Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS133973.roa
File:                     AS133973.roa (raw, json)
Hash identifier:          4auEpyWxJBVOIhXnGqnFsNFz6FU3Zc1baHFVz3qeUFA=
Subject key identifier:   5B:24:3B:03:73:09:D9:CF:68:21:06:5F:86:CF:FB:F9:9E:C0:25:DA
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       326ECC5314C4CB25474F585FD20072A82D34D5AD
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS133973.roa
Signing time:             Wed 29 Mar 2023 06:39:15 +0000
ROA not before:           Wed 29 Mar 2023 06:34:15 +0000
ROA not after:            Wed 27 Mar 2024 06:39:15 +0000
asID:                     133973
IP address blocks:        140.99.254.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:6e:cc:53:14:c4:cb:25:47:4f:58:5f:d2:00:72:a8:2d:34:d5:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Mar 29 06:34:15 2023 GMT
            Not After : Mar 27 06:39:15 2024 GMT
        Subject: CN=5B243B037309D9CF6821065F86CFFBF99EC025DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:90:de:b6:e6:8e:87:7e:a1:9d:82:2d:21:f7:
                    b6:ee:fd:77:2d:4d:30:87:f1:44:40:88:9a:23:39:
                    22:b9:f6:a9:da:2a:de:43:71:65:18:67:31:5f:c8:
                    3f:b0:e0:3e:6c:f3:66:b3:33:a1:47:ed:e5:89:c7:
                    ba:f5:00:18:ec:51:9c:27:2f:4e:e8:47:5e:95:5c:
                    67:a2:be:6a:ef:5d:1b:bc:41:c3:aa:4e:e9:89:f2:
                    77:0e:b9:78:9b:84:14:21:05:20:00:f4:cc:f7:eb:
                    15:63:33:26:01:12:b4:d1:a8:58:1e:53:e1:70:a2:
                    4a:88:c0:c3:95:d9:9f:55:c0:be:3e:f5:f5:f8:bf:
                    a1:4f:d9:4d:ea:16:b1:b8:29:aa:8d:73:bf:9c:72:
                    bc:8d:69:b5:57:41:10:c9:eb:e7:cb:83:b4:e8:10:
                    73:9f:0b:1f:2f:6a:61:af:df:c7:c2:f0:e6:f5:c7:
                    74:37:2b:e4:28:85:5b:ac:15:b0:50:bd:38:8b:9a:
                    40:77:c2:46:e3:a1:fb:0d:5c:c4:93:a8:6e:49:5b:
                    b6:6f:84:f2:b8:c5:6c:73:f1:fa:7e:c1:25:d4:0c:
                    a8:2d:06:4a:ce:34:53:b7:49:10:a9:ce:35:0e:1d:
                    c1:72:d5:c9:95:e1:9d:7e:95:ee:37:47:ff:d8:59:
                    16:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:24:3B:03:73:09:D9:CF:68:21:06:5F:86:CF:FB:F9:9E:C0:25:DA
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS133973.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:35:e7:f5:51:9e:f1:dd:f7:c6:3f:b7:e5:dd:46:11:17:91:
         bd:fc:b0:ec:f0:d6:8a:30:22:5e:d7:d0:57:5e:6c:87:ab:b8:
         67:8e:ba:7a:4c:4d:48:11:ce:a4:f4:09:2a:77:c4:e7:35:46:
         11:a6:64:e5:cd:54:61:9d:85:1c:8b:1d:c9:b2:c0:21:65:c3:
         8c:2f:b8:27:1c:46:3c:8d:a6:b6:14:dc:f4:52:0f:47:af:5c:
         4a:a4:c1:22:8d:fc:b2:ed:c0:08:3f:69:8e:5e:44:d7:06:10:
         65:79:88:dd:2b:cd:5d:7e:cd:10:0d:37:91:a1:0a:21:e1:a4:
         1f:ef:0a:e7:6c:2b:11:e6:0b:b8:2e:d9:00:3c:9b:a8:89:01:
         68:ef:b2:8b:86:37:05:52:bc:c0:18:65:94:9f:d2:b6:fe:40:
         22:58:00:0e:bf:54:d0:a0:87:9f:6e:0b:fc:4c:90:31:ce:ab:
         4d:16:8f:53:6a:96:cc:0a:d5:20:00:e4:38:7d:8d:39:a5:28:
         36:a8:e7:05:90:df:18:39:eb:1a:02:85:5e:9f:d9:ea:5b:05:
         0f:b3:c5:37:5f:b0:5c:e5:e5:e0:8f:b2:01:86:c0:78:55:de:
         bc:a5:f5:a0:0a:a1:13:59:2b:11:ba:e8:f0:0e:ea:59:88:77:
         72:fa:9d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----