:00:b0:c5:e0:9d:
                    e1:c6:2a:94:5e:89:4f:c5:cb:79:9d:d5:a0:51:88:
                    88:74:eb:d2:2c:fe:db:d9:28:cb:da:4a:e6:60:91:
                    df:3a:cd:3d:51:0d:99:8e:23:8e:d9:22:a1:f7:ae:
                    42:1e:32:6d:d4:ef:4f:25:98:09:ad:4d:32:b0:db:
                    8d:10:da:36:08:ff:5a:5e:28:71:e9:c1:78:51:10:
                    b5:0d:21:b4:ca:12:8c:ea:7d:2a:e2:90:51:3b:4d:
                    06:96:f1:c3:1c:07:13:45:b5:2d:ab:c3:7e:a0:48:
                    a9:bb:17:01:a3:61:ca:e8:28:0c:13:17:e0:cc:f8:
                    73:e4:18:db:ac:d9:34:8e:37:5e:18:97:36:24:92:
                    c1:2d:9d:92:5a:96:89:f3:dc:52:73:57:65:5a:dc:
                    8a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A0:F1:7C:AD:94:80:81:61:2B:1E:C9:A9:7A:1F:11:9F:D4:D5:1F
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a393030303a3a2f33362d3336203d3e20323034373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         67:91:b6:ba:45:db:b8:9a:48:d8:e5:4f:a4:eb:d2:c0:59:b5:
         14:1b:86:31:da:21:34:83:da:e1:b2:0f:21:69:fe:6d:89:66:
         47:cd:38:4a:ef:b6:fc:31:84:05:de:59:97:93:46:37:8e:74:
         15:cd:6b:5b:e4:3a:93:46:bf:b9:7c:ab:ef:c2:74:b7:25:af:
         d9:f4:ce:59:d8:cd:9e:9f:b9:a0:a4:83:b9:89:9d:43:33:5a:
         1c:b1:96:fb:69:1f:f0:00:d8:be:c9:2d:4c:da:4f:1e:e3:a6:
         25:b6:05:66:48:48:ab:4b:11:d7:91:5a:dd:98:54:c6:16:9b:
         5f:92:c1:2a:dd:08:12:b5:6b:68:2d:76:e0:40:84:70:d4:a6:
         c7:f9:28:71:ff:ec:f4:94:03:ac:6f:1e:3f:33:eb:e5:75:28:
         d4:30:ea:84:da:d5:8b:1e:0d:e7:ab:3d:5f:43:76:9d:e8:66:
         15:41:c2:cf:27:be:e1:e1:a5:50:98:74:bb:8f:2b:5c:36:31:
         a4:a3:0e:e6:59:3a:25:d0:92:73:59:c6:f5:49:85:a0:3b:54:
         f8:23:a4:4c:96:dd:13:20:68:48:43:38:ff:77:90:d3:3b:a8:
         4c:7c:d4:34:31:00:2e:92:e4:64:b7:9b:2c:db:d2:c2:93:4c:
         a1:fd:38:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----