Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a396634353a323830303a3a2f33372d3337203d3e20323035393830.roa
File:                     326130363a396634353a323830303a3a2f33372d3337203d3e20323035393830.roa (raw, json)
Hash identifier:          WTG7NFg6dXXQLtimDlpNohrHdsVLFGuDvVFa2UBdm18=
Subject key identifier:   96:11:8A:B3:C9:F9:39:90:07:FB:EC:08:82:EC:7E:8C:5C:80:06:C6
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       240D80EE2067E12650E835E085016C773EFF6A59
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a396634353a323830303a3a2f33372d3337203d3e20323035393830.roa
Signing time:             Fri 14 Apr 2023 01:55:21 +0000
ROA not before:           Fri 14 Apr 2023 01:50:21 +0000
ROA not after:            Fri 12 Apr 2024 01:55:21 +0000
asID:                     205980
IP address blocks:        2a06:9f45:2800::/37 maxlen: 37

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0d:80:ee:20:67:e1:26:50:e8:35:e0:85:01:6c:77:3e:ff:6a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:50:21 2023 GMT
            Not After : Apr 12 01:55:21 2024 GMT
        Subject: CN=96118AB3C9F9399007FBEC0882EC7E8C5C8006C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:03:66:ce:ae:27:46:10:42:18:ac:f1:e3:3a:
                    1f:ba:7b:6d:9e:3a:55:1f:cb:e5:a3:7a:2d:05:ee:
                    b8:c5:9e:55:ed:99:68:47:1b:0f:d0:27:68:55:be:
                    96:84:82:03:1d:af:2b:38:38:6b:84:ab:6f:99:50:
                    f3:7b:6f:bf:3e:33:54:88:25:02:de:1f:4e:9a:5f:
                    84:5e:4f:5f:48:9d:f0:d8:71:6e:a7:df:aa:0f:38:
                    5d:a8:97:f3:b7:72:90:1c:04:1d:5a:55:d2:32:be:
                    00:db:17:b5:7c:a1:d3:f6:d7:b4:09:3c:35:cf:d1:
                    f4:e3:14:b9:aa:33:a5:11:73:c9:d8:71:8b:8c:58:
                    47:08:45:01:31:8d:c7:86:6c:63:f2:46:ba:49:55:
                    f8:35:26:f0:ce:ba:ca:5f:92:a6:cd:22:b9:bf:4a:
                    a7:2b:b7:fc:80:30:38:68:5d:93:aa:57:c2:a6:a6:
                    28:47:99:c5:8a:47:1c:4e:93:a5:f9:6e:96:d9:d9:
                    bd:d9:06:ea:0f:53:56:ac:2b:55:ac:08:04:bd:d1:
                    fc:01:17:26:81:9a:99:c3:e0:ef:22:d2:25:a9:c8:
                    4a:7f:d9:58:e8:a2:31:01:6f:e4:93:3b:85:62:e1:
                    9f:41:0a:7e:cc:fa:78:d8:9c:32:76:d2:ad:54:84:
                    ca:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:11:8A:B3:C9:F9:39:90:07:FB:EC:08:82:EC:7E:8C:5C:80:06:C6
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a396634353a323830303a3a2f33372d3337203d3e20323035393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f45:2800::/37

    Signature Algorithm: sha256WithRSAEncryption
         11:4d:1d:72:6a:6a:aa:be:03:8d:78:61:ad:ef:b9:9d:18:97:
         8f:f7:77:4b:70:98:48:b3:60:14:b1:1d:d1:81:8a:43:ad:6b:
         f6:14:b3:ed:38:11:f0:c7:13:ee:1f:e2:99:e7:52:f9:05:bc:
         fc:72:40:82:70:9d:ee:fb:8a:77:5d:9b:c6:f5:92:5d:b0:d1:
         7f:1e:d4:1f:2b:3a:bd:f4:f3:fe:57:4f:6d:08:c3:2b:4c:75:
         fd:3d:f6:10:cd:a9:8f:b6:a5:7a:b4:14:08:b8:63:c7:f7:58:
         4b:03:b1:b1:bd:30:df:6c:b6:9e:6c:74:b3:9c:63:5c:28:4b:
         3e:0d:b8:2d:7e:9a:e1:2c:44:c4:b5:c4:f1:1a:53:7b:f5:cb:
         18:c3:43:5f:e4:45:d8:0a:d8:da:5e:4e:49:b6:91:ba:46:47:
         db:44:4d:24:bc:08:5c:0c:62:f9:9b:60:75:42:cc:22:87:be:
         7f:0f:08:7c:26:80:7b:b3:d0:22:cc:56:93:fa:92:80:b3:e8:
         9b:8e:24:5d:a8:a2:c8:06:9d:63:0b:c3:55:c7:12:9b:cb:99:
         fd:f5:15:31:9d:2e:cf:61:c0:5c:12:34:c0:06:fe:eb:3c:65:
         60:d7:65:5a:da:d8:b7:53:26:83:b6:da:81:e8:ca:47:d4:94:
         e6:e9:1a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----