Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e20383334.roa
File:                     34352e3133352e3136302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          gLV3resIGsMFDeFvdu4DImYlqjyUax5BVt0NWSb26vc=
Subject key identifier:   6D:9C:72:F7:7E:B8:BC:1B:DC:F0:49:4D:13:FB:02:71:3D:CC:88:86
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       014F892049CF46538A558CE353EBE27A1D0582A2
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e20383334.roa
Signing time:             Fri 25 Aug 2023 14:31:34 +0000
ROA not before:           Fri 25 Aug 2023 14:26:34 +0000
ROA not after:            Fri 23 Aug 2024 14:31:34 +0000
asID:                     834
IP address blocks:        45.135.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4f:89:20:49:cf:46:53:8a:55:8c:e3:53:eb:e2:7a:1d:05:82:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Aug 25 14:26:34 2023 GMT
            Not After : Aug 23 14:31:34 2024 GMT
        Subject: CN=6D9C72F77EB8BC1BDCF0494D13FB02713DCC8886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b9:71:be:4e:4d:ca:b4:ec:80:e5:ae:a6:16:
                    00:09:2d:86:4e:b3:78:47:60:c7:ce:99:11:e2:03:
                    f9:f3:e1:d1:d7:53:e9:eb:9a:2e:a7:c7:34:d9:bd:
                    38:40:6b:0c:6a:7b:35:6f:71:06:19:8a:5f:a1:d6:
                    ac:65:46:1e:77:bb:68:80:5d:5a:b6:e3:a1:c6:bf:
                    ee:40:a4:95:91:54:4b:35:ca:f6:4e:ab:32:33:06:
                    53:d8:12:29:4a:a3:7a:94:b8:1c:cc:4f:30:e9:a7:
                    15:9c:aa:51:66:60:a4:aa:c3:a2:93:00:9b:b7:97:
                    8b:a7:51:71:6a:db:d5:ef:73:5e:f6:1b:e7:5d:94:
                    e6:df:b3:91:b7:b8:86:32:e3:d1:2e:b6:be:23:f8:
                    67:92:f9:ce:84:61:19:1e:f1:8f:4b:c6:ce:d2:c0:
                    23:8e:f3:26:2e:f9:e0:d5:71:97:dc:cb:f3:7f:69:
                    e9:52:45:a6:b0:2d:ff:8f:ba:79:e6:fb:c1:97:35:
                    92:d5:c3:0e:8b:84:50:c0:41:b7:c1:df:ca:21:45:
                    4e:2d:00:8e:80:a5:1c:e4:69:da:4a:f5:3f:1a:2d:
                    e2:dd:5f:9a:b3:7c:c0:af:e8:f1:9d:f5:94:af:ee:
                    20:39:8c:9a:28:85:ca:51:4b:a9:1b:e9:bd:0e:fb:
                    90:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9C:72:F7:7E:B8:BC:1B:DC:F0:49:4D:13:FB:02:71:3D:CC:88:86
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:83:cb:1c:1d:2a:f7:2a:e8:8c:a2:ed:db:29:8e:e3:db:f4:
         17:23:66:37:bc:f4:24:8b:84:67:ec:6c:c4:ef:67:36:a9:25:
         50:74:d7:18:16:db:98:df:9a:f7:60:dd:38:97:6b:5d:57:37:
         2b:9c:a2:05:ca:fe:ef:35:28:bc:0a:a2:f3:e5:8f:f2:00:8a:
         87:07:da:74:f6:f8:f8:00:48:54:cb:3a:e5:61:db:7c:aa:c8:
         f2:22:a7:d8:85:63:f6:54:a4:54:af:98:f1:95:1e:af:6c:43:
         84:3c:39:5a:1e:3b:45:33:ac:96:f8:13:d5:df:39:48:3d:3a:
         c8:83:05:db:e7:7b:b5:f9:56:4d:1b:cc:78:63:e3:94:09:84:
         49:65:9d:f1:06:89:a6:f0:fa:fd:ce:ac:b5:53:e8:fa:97:41:
         9f:67:a1:d6:27:f5:2c:af:97:4f:37:60:57:b4:fc:86:6b:4c:
         10:a5:03:93:38:a3:87:26:f5:e2:91:3d:d3:6a:f9:94:c3:87:
         5e:88:b3:4e:50:a9:fa:5f:08:bf:04:6c:31:98:ce:b0:87:ac:
         fa:8c:4e:f1:83:ee:69:90:38:92:d3:9e:26:4a:23:f5:a7:3c:
         49:77:f3:17:84:0c:c1:5d:6d:21:57:59:5d:49:a8:4d:c0:0f:
         bb:ec:04:6a
-----BEGIN CERTIFICATE-----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