Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a623030303a3a2f33392d3438203d3e20323034373839.roa
File:                     326130363a313238373a623030303a3a2f33392d3438203d3e20323034373839.roa (raw, json)
Hash identifier:          AOyIEGvasAD2s6JtDZewRp/mY0i5EvgUsNI7CeyqFOA=
Subject key identifier:   AF:F7:EF:55:A9:C9:57:E3:25:E8:5C:34:54:65:CC:31:75:FC:13:AF
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       3020F4B9274218ED05FC7D0CF40D3622D4CC2345
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a623030303a3a2f33392d3438203d3e20323034373839.roa
Signing time:             Fri 14 Apr 2023 02:15:57 +0000
ROA not before:           Fri 14 Apr 2023 02:10:57 +0000
ROA not after:            Fri 12 Apr 2024 02:15:57 +0000
asID:                     204789
IP address blocks:        2a06:1287:b000::/39 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:20:f4:b9:27:42:18:ed:05:fc:7d:0c:f4:0d:36:22:d4:cc:23:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 02:10:57 2023 GMT
            Not After : Apr 12 02:15:57 2024 GMT
        Subject: CN=AFF7EF55A9C957E325E85C345465CC3175FC13AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e0:58:59:5b:b7:8e:0b:62:a9:05:0d:91:ab:
                    54:03:94:4d:46:0d:21:3b:b0:71:60:87:d8:f8:ab:
                    34:42:55:96:0d:a2:eb:41:0d:c3:bf:50:e2:d8:2b:
                    7d:b6:01:b6:45:ad:3f:60:10:01:95:d2:b6:d3:b4:
                    1d:62:44:ef:40:2e:ca:47:24:74:52:b2:ce:50:16:
                    a0:62:e4:d1:21:7a:9f:1d:0f:07:cf:66:83:d9:3e:
                    54:29:5d:9f:8f:90:db:f7:25:1a:8b:76:b5:96:a1:
                    85:e8:88:4a:4d:77:9a:f4:ce:b9:35:a7:2a:08:13:
                    3c:a0:d4:10:72:27:be:36:95:03:35:0c:56:b8:fb:
                    6c:09:cc:0a:46:c5:57:80:88:31:2d:39:89:78:9f:
                    0e:32:e4:1f:ac:24:7e:b1:37:24:99:04:ca:48:29:
                    b5:aa:da:f5:73:31:9a:3d:42:dc:5e:79:c4:07:24:
                    5c:04:19:78:57:39:bd:99:02:cd:85:42:82:9b:65:
                    9c:75:58:ae:21:53:04:18:61:53:d8:1b:67:88:6f:
                    1c:d6:28:e2:0b:00:1a:51:de:a9:28:e7:86:90:71:
                    27:58:ab:f5:2a:3d:13:83:aa:48:3b:16:d9:67:5c:
                    7b:ef:d6:96:5f:ef:7f:49:c8:b7:29:b8:d5:dc:07:
                    b7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F7:EF:55:A9:C9:57:E3:25:E8:5C:34:54:65:CC:31:75:FC:13:AF
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a623030303a3a2f33392d3438203d3e20323034373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:b000::/39

    Signature Algorithm: sha256WithRSAEncryption
         1d:88:0f:fb:27:13:62:74:2b:39:bd:82:50:fa:7b:b8:45:8d:
         88:bb:0b:c7:20:b9:2d:05:9b:17:c4:28:b3:ca:0a:21:5d:e8:
         9e:a4:d1:e6:89:d8:78:f2:1f:7a:84:5c:93:64:8d:f0:9d:d1:
         d2:89:12:44:c8:4a:4e:00:7b:48:48:03:89:7c:22:63:6d:53:
         35:52:99:2a:ab:55:a4:ed:cc:93:db:25:f5:04:9c:c8:ae:d8:
         f9:09:5d:63:9a:02:a0:b3:44:6e:5e:fa:f8:f3:41:e3:e4:31:
         ed:fb:0d:f0:79:4b:2d:ef:31:dc:f3:5f:54:f2:27:50:25:65:
         90:8e:2d:b4:42:59:f9:a0:1f:ba:9a:bb:55:09:85:04:aa:49:
         cf:ad:cf:b1:af:bf:ab:bb:15:5d:99:32:8b:44:05:1a:8d:e4:
         a9:70:40:bc:26:ce:1d:55:90:ff:b4:7d:cb:12:ac:27:d4:64:
         d2:d2:e2:6a:8c:3b:c1:45:d9:81:2b:34:5f:7d:1d:98:61:3b:
         7e:11:24:79:6e:6d:70:3d:06:73:ae:75:b0:d9:8e:b0:84:79:
         97:fb:4b:2a:65:6b:fa:f5:1b:15:84:86:cd:93:e5:f3:2f:5c:
         36:3a:b8:e4:a5:65:bc:67:c5:12:2e:93:23:06:e7:b1:10:e1:
         02:05:6e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----