Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136332e302f32342d3234203d3e20323030333835.roa
File:                     34352e3133352e3136332e302f32342d3234203d3e20323030333835.roa (raw, json)
Hash identifier:          Yu3cQVg2b5S9lmKqcBMyCDO0dkP4LTaphhhpCSlh8XM=
Subject key identifier:   C4:99:F3:18:4A:05:E5:8B:16:BE:58:37:EA:44:40:BC:5A:C4:84:05
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       796225CF29B13E9E70E0E477F342608BCF47FC9A
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136332e302f32342d3234203d3e20323030333835.roa
Signing time:             Tue 06 Jun 2023 11:19:57 +0000
ROA not before:           Tue 06 Jun 2023 11:14:57 +0000
ROA not after:            Tue 04 Jun 2024 11:19:57 +0000
asID:                     200385
IP address blocks:        45.135.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:62:25:cf:29:b1:3e:9e:70:e0:e4:77:f3:42:60:8b:cf:47:fc:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jun  6 11:14:57 2023 GMT
            Not After : Jun  4 11:19:57 2024 GMT
        Subject: CN=C499F3184A05E58B16BE5837EA4440BC5AC48405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3f:44:9c:6a:73:8e:5b:4b:76:82:18:37:2c:
                    01:df:99:0a:3f:c3:96:43:7a:f7:6b:9b:8b:09:e3:
                    39:13:33:bf:3a:81:38:7e:72:77:43:1c:fc:a6:b7:
                    c2:de:e4:3c:ba:8b:9d:92:d8:2f:e3:5b:32:57:3f:
                    8f:42:91:b9:b6:c2:f9:59:65:c7:9b:02:c8:b4:23:
                    39:3a:18:68:2f:6a:cb:95:50:4d:97:33:c0:1b:d4:
                    67:4a:ee:fe:c3:d9:e4:9e:8c:b8:bb:11:24:96:16:
                    88:4a:91:1d:0f:40:f8:65:a0:35:c4:99:5b:d8:d4:
                    1e:63:ad:fa:18:b4:76:07:a4:9a:6c:41:73:0b:b5:
                    04:9b:0f:9b:b2:0b:d9:30:a6:1b:4f:00:9b:1b:4c:
                    7f:b9:a4:89:51:ce:6f:15:85:52:1c:16:fe:25:7b:
                    90:e9:3a:2e:5d:ed:35:a3:15:b5:a8:e7:28:74:89:
                    35:20:78:1e:64:9e:84:7c:a9:e7:c0:d4:21:d8:90:
                    3b:74:83:ee:d1:14:e2:cb:92:9d:37:fc:a4:84:dc:
                    ed:1f:c2:e8:b5:94:5b:e5:5d:d4:b0:73:85:47:ce:
                    1c:81:8b:ff:3c:e2:df:3c:3e:a1:b0:51:ff:7c:eb:
                    9a:9e:29:df:0c:9e:68:df:d8:af:0d:0d:a9:25:90:
                    14:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:99:F3:18:4A:05:E5:8B:16:BE:58:37:EA:44:40:BC:5A:C4:84:05
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136332e302f32342d3234203d3e20323030333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:38:11:a4:f6:c3:34:35:b8:33:54:18:92:dd:a6:97:2e:b2:
         0a:46:ae:c3:42:da:15:ca:4d:fc:aa:cf:de:09:92:79:e0:b1:
         a9:c5:2d:36:51:f7:40:b8:60:82:69:70:47:e9:6e:b4:8a:13:
         2f:a2:87:d4:d0:04:35:7f:85:12:ed:1a:d1:8a:2e:25:80:c8:
         13:cc:35:44:ba:68:30:74:3d:1c:63:23:73:27:ea:ad:1a:9b:
         ac:61:9e:f4:80:24:5a:34:60:42:f7:7e:df:db:b8:71:5a:a1:
         d2:19:9f:88:78:4b:8f:4b:b3:79:a9:24:8c:8d:02:4e:2a:4c:
         71:d3:b6:67:02:6b:d7:6c:fc:c3:73:f4:fc:a5:05:67:b4:89:
         1c:23:a5:f1:72:1b:13:bb:54:07:54:65:5d:5e:65:ff:64:dd:
         bd:d7:3a:44:90:ec:d5:d0:66:db:70:3c:b6:32:9e:34:33:e9:
         9c:10:50:e7:d6:16:71:a9:53:55:ec:30:a8:78:1c:f5:a5:f9:
         46:85:25:7e:52:f6:d2:f9:45:4f:07:4a:1f:f7:42:ca:78:0c:
         bb:82:2a:67:c4:c8:9c:6d:62:69:0f:9b:17:7d:37:4c:c0:51:
         ae:7c:88:5b:8b:25:d3:d1:00:a7:e8:4e:cf:5d:a8:aa:97:a3:
         ac:00:9d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----