Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/54/32332e3133392e3232342e302f32342d3234203d3e20313334313736.roa
File:                     32332e3133392e3232342e302f32342d3234203d3e20313334313736.roa (raw, json)
Hash identifier:          HYQX7kqql9V90FAiTogAOVgs//k2v1z1xGDuOswq+sQ=
Subject key identifier:   CD:6A:77:2A:2A:BA:0A:7C:21:E0:0E:30:7E:E1:49:2F:24:72:29:B4
Certificate issuer:       /CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42
Certificate serial:       70FA1C202252A626B4567B07396406FC9E126D7B
Authority key identifier: 0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/54/32332e3133392e3232342e302f32342d3234203d3e20313334313736.roa
Signing time:             Thu 12 Oct 2023 16:10:40 +0000
ROA not before:           Thu 12 Oct 2023 16:05:40 +0000
ROA not after:            Thu 10 Oct 2024 16:10:40 +0000
asID:                     134176
IP address blocks:        23.139.224.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 01 Feb 2024 15:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fa:1c:20:22:52:a6:26:b4:56:7b:07:39:64:06:fc:9e:12:6d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42
        Validity
            Not Before: Oct 12 16:05:40 2023 GMT
            Not After : Oct 10 16:10:40 2024 GMT
        Subject: CN=CD6A772A2ABA0A7C21E00E307EE1492F247229B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:96:2b:e5:b3:38:64:4b:32:df:2b:c5:cc:f5:
                    f0:cf:fc:a4:d7:ab:d6:53:17:95:de:c7:6c:24:7f:
                    36:85:3c:28:94:3f:75:84:4d:55:06:16:cc:32:50:
                    d5:99:c1:47:d9:dd:fd:52:40:af:e0:51:3d:be:57:
                    44:19:99:2c:35:b1:14:6f:4b:31:40:ba:a0:2b:67:
                    f9:61:e6:12:4f:ea:df:39:17:b9:8c:b8:cb:36:6d:
                    f6:ed:1c:b1:ec:61:82:96:dc:60:b5:00:62:2e:02:
                    33:5e:85:63:97:3b:05:4d:c0:07:1c:42:95:02:51:
                    09:6d:4a:f4:8c:64:d1:5b:61:28:91:db:4e:5f:04:
                    45:64:da:03:3a:92:39:1f:dd:60:a0:9f:76:3c:45:
                    13:c4:60:11:60:f2:96:a6:4a:65:2c:37:d5:91:b3:
                    03:6a:af:d1:1b:70:38:62:dc:0e:79:c8:e7:20:21:
                    ac:4d:03:2b:ab:ab:f4:16:64:31:4c:e0:46:88:0c:
                    08:8c:e6:31:56:6d:40:88:fa:63:46:ac:75:7c:d3:
                    71:d1:46:ed:43:bf:c3:e3:ff:ac:4d:29:18:5f:c9:
                    58:b5:a3:ae:3d:02:0f:1d:09:e6:d9:38:bd:29:25:
                    ab:61:ef:35:e0:4d:06:3e:2e:b9:93:ad:54:63:85:
                    a8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6A:77:2A:2A:BA:0A:7C:21:E0:0E:30:7E:E1:49:2F:24:72:29:B4
            X509v3 Authority Key Identifier:
                keyid:0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/54/32332e3133392e3232342e302f32342d3234203d3e20313334313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:55:70:ad:ba:52:d7:67:d0:57:3d:3e:ea:d5:de:6b:31:57:
         87:aa:f8:e9:1d:e2:f1:9c:9b:ea:4a:0b:1b:e8:54:36:b9:d0:
         2d:61:8d:d9:94:f5:5c:dd:50:d1:ff:21:ce:98:d0:a9:01:25:
         81:eb:2e:45:11:bc:63:39:57:05:4c:a6:f2:e1:b5:66:91:65:
         14:64:24:42:69:a9:46:40:fe:6e:17:5e:92:ae:11:2c:3e:2b:
         8f:b9:eb:39:92:ef:a6:af:f7:79:75:ce:a3:59:63:62:c0:a0:
         99:f2:21:96:4d:70:5a:05:ce:cb:7e:18:a8:fc:3c:8b:c4:6a:
         81:57:05:c6:51:71:7d:16:1e:b2:d8:58:83:e2:b1:3d:37:7b:
         f6:a3:e2:fd:39:cd:63:5a:1f:e7:00:f0:f9:13:f2:11:26:47:
         2f:04:09:6a:da:a2:78:90:aa:6d:b6:bd:c7:28:0d:68:eb:76:
         7a:e9:90:86:bb:f4:3e:11:21:a7:f4:b0:f3:c6:16:be:43:12:
         2a:d7:73:d5:fb:ff:c7:9a:ce:68:61:dd:8c:73:c1:d0:a7:c4:
         0d:a1:4a:87:f4:b1:7b:92:39:76:c3:c3:6e:0d:e8:84:52:b1:
         be:0b:d4:3d:dd:3e:3a:19:f1:c8:2f:fd:c9:9c:35:5b:7a:45:
         74:b2:48:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----