Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136322e302f32342d3234203d3e20323131353835.roa
File:                     34352e3133352e3136322e302f32342d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          ChcjFj8wkC8cr4pON+v+D6rAQduWuR6z7lMH2S1BNF4=
Subject key identifier:   88:1E:DF:99:38:84:F1:E1:5E:1C:5A:12:AD:29:60:BC:65:6B:AB:33
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       31C7E35D2E9F4E9CC2EF6D2FD641E7022AC765B7
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136322e302f32342d3234203d3e20323131353835.roa
Signing time:             Mon 09 Jan 2023 11:09:04 +0000
ROA not before:           Mon 09 Jan 2023 11:04:04 +0000
ROA not after:            Mon 08 Jan 2024 11:09:04 +0000
asID:                     211585
IP address blocks:        45.135.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c7:e3:5d:2e:9f:4e:9c:c2:ef:6d:2f:d6:41:e7:02:2a:c7:65:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jan  9 11:04:04 2023 GMT
            Not After : Jan  8 11:09:04 2024 GMT
        Subject: CN=881EDF993884F1E15E1C5A12AD2960BC656BAB33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fa:74:3d:92:7f:bd:b2:0a:7d:02:3e:41:77:
                    56:3e:ef:ad:12:3f:b5:45:c2:9b:1f:58:50:95:61:
                    1d:d9:e9:41:d4:41:66:f2:69:37:d8:fa:f5:ee:2a:
                    fb:61:29:7a:b2:20:26:9e:04:b3:11:c0:de:71:6a:
                    13:81:5b:c6:c8:3a:ad:20:43:4f:e4:20:99:38:84:
                    12:a9:ad:67:51:40:8a:11:d3:32:34:db:70:e9:2e:
                    de:60:f4:a8:d3:b5:d3:da:0c:df:6d:6e:49:27:40:
                    b8:39:f4:f7:96:12:54:15:bf:d8:69:97:ac:19:3e:
                    f1:f6:d4:9d:79:9b:ca:54:2f:5e:ce:1b:b5:00:13:
                    d7:e7:fc:82:f8:87:23:8b:22:68:4f:a5:ac:e0:b8:
                    c1:c5:d4:8d:16:c5:4f:4d:1c:b7:6d:31:7a:95:a8:
                    4f:d4:8a:06:af:40:c1:3e:9d:0e:10:4e:fa:fa:98:
                    c3:a3:c4:21:b7:f3:5d:60:cb:e7:3d:6d:0a:42:fc:
                    3e:10:09:d1:e4:87:92:f9:ba:8b:1e:d8:a0:e3:94:
                    cd:9a:92:4b:26:d7:30:c3:0b:23:3e:4c:98:cd:4a:
                    36:c4:92:38:d7:03:f3:03:b7:d4:46:28:a3:0a:1e:
                    41:f9:8e:03:81:2b:64:89:c3:00:ee:bd:66:cf:23:
                    51:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1E:DF:99:38:84:F1:E1:5E:1C:5A:12:AD:29:60:BC:65:6B:AB:33
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136322e302f32342d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:84:cb:e1:bc:41:20:df:52:0a:7b:60:3d:9d:d1:2e:52:03:
         56:7e:7e:f0:22:35:6a:de:3e:df:d7:3d:a1:51:af:cf:4f:4e:
         b6:39:fc:5a:a6:2c:6d:cd:7f:3d:1f:c8:ce:fa:8b:85:5c:b3:
         bd:59:ac:c9:b1:58:ec:69:89:44:35:68:dd:71:51:11:72:3d:
         e9:ac:f5:45:6f:9e:9d:58:35:cf:ce:fe:c3:0a:0b:6a:0e:cd:
         d9:45:bc:c2:71:8d:76:8d:ea:a9:19:46:e1:48:c0:65:78:95:
         a4:41:d8:02:6c:09:86:08:70:2c:f1:6d:db:bc:1e:76:a3:53:
         73:b1:81:a5:11:dc:1e:ba:75:50:be:77:b8:fe:49:68:2f:c1:
         55:81:a6:79:ad:59:93:c1:c1:94:35:f5:9c:18:0e:11:f2:00:
         27:50:f0:01:60:a2:8a:b0:b3:da:f0:26:9f:e0:29:14:7a:14:
         c3:31:e7:cf:48:91:d3:21:99:98:17:f9:8e:e0:fa:e2:2c:56:
         c1:5c:06:39:06:65:53:3a:57:70:7d:79:a2:ae:42:49:a0:e2:
         08:15:e9:9b:ed:1d:04:95:57:53:d2:5c:c0:c0:3f:72:0e:11:
         68:fe:fc:0f:7d:5e:65:a5:17:ac:0c:34:50:1d:fd:cf:d8:96:
         e7:a2:cc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----