Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a613430303a3a2f33382d3438203d3e20313938343830.roa
File:                     326130363a313238373a613430303a3a2f33382d3438203d3e20313938343830.roa (raw, json)
Hash identifier:          zN/mq+28yhclbeFNTywomBVSWtwa+OptDZO+QZ4Cumc=
Subject key identifier:   9F:FC:79:20:8E:38:49:8F:C0:3F:A7:3F:A8:9B:AD:26:A5:50:CF:3B
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       7DAF99E38B4289556668921C2E890BFCB427C336
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a613430303a3a2f33382d3438203d3e20313938343830.roa
Signing time:             Sat 17 Jun 2023 22:34:17 +0000
ROA not before:           Sat 17 Jun 2023 22:29:17 +0000
ROA not after:            Sat 15 Jun 2024 22:34:17 +0000
asID:                     198480
IP address blocks:        2a06:1287:a400::/38 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:af:99:e3:8b:42:89:55:66:68:92:1c:2e:89:0b:fc:b4:27:c3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun 17 22:29:17 2023 GMT
            Not After : Jun 15 22:34:17 2024 GMT
        Subject: CN=9FFC79208E38498FC03FA73FA89BAD26A550CF3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7f:ae:8b:7d:a5:e2:ce:04:94:ee:ba:a1:71:
                    fa:8a:13:73:01:85:e1:bf:11:b9:56:71:be:b3:d3:
                    b1:32:fc:15:8f:7b:67:a6:09:ae:cd:05:2d:64:03:
                    9f:a2:ea:d0:e9:e3:49:50:e0:3c:73:d2:7e:2c:b2:
                    a1:06:4b:3e:d1:68:5c:dc:ff:ae:57:98:29:53:06:
                    39:75:5a:1f:f5:4e:e7:a4:3d:34:a9:ba:5c:f9:2d:
                    62:cf:fa:5a:c8:63:8a:ad:35:0d:95:99:14:22:32:
                    c4:97:0c:01:cd:62:85:20:fc:ee:2d:37:db:5e:35:
                    ae:3b:fc:ef:03:89:ff:58:04:9a:d3:79:c2:99:29:
                    24:c3:90:c2:a8:cb:b4:68:9e:c7:88:2d:3f:75:e8:
                    d3:6b:5f:f5:a4:7a:2d:df:11:a4:1a:5e:74:88:e2:
                    52:56:a3:86:59:5a:63:10:13:91:c8:17:f9:9d:85:
                    e0:85:1e:07:43:55:74:e6:e4:eb:91:06:eb:35:b6:
                    d9:33:6e:3d:62:0a:ce:e5:13:95:3c:80:2f:77:e5:
                    82:1e:2d:91:5e:26:30:b1:8f:82:11:ab:96:22:5f:
                    c0:a2:ab:3c:97:5c:8c:ba:87:73:4a:9b:fb:75:98:
                    1a:a3:98:19:d6:9f:25:ab:b1:1e:dd:0c:24:88:66:
                    9b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FC:79:20:8E:38:49:8F:C0:3F:A7:3F:A8:9B:AD:26:A5:50:CF:3B
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a613430303a3a2f33382d3438203d3e20313938343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:a400::/38

    Signature Algorithm: sha256WithRSAEncryption
         63:b5:a8:41:f4:8f:38:b1:63:d1:5e:22:e9:f6:98:e1:42:5b:
         d0:97:b2:b2:f0:bd:8b:8b:d4:09:20:c0:48:f8:1e:83:96:46:
         ad:1b:14:33:45:28:94:94:b5:93:fb:97:1f:e8:ab:2b:ff:7c:
         8f:17:f9:1b:1f:6f:49:64:57:4c:38:76:a4:f2:7c:fb:30:ff:
         21:0f:1b:25:b1:95:2f:2a:cf:78:97:d0:7b:9d:1f:c0:01:55:
         36:89:91:e3:30:44:81:1e:0e:b0:b5:2b:ef:01:ad:96:f6:4c:
         43:29:1a:2b:08:a3:48:33:b4:1f:6a:cf:4a:9d:9f:0e:72:d3:
         83:94:7b:4d:57:89:30:c6:99:20:75:8c:63:30:e8:92:b6:31:
         ba:af:9f:c1:c7:55:c5:af:be:1a:db:71:db:89:aa:06:be:4e:
         37:0a:63:76:8b:83:e8:53:57:06:07:a6:4e:0a:b3:16:ae:6d:
         82:6f:f7:95:13:6b:d4:af:7d:6d:fc:be:cd:92:b0:68:05:98:
         ff:83:75:03:f1:52:a4:26:14:0c:ca:40:4f:30:c2:51:dc:b8:
         30:d4:ca:19:fb:c2:54:2a:3c:27:da:79:42:4d:59:81:89:b2:
         52:65:16:e5:84:cf:49:a0:2a:e4:e9:7b:3f:eb:ab:15:ef:62:
         dd:e0:68:63
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUfa+Z44tCiVVmaJIcLokL/LQnwzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA2MTcyMjI5MTdaFw0yNDA2MTUyMjM0MTdaMDMxMTAvBgNV
BAMTKDlGRkM3OTIwOEUzODQ5OEZDMDNGQTczRkE4OUJBRDI2QTU1MENGM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUf66LfaXizgSU7rqhcfqKE3MB
heG/EblWcb6z07Ey/BWPe2emCa7NBS1kA5+i6tDp40lQ4Dxz0n4ssqEGSz7RaFzc
/65XmClTBjl1Wh/1TuekPTSpulz5LWLP+lrIY4qtNQ2VmRQiMsSXDAHNYoUg/O4t
N9teNa47/O8Dif9YBJrTecKZKSTDkMKoy7RonseILT916NNrX/Wkei3fEaQaXnSI
4lJWo4ZZWmMQE5HIF/mdheCFHgdDVXTm5OuRBus1ttkzbj1iCs7lE5U8gC935YIe
LZFeJjCxj4IRq5YiX8CiqzyXXIy6h3NKm/t1mBqjmBnWnyWrsR7dDCSIZpuDAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUn/x5II44SY/AP6c/qJutJqVQzzswHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
gYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVMyMDU0MzIvMC8zMjYxMzAzNjNhMzEzMjM4MzczYTYxMzQzMDMwM2EzYTJm
MzMzODJkMzQzODIwM2QzZTIwMzEzOTM4MzQzODMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgYSh6Qw
DQYJKoZIhvcNAQELBQADggEBAGO1qEH0jzixY9FeIun2mOFCW9CXsrLwvYuL1Akg
wEj4HoOWRq0bFDNFKJSUtZP7lx/oqyv/fI8X+Rsfb0lkV0w4dqTyfPsw/yEPGyWx
lS8qz3iX0HudH8ABVTaJkeMwRIEeDrC1K+8BrZb2TEMpGisIo0gztB9qz0qdnw5y
04OUe01XiTDGmSB1jGMw6JK2Mbqvn8HHVcWvvhrbcduJqga+TjcKY3aLg+hTVwYH
pk4KsxaubYJv95UTa9SvfW38vs2SsGgFmP+DdQPxUqQmFAzKQE8wwlHcuDDUyhn7
wlQqPCfaeUJNWYGJslJlFuWEz0mgKuTpez/rqxXvYt3gaGM=
-----END CERTIFICATE-----