Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a663830303a3a2f33392d3438203d3e20323031303937.roa
File:                     326130363a313238373a663830303a3a2f33392d3438203d3e20323031303937.roa (raw, json)
Hash identifier:          JxQacumDkjRHjAGYPSpXX4kFnrY5tkIuUkVhi7VbO74=
Subject key identifier:   BC:B2:6D:64:42:66:7E:27:EA:87:B2:24:EA:A3:F5:F8:9C:3E:C2:E3
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       28DF2B35E7629A7992F0A291E56678F793CB7483
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a663830303a3a2f33392d3438203d3e20323031303937.roa
Signing time:             Fri 14 Apr 2023 01:46:54 +0000
ROA not before:           Fri 14 Apr 2023 01:41:54 +0000
ROA not after:            Fri 12 Apr 2024 01:46:54 +0000
asID:                     201097
IP address blocks:        2a06:1287:f800::/39 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:df:2b:35:e7:62:9a:79:92:f0:a2:91:e5:66:78:f7:93:cb:74:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:41:54 2023 GMT
            Not After : Apr 12 01:46:54 2024 GMT
        Subject: CN=BCB26D6442667E27EA87B224EAA3F5F89C3EC2E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:83:22:de:ae:2d:42:d8:84:34:e3:f9:5b:7e:
                    d1:af:90:c9:4d:be:f0:f3:c0:b4:7b:dd:5e:a0:03:
                    92:1d:8a:7a:a8:8e:87:44:4a:5e:74:21:f3:4c:dd:
                    7e:96:93:0c:15:5d:c9:da:03:bf:d1:f3:4f:7c:7f:
                    3f:0d:fa:c2:0a:ee:b4:64:7f:fb:92:40:42:8b:1b:
                    c4:01:51:19:d6:5d:23:45:cd:6d:e8:44:e4:06:72:
                    67:7c:67:b3:b3:10:a7:88:54:db:a2:e9:0b:ee:c8:
                    20:e9:1f:c2:09:dd:93:57:73:1d:b8:4d:7f:74:68:
                    ea:9a:e7:ca:f4:91:f5:ad:05:a5:a7:0a:50:59:c2:
                    28:02:1b:68:97:dc:b1:17:8a:bc:a9:01:1a:08:5f:
                    6d:5c:a9:75:84:6b:09:ab:68:a4:1b:e6:d7:99:e8:
                    b4:77:ef:27:39:7a:ee:4b:f5:f1:fb:a8:4c:56:a3:
                    33:a5:73:da:9f:21:ec:2f:a2:38:26:24:f9:6e:1d:
                    a3:42:f7:bf:69:a3:68:2c:41:41:8a:b1:84:27:ce:
                    f5:2c:e8:af:c0:40:e7:67:eb:c8:07:9e:10:ed:1f:
                    80:7b:f6:32:86:ce:96:8d:b5:35:5e:dc:61:64:af:
                    48:42:bb:68:28:aa:65:b3:19:8a:a0:f1:96:98:4c:
                    a3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B2:6D:64:42:66:7E:27:EA:87:B2:24:EA:A3:F5:F8:9C:3E:C2:E3
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a663830303a3a2f33392d3438203d3e20323031303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:f800::/39

    Signature Algorithm: sha256WithRSAEncryption
         8e:05:06:b7:3e:22:6b:ed:86:f9:36:62:c1:28:28:f0:09:a5:
         95:63:84:fe:e4:be:ce:d1:7b:c6:e3:2b:8e:60:6e:5e:66:29:
         03:ab:eb:1d:8a:56:10:34:6f:a3:25:a0:6b:ce:df:14:78:1f:
         76:7f:a0:bc:13:90:ad:08:b3:f3:17:1b:70:4a:18:7f:b9:6d:
         c0:bb:51:a2:b5:ed:21:4e:76:dc:01:21:fb:31:a7:8a:54:a9:
         7c:d7:47:df:93:d2:8a:a9:02:ef:e5:5d:0c:0f:e1:7a:51:91:
         96:bd:bc:97:f9:a5:52:04:a5:10:da:93:84:42:d4:d0:68:0c:
         02:f3:c0:0c:45:9d:84:a6:d4:39:b4:fb:80:f4:84:82:3a:fc:
         9e:7b:3d:30:e8:49:61:07:98:0b:31:3c:06:bc:83:ee:45:e6:
         82:d9:42:54:28:3f:86:07:c9:18:3f:b7:93:db:68:3e:07:b9:
         70:5c:5b:ac:34:5d:72:95:1a:ad:bf:e9:17:35:72:ae:43:54:
         ec:ef:62:d1:33:a7:7e:91:04:60:85:c1:1f:7f:3c:66:bc:a7:
         fe:d4:64:e7:04:36:61:d4:ed:0a:56:b1:34:c4:43:dc:f4:b2:
         1a:50:f9:1d:50:63:5a:0e:a2:84:0d:3b:ae:38:08:22:57:a1:
         14:76:b6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----