Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a396634353a313230303a3a2f34302d3430203d3e20323131343830.roa
File:                     326130363a396634353a313230303a3a2f34302d3430203d3e20323131343830.roa (raw, json)
Hash identifier:          wRj7/ja5Yp1D6r/8cO1vIPS0WRSAdG5WzS7QfTl3a10=
Subject key identifier:   5B:29:F1:C3:78:4C:AC:08:04:1A:05:DF:35:4C:94:FC:71:D3:FC:08
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       52FC1FB62961E08CE2C1561F39D1B76DE85186BF
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a396634353a313230303a3a2f34302d3430203d3e20323131343830.roa
Signing time:             Fri 14 Apr 2023 01:57:22 +0000
ROA not before:           Fri 14 Apr 2023 01:52:22 +0000
ROA not after:            Fri 12 Apr 2024 01:57:22 +0000
asID:                     211480
IP address blocks:        2a06:9f45:1200::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fc:1f:b6:29:61:e0:8c:e2:c1:56:1f:39:d1:b7:6d:e8:51:86:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:52:22 2023 GMT
            Not After : Apr 12 01:57:22 2024 GMT
        Subject: CN=5B29F1C3784CAC08041A05DF354C94FC71D3FC08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1a:be:d1:ea:05:64:80:95:61:d0:75:83:69:
                    90:87:ef:03:ab:0d:34:be:ef:97:9a:00:f2:c5:cc:
                    61:72:56:28:f2:76:cf:3a:03:d6:bd:5e:b8:0a:60:
                    4f:72:00:c9:f7:b8:40:e3:64:ad:46:9c:f1:67:ca:
                    b0:fd:bd:e6:a2:34:37:53:fd:03:f9:c6:d7:d4:84:
                    58:18:b1:1a:9b:0d:db:a6:27:0f:03:3e:b8:58:bc:
                    6d:9b:dc:90:95:99:5e:35:ea:4e:ac:c0:c9:1a:52:
                    1c:28:81:3e:63:aa:0a:b4:c4:6d:19:40:e5:ac:9b:
                    e8:83:c9:3a:6b:9b:37:a2:1e:54:ba:08:01:0e:90:
                    d5:93:00:58:30:96:1f:25:6c:88:0a:26:df:a1:91:
                    f4:a1:8c:cb:53:7a:f3:aa:23:93:71:7d:20:22:50:
                    93:66:be:d0:34:6a:b1:ec:d2:95:5c:73:b2:59:df:
                    11:f8:9a:b3:80:8e:50:63:b3:a5:34:3a:a3:19:7b:
                    f5:32:f6:74:d4:64:94:8b:99:37:02:65:10:4d:fe:
                    ce:2d:f9:61:4a:05:9a:93:10:ac:49:4d:9a:03:c7:
                    a7:ae:7a:11:9a:9f:66:a5:ed:5c:38:6b:42:23:63:
                    4f:c7:09:5d:79:38:93:5f:5a:46:a3:e9:73:40:70:
                    1b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:29:F1:C3:78:4C:AC:08:04:1A:05:DF:35:4C:94:FC:71:D3:FC:08
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a396634353a313230303a3a2f34302d3430203d3e20323131343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f45:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:24:99:0d:ae:3c:87:f9:2e:21:a1:6b:25:52:68:7d:3e:28:
         0b:df:36:8a:61:c7:f0:de:51:0f:1d:c1:ef:fe:5b:16:46:cb:
         71:43:3d:74:6c:18:bc:51:a6:e1:cf:29:65:21:74:9f:16:f9:
         e8:08:32:04:ec:12:1b:90:7e:45:79:c1:82:3c:b7:5f:13:0c:
         44:4a:c9:86:18:ac:1d:47:ff:0e:68:e4:16:92:c6:68:4e:29:
         ca:c7:60:cd:c4:e0:89:26:24:c1:b0:51:e9:f4:79:23:ed:e1:
         9f:7a:ae:bc:40:4b:c2:8d:ed:48:47:3a:54:5c:37:e3:55:3d:
         72:95:bb:13:87:d4:88:33:d1:e1:61:5d:32:09:0c:8d:cc:02:
         64:b5:c6:02:9e:d1:b6:7d:dd:94:b1:5c:a8:fd:7d:c9:fc:eb:
         9d:6a:4b:d9:91:db:01:09:ed:26:47:ce:51:15:f6:e2:a9:91:
         d1:d9:a3:36:11:86:cc:26:50:64:8d:36:c6:29:df:dd:62:b5:
         70:65:b2:f2:42:7a:c9:93:01:68:6a:59:79:43:17:82:05:79:
         1f:a7:45:55:48:5e:2a:6d:9e:99:2b:e4:94:64:af:aa:1a:82:
         76:74:2d:6d:2d:78:19:86:ed:c0:32:45:22:98:ce:33:a9:0e:
         31:9a:ca:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----