Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a636330303a3a2f34302d3438203d3e20313939373633.roa
File:                     326130363a313238373a636330303a3a2f34302d3438203d3e20313939373633.roa (raw, json)
Hash identifier:          c+BTsqKfXGfvh0VlqZou6FpPDHI6h8Cg4lcDfC8bCCE=
Subject key identifier:   13:D1:E8:35:F1:09:FA:43:2A:B5:64:E0:05:89:06:4D:EF:EE:24:DD
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       1A3F200270EE08FF9FCAB8A6A19DB50C16403BF3
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a636330303a3a2f34302d3438203d3e20313939373633.roa
Signing time:             Fri 16 Jun 2023 12:44:03 +0000
ROA not before:           Fri 16 Jun 2023 12:39:03 +0000
ROA not after:            Fri 14 Jun 2024 12:44:03 +0000
asID:                     199763
IP address blocks:        2a06:1287:cc00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3f:20:02:70:ee:08:ff:9f:ca:b8:a6:a1:9d:b5:0c:16:40:3b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun 16 12:39:03 2023 GMT
            Not After : Jun 14 12:44:03 2024 GMT
        Subject: CN=13D1E835F109FA432AB564E00589064DEFEE24DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0e:fa:c0:a1:fa:af:7e:b8:d2:f0:cc:a0:38:
                    27:29:4d:a3:9f:8c:ff:10:22:c7:06:32:fe:6d:c7:
                    8f:ec:19:70:2c:0c:36:ee:02:be:3b:eb:49:2a:3c:
                    63:b1:39:ed:3f:90:65:89:a4:1a:81:5f:54:e1:36:
                    16:5f:30:64:1f:63:d2:42:e8:5e:59:cb:ed:b5:87:
                    74:fa:94:15:62:ca:40:64:70:c3:5c:94:ea:da:3b:
                    14:44:77:49:4e:79:a0:4d:e9:4e:af:1e:f9:bd:5c:
                    b1:41:42:af:52:31:6f:4e:7a:10:7f:e7:e7:5f:eb:
                    65:86:2a:c8:d3:30:b4:a3:26:5e:05:b2:68:78:04:
                    3a:a6:c3:aa:dd:be:6e:1e:08:01:57:9a:7a:4e:de:
                    97:85:b6:7e:13:d8:0b:09:9a:4b:de:f5:12:bb:d3:
                    15:ba:1e:46:0a:ba:60:dc:62:21:c7:73:75:88:10:
                    79:88:ab:80:37:1d:0a:05:c3:fa:50:a5:56:e1:83:
                    9f:55:8e:6c:e5:01:20:dd:69:9b:03:ae:aa:78:f7:
                    7e:b3:fc:79:b0:0f:6f:30:73:30:f6:8f:68:48:4b:
                    5a:81:ee:ad:99:39:87:19:56:6a:7c:e5:fd:b0:8c:
                    56:e1:91:e3:f0:98:09:58:ef:d3:63:8a:43:25:2e:
                    af:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D1:E8:35:F1:09:FA:43:2A:B5:64:E0:05:89:06:4D:EF:EE:24:DD
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a636330303a3a2f34302d3438203d3e20313939373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:cc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4d:80:37:c8:0c:b2:cb:0b:c4:08:43:9f:9b:27:56:77:3c:7c:
         f9:6d:26:54:a0:b1:31:86:d7:b5:87:93:f2:9f:75:59:6c:76:
         d0:5c:3b:7e:14:9a:4a:8f:cb:fc:ca:c7:f0:52:e0:d3:7e:24:
         0c:d8:c5:09:1d:83:3f:a6:cd:26:ca:5d:66:00:18:b1:e3:ce:
         58:fa:50:0b:11:91:a2:c3:a6:a1:c3:d3:10:5e:26:63:48:f1:
         52:26:63:99:5b:4e:bc:81:c4:a5:9d:1a:ec:3a:68:d6:92:7b:
         93:8f:3e:65:46:8e:2c:af:42:ba:84:12:6e:0a:e1:d2:30:22:
         6a:d2:d9:b9:82:78:03:93:99:ad:06:e5:79:12:4a:4c:5a:7f:
         c7:2e:75:e5:70:44:06:cc:3f:84:85:f4:84:b2:25:24:07:f6:
         41:ff:40:25:a1:5a:aa:c7:3f:57:32:0a:2c:e9:75:9b:d7:11:
         f5:7c:55:43:13:41:3b:dc:33:02:b7:6b:c3:ca:ba:31:50:cc:
         fb:da:2e:55:0d:1f:b9:54:e6:d3:a9:97:c0:35:1b:44:74:c7:
         e5:12:a1:40:0f:fb:f7:c6:8b:0b:2b:6d:fd:8d:4d:4e:36:21:
         fc:aa:7f:7b:74:a6:69:1a:40:ec:5e:9c:fc:c9:d2:44:b7:e4:
         06:a8:07:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----