Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a616330303a3a2f33392d3438203d3e20323032393339.roa
File:                     326130363a313238373a616330303a3a2f33392d3438203d3e20323032393339.roa (raw, json)
Hash identifier:          d/DRqpo7G/4MW2qfC7cspzOA9nB1z0umquda7+jyUYs=
Subject key identifier:   C0:E9:82:FD:90:19:AB:28:0B:B3:0A:ED:E4:E6:65:96:0E:D1:95:AC
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       4928764D88DE4FBD3590FE1A2537F5F50A181FC7
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a616330303a3a2f33392d3438203d3e20323032393339.roa
Signing time:             Fri 16 Jun 2023 14:40:29 +0000
ROA not before:           Fri 16 Jun 2023 14:35:29 +0000
ROA not after:            Fri 14 Jun 2024 14:40:29 +0000
asID:                     202939
IP address blocks:        2a06:1287:ac00::/39 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:28:76:4d:88:de:4f:bd:35:90:fe:1a:25:37:f5:f5:0a:18:1f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun 16 14:35:29 2023 GMT
            Not After : Jun 14 14:40:29 2024 GMT
        Subject: CN=C0E982FD9019AB280BB30AEDE4E665960ED195AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fe:45:e9:01:e3:b3:9d:fe:74:9e:e3:1d:75:
                    48:78:72:ab:e8:72:b5:d2:40:a8:4e:3d:db:2e:59:
                    d0:1b:cc:ff:18:25:48:0a:a4:bd:99:85:e4:67:2e:
                    c5:d3:07:5d:57:35:98:bf:c5:b3:8f:38:8b:5d:70:
                    aa:8e:2d:19:a6:c1:20:17:e0:e0:8c:ca:ec:71:62:
                    7b:d1:6c:ed:81:e6:9d:2f:42:97:3e:55:6a:0c:98:
                    89:f2:66:7e:93:3f:c7:c7:08:96:ce:85:f8:9e:6c:
                    0e:11:1e:99:fa:4d:9a:dc:c9:32:04:8b:b2:22:f8:
                    5f:0b:b8:d2:27:0a:10:75:81:55:e4:6c:fe:fc:f5:
                    11:ba:a6:a9:7e:da:b9:91:4a:be:2f:62:7a:52:ae:
                    22:0f:7d:76:52:ee:1d:e0:a4:3c:86:37:0f:73:1c:
                    e9:bd:e2:91:06:06:a7:81:93:55:44:55:e6:48:58:
                    70:c5:75:fa:a5:26:5f:da:3b:68:ce:69:ba:c3:1b:
                    bd:a5:2f:0f:d7:65:dd:89:bf:fb:63:8e:7f:88:06:
                    c3:5f:76:a4:9b:78:fc:78:20:a8:80:fd:eb:92:0e:
                    b4:17:b7:6d:91:f5:16:4c:7e:53:30:40:05:6f:57:
                    5a:61:4b:bb:a9:be:60:a9:e1:99:48:0e:67:c4:0e:
                    00:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E9:82:FD:90:19:AB:28:0B:B3:0A:ED:E4:E6:65:96:0E:D1:95:AC
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a616330303a3a2f33392d3438203d3e20323032393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:ac00::/39

    Signature Algorithm: sha256WithRSAEncryption
         07:58:3b:fd:4d:fb:98:08:14:1b:17:16:90:20:c4:11:77:0f:
         a6:c3:14:d9:c9:a1:eb:ae:64:c3:3f:4e:71:21:45:47:59:9f:
         ff:1c:de:1c:b6:0d:f4:96:31:01:27:e3:9a:f2:a3:56:45:dc:
         9b:79:c6:67:af:9a:4b:f2:ae:37:ab:27:d1:25:a5:c0:e3:02:
         7c:54:c6:f4:ad:7d:ed:47:76:2d:a8:34:f3:60:3f:2b:d4:1b:
         52:4a:a8:52:8e:15:c3:2d:01:e0:4c:b6:bc:1a:38:42:bd:a0:
         33:9f:47:cf:46:eb:20:b7:fa:1d:35:35:26:54:f3:a0:73:ae:
         ee:89:64:42:63:8e:59:58:e6:d3:2d:c7:7d:bf:5a:fd:6d:f5:
         ff:4a:aa:79:03:e8:ec:bf:df:3f:97:e7:e0:36:37:28:f8:6a:
         b6:58:8d:2d:0a:8f:d6:2b:a5:e9:20:1c:4c:56:b0:aa:b4:37:
         bf:a6:63:c5:21:53:7a:2e:69:d5:c4:c5:4f:60:ef:02:80:3a:
         ca:94:aa:02:20:b3:1b:d4:5e:da:9b:62:0c:82:67:87:47:32:
         9c:a9:16:6b:59:ef:f0:80:97:51:00:c3:ee:2f:3c:be:5f:82:
         c5:c9:bc:6e:92:41:06:1b:d2:a4:5e:2f:95:56:1c:2c:d1:1a:
         8e:c2:3a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----