Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a663030303a3a2f33372d3337203d3e20323130323630.roa
File:                     326130363a313238373a663030303a3a2f33372d3337203d3e20323130323630.roa (raw, json)
Hash identifier:          RGC73oXAvWqW9FmHEmfGYUmuNRV1CyM1kfMkyJald7E=
Subject key identifier:   C2:31:AB:50:DB:BA:13:0E:24:84:FE:8F:B1:24:6E:8C:9C:19:47:B0
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       71384E7B3D16E386C1770D4F1259897B8587ECC8
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a663030303a3a2f33372d3337203d3e20323130323630.roa
Signing time:             Fri 14 Apr 2023 01:58:21 +0000
ROA not before:           Fri 14 Apr 2023 01:53:21 +0000
ROA not after:            Fri 12 Apr 2024 01:58:21 +0000
asID:                     210260
IP address blocks:        2a06:1287:f000::/37 maxlen: 37

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:38:4e:7b:3d:16:e3:86:c1:77:0d:4f:12:59:89:7b:85:87:ec:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:53:21 2023 GMT
            Not After : Apr 12 01:58:21 2024 GMT
        Subject: CN=C231AB50DBBA130E2484FE8FB1246E8C9C1947B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ad:df:22:b3:9d:aa:87:46:4f:09:31:38:a0:
                    31:c9:5b:83:8c:4d:5d:d6:e4:14:76:5b:23:54:27:
                    b6:b2:5b:e0:7d:0c:49:cc:0c:a8:93:4d:a1:3e:1b:
                    55:b2:10:f3:84:f6:2d:8c:15:a5:ba:cd:67:91:df:
                    c5:33:2b:54:86:d6:90:10:41:37:45:a6:92:f7:cb:
                    02:c4:d1:d7:7d:e6:fa:37:7f:95:17:98:29:69:32:
                    36:fc:68:2d:3a:3d:6b:12:a7:11:06:b2:9a:2a:f2:
                    82:7b:f0:63:e6:3a:c3:41:68:70:57:ce:9c:a8:11:
                    e2:31:f1:3f:98:1f:01:b9:b2:58:bf:c0:c1:2f:d4:
                    e3:76:23:5b:4d:62:48:0d:a0:43:16:26:f5:96:8a:
                    71:09:94:7f:6e:ac:b9:c2:b0:c1:98:6f:bf:38:fb:
                    50:c3:ca:5d:45:e6:ba:5e:aa:3e:f0:cf:b5:ea:ae:
                    8c:66:59:20:16:de:fd:af:2e:ef:ce:13:17:25:92:
                    d9:5b:b1:d0:3e:9a:15:7c:a5:10:97:db:c4:9e:2e:
                    21:96:db:23:f2:2b:7d:a4:23:a5:42:94:10:2f:0a:
                    c5:66:28:aa:48:a5:3a:8d:3c:13:07:5d:2b:7a:d7:
                    24:dc:b7:b1:aa:7d:37:20:04:90:74:8c:02:3f:21:
                    21:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:31:AB:50:DB:BA:13:0E:24:84:FE:8F:B1:24:6E:8C:9C:19:47:B0
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a663030303a3a2f33372d3337203d3e20323130323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:f000::/37

    Signature Algorithm: sha256WithRSAEncryption
         4e:62:16:fa:46:6e:eb:1b:33:69:2a:bd:8a:fa:43:23:2d:73:
         c5:1e:4e:ae:f4:79:dc:c6:ee:31:10:27:e8:dd:bf:32:99:6b:
         88:de:af:00:fd:8d:77:98:b4:49:ea:95:f9:50:84:7f:fe:b5:
         3b:42:58:36:8b:82:aa:43:92:29:b8:00:29:f3:69:fc:ad:45:
         2e:9e:e4:ba:d1:21:97:94:ce:2a:01:36:0b:ec:3e:66:9d:6c:
         9b:51:e0:0a:18:53:9f:16:e8:6b:75:a1:eb:d9:40:fc:a9:cf:
         bb:ec:e4:15:33:36:90:76:a8:9c:36:24:ce:06:d4:55:46:3f:
         b7:83:85:76:00:c9:f2:25:8b:90:4b:d0:6a:09:15:cd:8c:a2:
         aa:e2:7c:0f:2b:7e:d7:04:5a:ad:98:da:cc:ca:59:2f:62:83:
         ef:22:f3:2c:f2:18:f4:dc:28:95:13:44:5a:c8:7f:37:a4:11:
         0c:ed:79:c9:47:b4:1e:a6:1e:52:08:d8:df:bd:9b:89:73:fa:
         05:74:f4:c7:68:bb:15:16:7a:b7:fa:be:d1:4c:c9:df:87:19:
         9f:08:20:1f:8d:8e:55:36:21:dc:0e:5c:65:b1:a6:61:fc:c1:
         9f:93:63:b6:42:50:15:6a:46:a0:8a:1b:38:da:9d:1b:0f:6c:
         76:0f:97:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----