Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136322e302f32342d3234203d3e20383334.roa
File:                     34352e3133352e3136322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          0JbHyiDxDIEIJSDOl8OR+4sMKCpU8vvkmVHirB7BYZI=
Subject key identifier:   05:1A:28:BC:D5:6F:BB:D7:77:E0:59:50:35:44:A2:FE:6D:DB:4C:60
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       628A60F328E2EAFA32A9AA5AAAF774DF3F70211B
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136322e302f32342d3234203d3e20383334.roa
Signing time:             Tue 17 Oct 2023 00:00:04 +0000
ROA not before:           Mon 16 Oct 2023 23:55:04 +0000
ROA not after:            Tue 15 Oct 2024 00:00:04 +0000
asID:                     834
IP address blocks:        45.135.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8a:60:f3:28:e2:ea:fa:32:a9:aa:5a:aa:f7:74:df:3f:70:21:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Oct 16 23:55:04 2023 GMT
            Not After : Oct 15 00:00:04 2024 GMT
        Subject: CN=051A28BCD56FBBD777E059503544A2FE6DDB4C60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2c:e9:7f:ff:aa:94:ce:a5:b2:a6:86:d6:fa:
                    95:c9:5a:ba:51:00:7c:67:61:55:c9:28:24:ef:d3:
                    3d:58:d4:9d:0b:56:3b:cc:1c:c4:9c:86:fb:d5:a9:
                    b7:1c:37:0f:12:b3:66:eb:69:44:74:3c:5d:3c:56:
                    7f:4b:01:4f:2b:b6:28:39:95:0b:61:b9:ce:46:0f:
                    d7:6e:e5:da:4b:c5:4c:d3:5a:05:ec:57:04:73:72:
                    de:ba:e6:cc:bf:6e:10:cb:0f:f7:6f:ba:e4:cf:26:
                    a0:69:e8:20:d2:31:04:65:a8:3a:e5:33:3a:b1:07:
                    af:69:33:c8:6c:52:28:ca:84:bb:39:52:3e:f4:84:
                    d4:2c:07:af:09:17:fc:23:c1:de:75:a5:f3:4e:8e:
                    4f:68:9e:9d:38:e4:ff:fe:d2:1c:3e:9b:9e:0c:de:
                    dc:e3:62:ad:d5:20:bb:49:d9:bc:83:bb:e3:2f:c6:
                    21:b6:8a:2d:c7:22:9d:bb:a1:b5:58:cf:36:aa:c4:
                    a9:42:b6:94:81:24:e2:ec:9c:46:c4:a3:77:8b:ef:
                    8e:22:a6:d7:7d:8b:6f:d8:01:cb:36:a3:d1:35:a9:
                    bd:4b:b2:0e:c8:8f:b3:d4:7b:a3:e3:ea:90:6b:30:
                    4f:5e:a7:14:8a:6d:94:1e:6b:f0:4d:c7:78:dc:80:
                    a3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1A:28:BC:D5:6F:BB:D7:77:E0:59:50:35:44:A2:FE:6D:DB:4C:60
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:17:28:30:cd:27:9c:c1:90:69:cd:ce:bb:97:f5:73:86:6a:
         3c:18:d6:67:35:c2:0b:70:d3:34:d1:14:30:7c:72:ed:10:14:
         24:5a:cb:4e:10:c2:91:62:ed:b1:85:9b:20:c3:e2:03:75:2d:
         5b:96:db:fb:dd:9a:d0:fb:b5:52:6b:22:9c:40:33:b8:83:c2:
         78:f6:7f:ea:78:f8:c7:d8:ff:bd:ca:5b:bd:fc:eb:99:84:de:
         55:0b:87:4f:1b:68:96:eb:91:f2:67:e7:dd:af:3d:55:81:24:
         3a:f3:ab:ea:01:68:89:de:6b:d8:8f:22:1f:fd:8c:cb:6f:d7:
         24:9e:8c:71:4b:d3:39:e5:a7:5f:77:bc:87:10:77:38:ee:85:
         1c:9b:81:96:d7:8d:71:d7:ee:e6:5d:07:c7:4e:b9:89:a1:b0:
         b7:e8:f8:3c:fa:e3:6a:24:7e:97:cb:1a:9d:26:7e:1b:50:a8:
         dd:d4:fb:41:64:e4:01:ab:b6:6a:9e:24:a6:a2:64:48:ea:c9:
         1e:75:74:32:3e:3f:f4:44:fc:24:ea:d8:d0:52:b3:4b:c2:e7:
         22:f2:24:c5:38:b8:48:63:70:8a:9c:1a:af:14:2a:dc:68:bc:
         88:82:c2:79:05:08:29:c2:60:28:c8:a0:08:39:55:c7:93:56:
         8d:20:3d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----