Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS33696.roa
File:                     AS33696.roa (raw, json)
Hash identifier:          0pOO07jQvr3x5lh6x7FdJYkaFFqt3ebxcD9Lxa81+mE=
Subject key identifier:   82:B0:C2:C3:07:2B:92:60:74:A5:A6:58:94:60:DE:BD:4E:A8:A1:A0
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       192AC8ED4C105A747BE2ED2922A9840B8BA98846
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS33696.roa
Signing time:             Tue 29 Aug 2023 20:33:27 +0000
ROA not before:           Tue 29 Aug 2023 20:28:27 +0000
ROA not after:            Tue 27 Aug 2024 20:33:27 +0000
asID:                     33696
IP address blocks:        140.99.35.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2a:c8:ed:4c:10:5a:74:7b:e2:ed:29:22:a9:84:0b:8b:a9:88:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Aug 29 20:28:27 2023 GMT
            Not After : Aug 27 20:33:27 2024 GMT
        Subject: CN=82B0C2C3072B926074A5A6589460DEBD4EA8A1A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:53:1e:91:2f:7f:4b:44:da:7b:ad:c5:9e:da:
                    ec:c6:f7:e9:6d:74:29:0c:6b:03:a2:00:9d:16:08:
                    ab:f6:44:46:b7:94:55:68:66:35:cb:e8:c3:dc:aa:
                    da:6a:31:ac:64:db:fe:3d:06:8e:28:79:be:59:fc:
                    a2:2f:f5:2c:af:9e:0f:01:11:39:6b:bc:02:81:1a:
                    c4:3e:16:02:57:26:db:57:f5:63:0b:ce:4c:4c:b0:
                    ba:ff:c2:82:98:a7:ce:e5:52:f6:1b:6b:2f:1a:3b:
                    e3:f4:35:c0:85:0f:2e:d0:d8:eb:1a:f7:09:2b:96:
                    6d:ae:64:90:a1:4c:66:0e:26:5a:e4:54:e1:18:06:
                    df:e2:d1:4a:7e:c1:15:bd:4b:b6:cc:e9:3f:29:1c:
                    e1:a2:b4:4d:ed:d0:04:4b:ef:5e:8a:4e:28:d7:e1:
                    b2:22:b3:81:31:06:90:d1:95:32:5b:40:b1:23:08:
                    bb:60:26:11:fd:dc:a6:d1:60:f3:d9:0b:40:77:01:
                    bd:60:b4:00:4d:c9:b7:44:e4:f2:84:d0:92:cf:90:
                    79:90:0f:22:9a:c8:36:e4:cf:3d:13:11:e3:9b:71:
                    4a:75:8c:1d:ed:2b:8e:a2:f3:a0:78:97:4b:b2:30:
                    a2:1a:31:3d:04:0d:45:1f:6a:f7:ef:0a:da:d0:5f:
                    a9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B0:C2:C3:07:2B:92:60:74:A5:A6:58:94:60:DE:BD:4E:A8:A1:A0
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS33696.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:42:6d:1b:b3:59:34:e1:20:f4:5d:9d:b4:5d:bb:4f:24:0a:
         0a:fa:27:cd:59:fb:78:09:0a:bc:3f:27:91:f6:93:74:f8:39:
         7f:23:36:4f:e4:1d:8d:72:65:be:f8:60:8a:90:2a:ba:8d:4f:
         bb:f5:10:11:70:3a:a5:ac:ad:f5:25:00:64:17:73:72:d7:9b:
         81:b6:d3:17:c0:d8:d6:0c:84:a8:31:ff:40:11:f8:d2:9f:da:
         fd:1f:8e:98:12:df:a1:15:df:b9:53:88:65:04:71:5c:fb:c3:
         cd:19:f2:e3:c4:63:52:f6:5e:fa:74:33:67:bd:61:a9:04:6a:
         11:fc:c9:8f:3e:e1:54:95:e7:ac:75:5b:10:aa:55:e3:b1:16:
         25:20:02:72:66:48:c8:90:5a:d9:85:23:8a:66:ed:1e:54:49:
         a2:90:8d:e0:5f:a3:2f:aa:ca:d3:b0:ef:fd:03:4a:7e:1f:7b:
         03:f9:4a:e2:d3:1d:9b:7a:3f:66:1e:b1:17:39:ed:60:0d:eb:
         26:88:63:0a:34:f9:2f:47:65:b2:db:f8:9f:af:a1:c3:77:a7:
         af:de:d3:91:1d:04:1f:6d:36:0e:36:0c:2e:06:4b:98:2a:a4:
         5d:d4:35:a8:46:a4:cf:3d:78:7b:8a:dc:70:19:08:11:29:6b:
         ae:bd:0d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----