Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a643030303a3a2f33372d3438203d3e20323032363835.roa
File:                     326130363a313238373a643030303a3a2f33372d3438203d3e20323032363835.roa (raw, json)
Hash identifier:          H8BiAsVjEpe/f1nDERTbJbA4I4gKV01ovTg8uKXViTE=
Subject key identifier:   EE:02:7B:38:F6:EC:EE:83:15:5A:10:E7:56:B2:82:80:27:CE:DB:84
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       274A81D4C4F11DF3585D4ECE1511A8B1C0441D82
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a643030303a3a2f33372d3438203d3e20323032363835.roa
Signing time:             Fri 16 Jun 2023 14:40:08 +0000
ROA not before:           Fri 16 Jun 2023 14:35:08 +0000
ROA not after:            Fri 14 Jun 2024 14:40:08 +0000
asID:                     202685
IP address blocks:        2a06:1287:d000::/37 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4a:81:d4:c4:f1:1d:f3:58:5d:4e:ce:15:11:a8:b1:c0:44:1d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun 16 14:35:08 2023 GMT
            Not After : Jun 14 14:40:08 2024 GMT
        Subject: CN=EE027B38F6ECEE83155A10E756B2828027CEDB84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:b3:94:f6:a1:c4:2c:93:06:a4:c9:87:a4:
                    4b:3c:12:be:4c:3e:49:f6:cd:0c:fa:b0:ad:e9:30:
                    fd:af:94:f3:19:17:4f:5e:b5:40:85:d0:9d:60:41:
                    18:67:84:9d:40:7f:ec:93:95:83:f0:65:25:6c:8e:
                    32:26:e3:11:14:2d:d5:41:d2:2a:0c:92:9e:13:80:
                    34:7e:23:07:14:36:3f:98:64:b8:b0:0e:28:57:bb:
                    22:88:34:71:a0:6e:1f:4b:60:1a:2e:85:55:96:81:
                    3e:8c:d6:8a:b9:d7:d4:83:fa:b9:4b:c3:ab:d3:9f:
                    d5:2b:f0:6f:2f:1e:35:bb:43:80:32:be:d9:a8:d7:
                    0a:af:91:54:9b:ea:5f:84:ec:3f:ec:23:44:de:27:
                    6c:24:84:ee:3b:6f:51:6f:45:88:da:e3:da:1f:1c:
                    c4:47:3c:54:6c:6d:94:21:74:68:c0:5f:b6:c2:04:
                    75:01:73:74:2a:7b:4d:93:f9:3d:ba:f4:51:4c:31:
                    6f:92:cf:12:ca:0c:3b:51:04:f4:f5:e5:23:78:ae:
                    d3:f4:28:dd:2d:f9:38:a7:ba:c9:74:91:0f:5d:0a:
                    e9:18:1a:69:f5:56:76:d0:e5:d9:6c:07:50:53:7d:
                    d9:42:3d:4f:f8:f6:43:33:f3:8e:67:4e:06:83:c5:
                    96:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:02:7B:38:F6:EC:EE:83:15:5A:10:E7:56:B2:82:80:27:CE:DB:84
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a643030303a3a2f33372d3438203d3e20323032363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:d000::/37

    Signature Algorithm: sha256WithRSAEncryption
         87:64:86:f0:ef:00:fd:40:e3:ff:5a:97:bc:e7:98:30:54:06:
         63:c3:73:aa:20:ff:90:19:9a:41:d7:7c:64:43:9d:a2:94:14:
         96:d2:4e:9c:73:c7:92:c9:92:43:b6:8e:c5:10:9f:c7:bb:18:
         1a:8d:dc:cb:c9:eb:6b:fd:da:97:c0:61:14:eb:17:b5:d1:b1:
         4d:f2:c4:e6:80:12:2f:da:6b:4b:bb:c3:10:3f:e5:af:93:b0:
         98:4d:31:09:52:6f:e2:1a:61:e9:ab:f0:3b:e8:27:14:e3:5e:
         06:74:17:6f:47:05:ed:f2:f3:72:ff:4b:90:77:7d:eb:d2:dd:
         70:e8:51:fe:a7:8b:b8:5d:2f:ff:7c:82:15:67:d6:8c:27:b0:
         5e:69:a5:2a:2a:36:db:1f:cc:2f:ea:2e:ab:5a:74:0b:2e:10:
         f6:48:2e:4f:32:90:1b:ea:82:02:59:33:ff:0b:80:74:dc:c1:
         ea:c8:46:d2:21:87:72:8f:6b:c3:9a:63:5d:af:2e:29:cf:ac:
         75:df:2f:26:ff:3f:3c:27:fb:81:90:4f:46:ea:90:72:4d:8e:
         63:e1:67:90:8c:18:67:6d:3c:2c:30:0a:22:68:33:35:58:c5:
         70:f7:3b:10:13:db:f4:b0:e7:22:13:72:f8:46:dd:66:e1:e9:
         67:69:4a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----