Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS140947.roa
File:                     AS140947.roa (raw, json)
Hash identifier:          VfMgZmlLVIETkdh8UHAXj60cBjOn985P9nfSCYbb90w=
Subject key identifier:   12:B8:BD:BE:86:B9:9A:F8:BF:9D:AA:5F:8D:97:01:CF:FB:55:32:96
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       166782E0626629FA4CE23A88D6EA75088C50DD44
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS140947.roa
Signing time:             Wed 08 Mar 2023 00:00:11 +0000
ROA not before:           Tue 07 Mar 2023 23:55:11 +0000
ROA not after:            Wed 06 Mar 2024 00:00:11 +0000
asID:                     140947
IP address blocks:        104.234.51.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:67:82:e0:62:66:29:fa:4c:e2:3a:88:d6:ea:75:08:8c:50:dd:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Mar  7 23:55:11 2023 GMT
            Not After : Mar  6 00:00:11 2024 GMT
        Subject: CN=12B8BDBE86B99AF8BF9DAA5F8D9701CFFB553296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ab:b4:e8:3f:83:b3:63:69:d8:df:21:47:cc:
                    c0:cb:93:4c:7a:b9:d8:dd:fc:be:ea:a9:ad:97:10:
                    83:ca:8b:6c:77:21:96:04:6c:64:ca:cd:9f:d1:55:
                    c8:4d:d3:5f:0a:b6:46:d5:a9:dd:ad:58:0e:7f:5b:
                    9e:9a:e8:1e:14:d4:8a:a3:ce:87:e5:65:a0:59:65:
                    ab:81:49:80:da:d3:97:82:1d:ff:70:1b:82:a3:4a:
                    bf:0e:68:57:be:52:62:8e:e3:09:ec:82:f9:36:1f:
                    3f:99:87:9c:c0:c5:c9:33:6d:b4:bf:8e:43:84:18:
                    19:7c:16:6d:8c:a5:5e:d2:cf:a2:37:72:1c:51:86:
                    b6:13:6b:99:f7:e6:ae:63:60:64:2d:a6:ac:8d:83:
                    55:e6:b6:08:89:30:af:17:e0:b8:d4:1a:b5:fb:16:
                    ab:ba:94:a4:30:12:c8:5a:d8:6b:4b:19:8a:31:45:
                    ee:f2:12:e9:ff:da:15:b0:fb:ab:35:80:41:26:fa:
                    45:68:4d:be:23:78:86:72:67:0d:94:be:1a:c5:a4:
                    2e:1d:db:c2:0b:0d:4b:96:e6:5d:fb:51:8c:eb:55:
                    b7:57:0f:75:c1:7c:12:af:83:61:ca:e0:bb:eb:02:
                    ae:e3:33:97:1b:96:48:dc:f3:ce:69:7a:b4:21:6b:
                    d1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B8:BD:BE:86:B9:9A:F8:BF:9D:AA:5F:8D:97:01:CF:FB:55:32:96
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS140947.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:7a:8d:65:68:78:41:ba:e7:27:fd:c2:54:09:84:9e:07:d5:
         d0:b2:92:3e:8c:ec:c7:d5:81:a1:8f:56:c7:1a:f9:02:84:d3:
         a4:24:06:8c:e4:fc:2f:8a:42:d6:5e:6a:69:68:f4:9b:67:29:
         37:c9:d6:4e:b1:8a:cf:f0:ae:5c:95:c8:e5:e0:7e:43:42:78:
         27:d9:ee:f4:ee:78:df:6d:9e:79:47:08:ec:12:0e:99:f6:30:
         0f:49:5f:e2:c1:bf:a2:06:96:72:4b:a6:fa:65:0b:80:e0:e0:
         16:66:28:30:cf:2f:e8:94:1c:04:04:f5:ff:00:e0:a6:e9:f7:
         0e:a1:65:25:65:e1:af:47:0a:a4:64:47:41:93:7d:fd:a9:51:
         a0:0c:36:64:8c:f1:85:b0:1b:c0:7b:2a:47:df:88:16:55:f1:
         ed:cd:f9:9b:f0:df:81:28:8c:32:1a:18:ee:2e:54:ab:59:6c:
         26:44:36:ad:08:de:2f:d2:22:db:a5:b9:cc:ae:5c:e5:83:18:
         ce:62:3c:a0:bc:bd:4e:dd:15:9d:24:af:66:33:50:85:ab:57:
         21:bf:75:59:ea:f9:67:61:44:2b:dd:f1:ba:83:e9:23:3e:48:
         02:f7:0c:f9:2b:ec:c9:5f:44:dd:67:82:a7:b2:2a:5d:00:01:
         79:00:d7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----