Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a623363303a3a2f34332d3438203d3e20323131363034.roa
File:                     326130363a313238373a623363303a3a2f34332d3438203d3e20323131363034.roa (raw, json)
Hash identifier:          y6cRDd4ymfdkJmAQouJ+jBs6dX2CS0vlGWwQllmNtCA=
Subject key identifier:   1C:86:B1:EE:D7:44:C2:D0:17:73:83:EE:16:62:38:27:37:3F:4F:9F
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       1CB3A583DA012CCEA313463A848EF6E9FA4254C1
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a623363303a3a2f34332d3438203d3e20323131363034.roa
Signing time:             Wed 05 Jul 2023 20:03:23 +0000
ROA not before:           Wed 05 Jul 2023 19:58:23 +0000
ROA not after:            Wed 03 Jul 2024 20:03:23 +0000
asID:                     211604
IP address blocks:        2a06:1287:b3c0::/43 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b3:a5:83:da:01:2c:ce:a3:13:46:3a:84:8e:f6:e9:fa:42:54:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  5 19:58:23 2023 GMT
            Not After : Jul  3 20:03:23 2024 GMT
        Subject: CN=1C86B1EED744C2D0177383EE16623827373F4F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:d9:2e:bc:aa:3f:2f:ca:0f:58:3b:8a:93:
                    50:8c:cb:ce:0f:49:a2:17:2b:b1:fb:31:ed:1e:b9:
                    35:bd:7c:de:9b:8a:6e:b3:39:52:c2:bf:48:cd:77:
                    6e:5b:72:cb:9c:ed:05:19:3d:75:ca:5b:7d:82:89:
                    bf:4b:16:42:bd:00:38:b0:0b:05:aa:94:b1:2f:85:
                    35:39:f7:af:1e:48:30:ae:2f:41:aa:2f:df:21:a9:
                    a3:ec:c6:bd:f9:a1:f0:2b:22:3f:64:ed:12:91:a0:
                    97:f0:8c:9e:9a:54:b3:69:40:5a:93:43:d5:3d:07:
                    35:9f:88:d6:46:3b:48:5e:1a:96:08:75:64:0a:4a:
                    3f:88:c5:a9:b0:99:06:5a:45:08:c0:d5:19:7d:f5:
                    a5:c2:ad:3f:d1:20:27:ab:3c:8a:a0:d0:05:ed:97:
                    85:b5:40:d7:25:24:58:41:af:d7:f6:db:d8:55:4b:
                    30:af:7f:f7:44:d3:b6:18:df:5a:ea:18:c2:8d:aa:
                    8d:61:85:54:90:57:de:9b:26:33:d2:a7:6e:2c:c4:
                    f3:e3:66:8e:dc:8e:20:2a:fe:2b:3b:7f:e7:17:4b:
                    17:f1:eb:34:19:2d:fe:e4:a2:48:42:aa:f9:b2:48:
                    44:1e:d5:fe:ff:f0:d4:1f:a2:fc:93:ab:18:ce:78:
                    86:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:86:B1:EE:D7:44:C2:D0:17:73:83:EE:16:62:38:27:37:3F:4F:9F
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a623363303a3a2f34332d3438203d3e20323131363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:b3c0::/43

    Signature Algorithm: sha256WithRSAEncryption
         bd:42:38:ed:9e:96:8c:dc:4a:0f:4c:1f:24:21:9d:f1:e4:99:
         19:08:61:ea:f6:40:18:82:02:97:38:39:f5:82:53:02:fc:fe:
         10:ad:07:64:1e:8d:f8:a6:05:eb:6d:cd:89:83:d9:f7:54:24:
         c7:6b:58:d7:d2:5a:3c:18:8c:af:98:8f:32:f8:0f:06:ba:6f:
         ef:85:81:1e:68:fc:66:ea:10:46:19:19:f3:3d:56:16:7c:78:
         ff:d2:27:7c:71:eb:7d:0e:de:52:31:0c:28:55:45:68:92:ad:
         fe:c6:23:e2:e3:e3:c8:3c:44:d1:2b:4e:95:f7:c5:d9:9d:45:
         3b:51:f7:c3:b7:f1:21:ec:7c:40:d1:72:5f:e3:e7:a9:bd:91:
         9a:62:5d:ef:61:fa:05:c9:c6:fd:9d:51:eb:e3:1d:7e:b0:ce:
         56:62:c7:d7:fe:e6:08:e7:f8:2d:a5:04:19:08:ab:80:e1:8d:
         93:bd:99:64:3b:84:ca:8f:3a:3b:13:b3:04:ca:ee:c6:12:fa:
         e9:e9:b3:00:c4:19:49:24:58:7f:36:ea:e4:73:37:a0:fd:e2:
         4f:b4:3e:f4:86:0a:c2:01:d8:b4:d8:49:5b:2e:6f:36:45:87:
         ff:1a:13:73:83:3e:f3:63:3d:05:37:fd:f6:34:e5:0c:b3:a4:
         c6:2f:ad:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----