Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a613830303a3a2f33392d3438203d3e203439353831.roa
File:                     326130363a313238373a613830303a3a2f33392d3438203d3e203439353831.roa (raw, json)
Hash identifier:          ASGQz83dq0tk9CMzVZta4JBCEjUD7C2OXMqNdR+ofrI=
Subject key identifier:   50:E4:67:49:BE:FD:31:89:1A:78:7E:58:52:EA:26:C1:22:C5:C7:45
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       7691702EC65A2698C9FE87B072B437A1671A08EE
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a613830303a3a2f33392d3438203d3e203439353831.roa
Signing time:             Wed 21 Jun 2023 10:09:12 +0000
ROA not before:           Wed 21 Jun 2023 10:04:12 +0000
ROA not after:            Wed 19 Jun 2024 10:09:12 +0000
asID:                     49581
IP address blocks:        2a06:1287:a800::/39 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:91:70:2e:c6:5a:26:98:c9:fe:87:b0:72:b4:37:a1:67:1a:08:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun 21 10:04:12 2023 GMT
            Not After : Jun 19 10:09:12 2024 GMT
        Subject: CN=50E46749BEFD31891A787E5852EA26C122C5C745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:64:06:37:2b:70:57:15:4f:e2:df:65:e7:03:
                    02:81:8d:4a:e4:eb:6a:8d:e3:65:a4:48:cc:7c:e8:
                    e8:52:c8:74:ca:b7:4c:76:97:2f:84:e5:4c:bd:74:
                    a3:06:c4:bc:4f:4e:f8:01:f9:98:f3:29:f9:82:fa:
                    bc:6a:b8:37:32:db:73:13:5d:9c:36:7f:d5:52:9f:
                    00:2b:a9:b3:34:c8:2b:76:a2:21:c0:3a:94:76:e3:
                    a8:26:86:f7:e7:f8:59:2b:61:d3:5f:ee:e4:cb:86:
                    b3:18:c4:5b:a3:6e:8e:14:15:04:75:70:b9:32:16:
                    62:91:d4:f5:c8:d5:65:68:f3:97:ae:fa:4c:98:7b:
                    47:df:31:0f:76:53:1d:a9:6f:d0:02:40:6e:af:d4:
                    b8:1f:a0:5a:19:cd:15:77:48:13:1c:57:cb:44:e9:
                    3a:d0:1b:3d:70:28:3c:85:60:88:d1:c6:b4:a0:d4:
                    1b:b5:14:b8:36:fd:f7:4e:ca:41:f3:4d:58:20:c9:
                    3e:8a:0b:85:89:56:a6:ea:f0:db:39:d3:42:5a:14:
                    02:de:29:48:e4:6a:f8:40:98:d6:0f:33:0b:18:67:
                    5d:ca:32:9e:cf:3f:30:d8:a6:52:df:ce:cc:77:34:
                    82:04:ea:66:6b:07:9f:70:73:45:29:94:8b:ef:57:
                    e0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E4:67:49:BE:FD:31:89:1A:78:7E:58:52:EA:26:C1:22:C5:C7:45
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a613830303a3a2f33392d3438203d3e203439353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:a800::/39

    Signature Algorithm: sha256WithRSAEncryption
         0d:b6:28:56:9d:79:c8:0c:59:6f:61:ef:9e:02:2c:7c:75:2f:
         89:3f:0e:b4:2b:bf:cc:a3:ed:f4:c1:db:09:ef:04:07:10:80:
         18:38:1e:31:38:e7:ce:ca:79:23:12:e0:40:00:71:a0:82:b0:
         af:62:37:1b:08:42:b5:0c:0e:7a:00:e0:3b:47:7b:11:ac:be:
         e3:8d:55:d2:5a:31:d9:ac:52:41:37:cd:6c:a9:73:56:62:5b:
         f7:dd:3c:b9:2f:b1:da:af:4e:b6:0d:50:06:a9:7f:d4:01:77:
         d1:57:59:d5:d1:7d:60:eb:b9:24:75:59:dc:eb:c5:be:9a:27:
         84:4b:06:a2:20:ae:52:11:b7:97:c1:6d:fa:13:9c:bb:cc:8f:
         f1:cd:9b:9c:08:fd:cf:91:21:dc:45:fc:42:e5:94:03:42:e8:
         d7:8f:33:50:68:5b:43:6d:98:02:f7:66:bf:64:c5:6b:3a:c6:
         9b:6a:d0:6c:01:ad:72:7c:0e:d3:a1:f6:19:03:93:f5:14:bd:
         84:e9:da:b6:42:da:8c:a5:82:8d:79:1b:d0:df:99:14:47:e8:
         89:16:1f:16:c7:84:3a:81:d8:a1:0c:f4:22:5b:6c:39:69:a1:
         47:0d:d6:fc:7e:75:54:26:db:17:e1:38:91:ba:4e:88:34:17:
         16:ae:e6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----