Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a653466303a3a2f34342d3438203d3e20323034323931.roa
File:                     326130363a313238373a653466303a3a2f34342d3438203d3e20323034323931.roa (raw, json)
Hash identifier:          4JeDAduki7QLmiWRtiiTBsBU7/T8vaRpVEttXTQxIfk=
Subject key identifier:   2B:A4:BD:2E:C8:AD:BE:86:8B:6E:DB:D9:A9:B9:1A:02:4F:17:CC:72
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       5078FC74D67FC00345A332EA99BB22AFB733F2E7
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a653466303a3a2f34342d3438203d3e20323034323931.roa
Signing time:             Fri 09 Jun 2023 23:46:14 +0000
ROA not before:           Fri 09 Jun 2023 23:41:14 +0000
ROA not after:            Fri 07 Jun 2024 23:46:14 +0000
asID:                     204291
IP address blocks:        2a06:1287:e4f0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:78:fc:74:d6:7f:c0:03:45:a3:32:ea:99:bb:22:af:b7:33:f2:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun  9 23:41:14 2023 GMT
            Not After : Jun  7 23:46:14 2024 GMT
        Subject: CN=2BA4BD2EC8ADBE868B6EDBD9A9B91A024F17CC72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:86:ab:f1:fb:b0:5e:10:cf:22:d6:9c:d4:b3:
                    c6:0d:78:54:92:b7:42:38:aa:db:57:a2:25:5d:03:
                    31:55:30:da:82:4d:cf:cc:06:54:94:1a:69:bf:f6:
                    16:f2:19:93:8d:b9:8d:00:a4:1d:e1:b2:17:7d:a4:
                    e7:68:c9:28:99:d4:96:ad:c6:f7:8b:48:9e:85:85:
                    a3:53:f1:50:d2:71:1a:05:45:5a:dd:75:70:57:03:
                    6c:c1:6b:7c:04:5e:bc:b5:19:ea:65:8b:6a:5f:d3:
                    61:0d:3f:07:6e:29:1d:bf:0b:65:95:8e:37:41:8e:
                    97:39:16:cd:6c:2c:07:e9:fb:05:bb:4f:db:ac:94:
                    30:c8:b4:ae:02:48:e5:de:c4:32:b7:b7:79:6b:17:
                    61:56:0c:4b:19:8d:d0:30:4d:3d:ae:cc:1c:cd:97:
                    37:76:e7:39:62:d3:18:f8:18:47:0a:fe:d5:3e:33:
                    34:0b:49:a0:89:28:b7:38:fe:73:2f:2c:0b:c8:69:
                    b8:86:fb:05:60:2b:c9:75:aa:61:28:f7:3e:68:b9:
                    5c:34:08:78:34:e9:27:86:9f:20:d4:81:42:02:2e:
                    0b:dc:4e:31:34:81:7b:90:c2:9f:ba:b6:a4:18:04:
                    a3:73:ed:e9:41:0f:c8:25:ec:19:26:a0:8d:aa:7d:
                    6d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A4:BD:2E:C8:AD:BE:86:8B:6E:DB:D9:A9:B9:1A:02:4F:17:CC:72
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a653466303a3a2f34342d3438203d3e20323034323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:e4f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5c:0b:b0:cb:77:d2:37:71:e1:f4:88:38:08:92:7b:c8:bd:f8:
         12:c8:ae:49:17:ac:8d:52:8e:fd:e4:28:06:c4:d9:36:d4:e5:
         a8:ed:f0:54:0a:e4:2f:27:de:49:25:a2:d3:10:8a:08:70:30:
         97:d3:f0:e8:01:a6:ac:34:40:51:b6:f2:6e:08:b3:60:df:e0:
         6e:c8:4a:15:98:e9:9c:57:fb:66:ce:8c:58:91:b9:95:ba:49:
         5a:c5:21:c6:1a:87:b4:6e:18:fc:2c:12:22:a2:1e:9e:fe:eb:
         cf:a6:b7:ca:04:48:09:e2:ad:7a:c6:35:c1:e8:63:21:f8:20:
         e3:65:a4:96:02:b9:2b:3a:c9:78:f3:43:82:59:8c:6e:92:28:
         18:dc:11:a5:7e:cb:8a:0a:95:c8:c3:79:59:04:3b:aa:22:68:
         42:20:69:eb:bd:7e:6c:eb:0e:b9:36:f4:94:c8:48:23:0b:b4:
         e4:9f:cf:7f:31:c1:b4:49:15:b1:8b:ef:51:89:83:45:f2:8a:
         64:df:38:88:1b:6d:e0:f1:b0:b4:90:a0:a0:a3:67:d4:a6:54:
         4d:c7:b6:9c:f0:f4:06:9f:11:e8:fb:8b:ab:4a:43:9a:90:f2:
         f7:c8:11:f7:98:da:b6:45:c6:54:12:1f:e3:2d:b9:be:23:e7:
         9a:27:53:ec
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUUHj8dNZ/wANFozLqmbsir7cz8ucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA2MDkyMzQxMTRaFw0yNDA2MDcyMzQ2MTRaMDMxMTAvBgNV
BAMTKDJCQTRCRDJFQzhBREJFODY4QjZFREJEOUE5QjkxQTAyNEYxN0NDNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKhqvx+7BeEM8i1pzUs8YNeFSS
t0I4qttXoiVdAzFVMNqCTc/MBlSUGmm/9hbyGZONuY0ApB3hshd9pOdoySiZ1Jat
xveLSJ6FhaNT8VDScRoFRVrddXBXA2zBa3wEXry1Gepli2pf02ENPwduKR2/C2WV
jjdBjpc5Fs1sLAfp+wW7T9uslDDItK4CSOXexDK3t3lrF2FWDEsZjdAwTT2uzBzN
lzd25zli0xj4GEcK/tU+MzQLSaCJKLc4/nMvLAvIabiG+wVgK8l1qmEo9z5ouVw0
CHg06SeGnyDUgUICLgvcTjE0gXuQwp+6tqQYBKNz7elBD8gl7BkmoI2qfW29AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUK6S9LsitvoaLbtvZqbkaAk8XzHIwHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
gYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVMyMDU0MzIvMC8zMjYxMzAzNjNhMzEzMjM4MzczYTY1MzQ2NjMwM2EzYTJm
MzQzNDJkMzQzODIwM2QzZTIwMzIzMDM0MzIzOTMxLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgYSh+Tw
MA0GCSqGSIb3DQEBCwUAA4IBAQBcC7DLd9I3ceH0iDgIknvIvfgSyK5JF6yNUo79
5CgGxNk21OWo7fBUCuQvJ95JJaLTEIoIcDCX0/DoAaasNEBRtvJuCLNg3+BuyEoV
mOmcV/tmzoxYkbmVuklaxSHGGoe0bhj8LBIioh6e/uvPprfKBEgJ4q16xjXB6GMh
+CDjZaSWArkrOsl480OCWYxukigY3BGlfsuKCpXIw3lZBDuqImhCIGnrvX5s6w65
NvSUyEgjC7Tkn89/McG0SRWxi+9RiYNF8opk3ziIG23g8bC0kKCgo2fUplRNx7ac
8PQGnxHo+4urSkOakPL3yBH3mNq2RcZUEh/jLbm+I+eaJ1Ps
-----END CERTIFICATE-----