Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS203888.roa
File:                     AS203888.roa (raw, json)
Hash identifier:          iRtojn9jf0X/3ZcAoygX6mQvvIEt9Sr0fzqpM5hUIZE=
Subject key identifier:   6D:B7:0E:30:BA:38:23:5E:AF:23:81:FB:22:BC:0D:DA:24:A9:16:C6
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       609916ADEDEEEAC4318FDC97A882AED207216F93
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS203888.roa
Signing time:             Thu 06 Jul 2023 11:17:09 +0000
ROA not before:           Thu 06 Jul 2023 11:12:09 +0000
ROA not after:            Thu 04 Jul 2024 11:17:09 +0000
asID:                     203888
IP address blocks:        2a05:dfc7:6400::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:99:16:ad:ed:ee:ea:c4:31:8f:dc:97:a8:82:ae:d2:07:21:6f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:09 2023 GMT
            Not After : Jul  4 11:17:09 2024 GMT
        Subject: CN=6DB70E30BA38235EAF2381FB22BC0DDA24A916C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:04:2e:ca:25:ff:7e:77:be:64:47:07:8a:6d:
                    2b:96:9e:08:c4:75:2e:17:9a:c6:7c:8e:f2:50:a7:
                    ad:d6:4b:98:89:4e:5d:06:d8:6c:4d:7b:f4:e8:48:
                    23:78:20:9c:a0:1d:24:dc:34:05:36:89:6f:d9:ae:
                    0d:df:29:41:31:05:5e:db:25:07:85:e6:3b:46:9e:
                    3c:e1:41:7b:89:52:e8:13:21:39:1d:85:ca:29:40:
                    af:9f:84:1c:99:0a:42:a6:dc:9f:39:f8:c4:b1:06:
                    55:48:54:27:f9:26:3a:a2:83:ef:7a:22:9c:80:1a:
                    92:60:b1:39:4c:08:d9:6f:e2:91:88:8d:0b:c0:ef:
                    d6:92:f5:06:06:ef:33:63:31:44:f2:e2:21:71:8f:
                    f0:a9:1e:00:60:19:17:99:dd:46:62:6e:a6:07:68:
                    99:83:6c:86:68:c4:aa:c7:b1:02:d3:63:ba:c4:fe:
                    a3:ce:ba:78:11:a7:89:d4:81:ae:27:34:09:e0:a1:
                    db:b1:87:dd:cf:b3:5c:ce:bd:cb:3b:4e:04:e5:3d:
                    e8:ce:5d:f2:b5:bb:1d:0f:fe:c2:d4:82:19:08:03:
                    14:51:eb:a8:f1:f9:7e:9f:68:92:5b:6f:e4:13:14:
                    f9:db:b5:c4:dd:ad:3f:f8:75:c3:d6:dc:95:1c:f5:
                    05:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B7:0E:30:BA:38:23:5E:AF:23:81:FB:22:BC:0D:DA:24:A9:16:C6
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS203888.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:6400::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:59:fa:6b:df:15:62:9a:af:99:ad:bf:05:a1:25:55:1c:f0:
         31:e3:0f:2d:3d:93:54:c2:81:00:cc:41:03:3a:e4:40:c2:c5:
         26:b9:4a:02:57:22:20:02:7c:c6:79:54:73:18:41:87:44:25:
         d3:2b:41:42:2f:1b:04:28:1d:67:08:ba:0e:e2:c4:b5:ab:8d:
         29:4b:e9:9a:e8:bb:1a:d3:b3:cf:59:f6:31:09:ea:ba:9d:50:
         71:fa:1c:08:ea:0a:0e:1e:c8:ae:13:0c:1d:b4:fa:88:6a:9b:
         55:a6:d9:c9:e8:68:c3:1f:b7:ec:db:bb:df:ea:b5:d1:c1:6e:
         00:52:e6:cf:67:30:98:d4:4c:6c:be:93:43:32:e7:ea:e9:56:
         b0:fb:25:7d:fe:55:80:90:76:7d:9f:1e:43:6a:01:c8:61:79:
         b5:ca:de:98:ed:57:52:4e:78:c2:b5:73:f4:fb:39:5b:0e:b5:
         4e:c0:5f:e6:dd:0b:b8:65:88:0b:b1:e6:36:8f:66:d1:c9:d2:
         60:ef:8f:67:3f:dc:94:e8:62:34:5a:a3:3e:de:68:cf:fa:05:
         b1:7e:90:73:db:33:c5:32:d0:1a:3f:cf:c0:08:f9:7b:ff:44:
         13:81:bc:06:91:7e:38:d0:86:e5:ee:4c:40:dd:70:cb:99:07:
         2b:c0:6a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----