Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS202736.roa
File:                     AS202736.roa (raw, json)
Hash identifier:          tFntw4YsNFpZoOt33Xpb7baGFBSu6DMEf0D9gmgC7kk=
Subject key identifier:   5F:D3:58:9B:2C:79:D6:5B:75:64:68:4A:AE:E2:91:13:0E:42:87:F4
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       5988683C24206D6454E8E33B029A2D10F382F7D7
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS202736.roa
Signing time:             Thu 06 Jul 2023 11:17:17 +0000
ROA not before:           Thu 06 Jul 2023 11:12:17 +0000
ROA not after:            Thu 04 Jul 2024 11:17:17 +0000
asID:                     202736
IP address blocks:        2a06:1287:7000::/39 maxlen: 39

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:88:68:3c:24:20:6d:64:54:e8:e3:3b:02:9a:2d:10:f3:82:f7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:17 2023 GMT
            Not After : Jul  4 11:17:17 2024 GMT
        Subject: CN=5FD3589B2C79D65B7564684AAEE291130E4287F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:87:8a:a0:87:d4:d1:5d:6a:e3:9a:cc:d4:1c:
                    a3:c7:a5:47:8b:42:7c:75:4f:4c:5e:9c:b2:8f:2b:
                    40:11:b1:5b:34:99:65:78:3f:f7:8c:37:fb:23:6c:
                    b8:c1:f8:bc:4f:97:14:09:86:68:34:a9:90:f1:bf:
                    e1:d1:a6:bc:92:91:90:a8:a4:21:46:92:31:d1:76:
                    58:34:2b:b5:ae:26:a0:2a:f2:37:a8:82:6e:9e:4d:
                    f6:fe:74:71:fd:81:fa:23:f0:dd:61:cc:d4:33:3f:
                    6d:9b:18:7d:c0:79:5b:ab:48:89:bc:80:98:fe:2e:
                    1d:af:1f:b8:68:12:ed:69:08:44:8a:f7:da:d5:1a:
                    57:f2:14:aa:81:be:85:81:a6:b3:1c:a7:dd:19:b4:
                    f7:df:f3:ac:5c:16:d8:49:3b:29:3d:90:53:40:4e:
                    ce:ce:53:cf:18:67:04:37:4d:29:09:90:eb:71:ff:
                    d0:f9:2a:16:e4:bb:6e:3a:01:cf:37:e8:df:8a:e8:
                    2a:8d:f3:47:d7:7b:e3:fa:ae:0c:e1:69:84:e3:db:
                    e2:b5:49:01:1b:bf:a7:ba:ad:94:18:a6:bc:58:be:
                    81:3a:1c:3d:af:13:6a:ac:71:ad:fc:d9:04:8d:09:
                    5c:08:ad:07:a9:c5:6b:a4:cb:b2:9e:af:57:45:07:
                    25:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D3:58:9B:2C:79:D6:5B:75:64:68:4A:AE:E2:91:13:0E:42:87:F4
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS202736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:7000::/39

    Signature Algorithm: sha256WithRSAEncryption
         21:ba:43:96:0d:cf:ad:a0:7c:04:e8:11:b0:b4:d4:87:c0:fc:
         62:dd:1b:e2:04:0c:c0:95:3b:cb:d3:76:34:5a:5b:ac:61:e1:
         0a:0c:c1:03:50:bd:bc:1c:47:20:c4:d2:a5:56:16:a0:79:a9:
         05:fc:85:fc:97:5e:d8:7e:a3:93:ca:1f:fd:39:6e:c5:fd:64:
         c0:ef:1c:08:84:0f:4d:43:42:be:84:8d:c3:6e:21:c5:75:a8:
         a1:57:02:f1:eb:5b:f9:73:5a:6a:7e:40:bd:fc:ea:03:59:10:
         8f:67:6e:78:31:d4:d6:59:ff:89:d2:c0:50:6b:fa:0e:79:d4:
         3f:83:43:93:d2:b0:7d:54:cd:54:26:88:d0:b7:96:df:11:30:
         bd:f6:00:31:e2:ea:43:68:85:c3:b2:7e:15:f4:0d:71:18:31:
         5d:cb:7f:33:79:f5:be:35:60:39:f3:20:8d:99:e0:dd:b1:ee:
         16:3e:b9:96:3f:b8:f1:99:c1:ec:27:71:94:3e:2d:6a:05:69:
         30:a8:92:42:7f:20:3b:d8:74:bd:4a:f3:5f:f2:a1:55:04:8b:
         7a:d8:5b:b1:3b:c9:ea:e2:de:05:b2:8c:50:4f:60:2d:ce:af:
         fd:d1:a3:36:79:ba:37:06:2e:ac:e7:06:8d:dc:b2:76:ef:41:
         39:35:eb:4e
-----BEGIN CERTIFICATE-----
MIIExjCCA66gAwIBAgIUWYhoPCQgbWRU6OM7ApotEPOC99cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA3MDYxMTEyMTdaFw0yNDA3MDQxMTE3MTdaMDMxMTAvBgNV
BAMTKDVGRDM1ODlCMkM3OUQ2NUI3NTY0Njg0QUFFRTI5MTEzMEU0Mjg3RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCih4qgh9TRXWrjmszUHKPHpUeL
Qnx1T0xenLKPK0ARsVs0mWV4P/eMN/sjbLjB+LxPlxQJhmg0qZDxv+HRprySkZCo
pCFGkjHRdlg0K7WuJqAq8jeogm6eTfb+dHH9gfoj8N1hzNQzP22bGH3AeVurSIm8
gJj+Lh2vH7hoEu1pCESK99rVGlfyFKqBvoWBprMcp90ZtPff86xcFthJOyk9kFNA
Ts7OU88YZwQ3TSkJkOtx/9D5Khbku246Ac836N+K6CqN80fXe+P6rgzhaYTj2+K1
SQEbv6e6rZQYprxYvoE6HD2vE2qsca382QSNCVwIrQepxWuky7Ker1dFByWFAgMB
AAGjggHQMIIBzDAdBgNVHQ4EFgQUX9NYmyx51lt1ZGhKruKREw5Ch/QwHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
SAYIKwYBBQUHAQsEPDA6MDgGCCsGAQUFBzALhixyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wL0FTMjAyNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKgYSh3AwDQYJKoZIhvcN
AQELBQADggEBACG6Q5YNz62gfAToEbC01IfA/GLdG+IEDMCVO8vTdjRaW6xh4QoM
wQNQvbwcRyDE0qVWFqB5qQX8hfyXXth+o5PKH/05bsX9ZMDvHAiED01DQr6EjcNu
IcV1qKFXAvHrW/lzWmp+QL386gNZEI9nbngx1NZZ/4nSwFBr+g551D+DQ5PSsH1U
zVQmiNC3lt8RML32ADHi6kNohcOyfhX0DXEYMV3LfzN59b41YDnzII2Z4N2x7hY+
uZY/uPGZwewncZQ+LWoFaTCokkJ/IDvYdL1K81/yoVUEi3rYW7E7yeri3gWyjFBP
YC3Or/3RozZ5ujcGLqznBo3csnbvQTk1604=
-----END CERTIFICATE-----