Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS7018.roa
File:                     AS7018.roa (raw, json)
Hash identifier:          imkBvuJExFaSrSqe6O0kHzYZegU0ym47KsYoLsBVq1s=
Subject key identifier:   C6:31:7A:27:54:EB:84:57:A8:EA:43:6E:11:84:2B:94:57:A9:EE:13
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       75B5D00B5A1830651878CFE3F853C3610502B2A3
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS7018.roa
Signing time:             Thu 06 Oct 2022 17:39:18 +0000
ROA not before:           Thu 06 Oct 2022 17:34:18 +0000
ROA not after:            Thu 05 Oct 2023 17:39:18 +0000
asID:                     7018
IP address blocks:        140.99.125.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b5:d0:0b:5a:18:30:65:18:78:cf:e3:f8:53:c3:61:05:02:b2:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Oct  6 17:34:18 2022 GMT
            Not After : Oct  5 17:39:18 2023 GMT
        Subject: CN=C6317A2754EB8457A8EA436E11842B9457A9EE13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:1c:f3:d8:7d:b0:fe:79:91:56:38:4d:0e:1f:
                    df:8e:a4:99:8c:e3:65:12:17:d3:08:29:f7:38:46:
                    92:2f:cc:6a:12:c1:cc:33:ff:23:cb:32:c3:ad:93:
                    ca:c8:5b:30:ba:2b:17:08:20:6a:26:8a:fe:e9:43:
                    5c:78:0f:da:0f:fe:9e:f5:7f:d6:d7:1a:d8:ee:b7:
                    c4:a8:c6:85:03:55:44:0e:ef:c6:36:0f:50:af:dc:
                    d3:76:89:d8:c7:79:62:16:54:87:b0:62:ed:51:e7:
                    1d:da:d7:2d:0d:37:95:e7:25:64:f8:a3:d7:eb:6f:
                    7a:4d:da:65:6b:59:5d:6c:40:6d:fd:d8:83:57:57:
                    50:c5:f3:23:be:81:c2:9c:6d:10:21:1d:7f:29:22:
                    52:61:88:41:02:ee:f3:0a:7b:5f:83:e1:40:2e:ad:
                    96:7f:b7:c5:43:23:a7:76:ca:11:e7:a8:2d:69:14:
                    ab:67:d7:38:17:71:26:8e:70:57:99:c8:f0:ac:f1:
                    24:c3:f6:fe:8f:d9:5f:47:1e:af:c4:ea:e8:0b:58:
                    89:e8:c6:10:3e:a2:24:f9:1c:0f:80:5b:da:d9:57:
                    e6:bc:d3:7c:d1:ae:2c:df:b7:1a:fc:95:27:5b:bd:
                    51:99:0f:04:79:4a:bf:00:41:dd:f7:b1:dd:1d:49:
                    e7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:31:7A:27:54:EB:84:57:A8:EA:43:6E:11:84:2B:94:57:A9:EE:13
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS7018.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:42:fd:02:0b:cb:8b:8f:aa:ae:45:57:b8:1e:b7:d6:88:4e:
         e2:84:cc:32:b3:f7:01:31:a5:d7:a6:e3:ca:61:8a:c6:ef:f4:
         69:cf:3e:ed:1b:9e:0d:89:f8:3a:11:ac:fc:6b:38:a1:02:23:
         4e:44:95:96:a6:69:b3:2c:2f:a6:61:38:04:f8:11:9c:13:65:
         34:e5:ff:3a:ee:e8:5a:79:ed:ab:b4:06:6e:a6:1d:ea:64:e2:
         58:55:29:dc:b6:45:e6:b9:18:6a:9c:d6:6b:0e:9b:db:5f:b3:
         c7:a7:b9:cd:c1:b5:27:eb:55:08:d7:3b:af:cc:37:50:56:34:
         b9:00:43:90:e1:9e:14:e5:d9:05:dd:c8:22:de:0d:3a:89:ab:
         db:c2:57:60:54:e4:48:0a:e5:f7:34:c8:45:2e:f7:6e:79:2f:
         18:25:86:4d:08:52:80:93:f1:86:3f:d8:da:36:12:70:51:f5:
         66:db:21:5f:d6:15:15:66:61:dd:c6:26:42:13:53:40:3d:45:
         32:9c:56:79:da:f2:09:3d:7e:61:a8:7a:7f:e6:08:81:60:29:
         53:54:5a:63:e6:9a:35:73:28:e8:76:a7:95:aa:59:d7:8d:32:
         1f:e1:3b:34:57:1c:07:e9:81:88:99:e4:e6:30:a2:55:5e:9e:
         9c:97:f3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----