Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS200482.roa
File:                     AS200482.roa (raw, json)
Hash identifier:          tKm22K/fTvKYZ+/OQFJnrRuVZNLQVckEPuyJ3sAQn+Q=
Subject key identifier:   ED:DE:53:0F:72:E9:78:76:F5:35:DC:B6:C8:A3:43:B0:18:78:16:C2
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       3F15288983F6B5074E9541D3D46CBC0E2FF78D9E
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS200482.roa
Signing time:             Wed 28 Jun 2023 16:04:14 +0000
ROA not before:           Wed 28 Jun 2023 15:59:14 +0000
ROA not after:            Wed 26 Jun 2024 16:04:14 +0000
asID:                     200482
IP address blocks:        104.234.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:15:28:89:83:f6:b5:07:4e:95:41:d3:d4:6c:bc:0e:2f:f7:8d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun 28 15:59:14 2023 GMT
            Not After : Jun 26 16:04:14 2024 GMT
        Subject: CN=EDDE530F72E97876F535DCB6C8A343B0187816C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:d1:45:1c:a0:7c:cc:80:26:93:1f:30:ee:
                    b7:d6:6f:0a:a8:77:6f:42:b4:6d:d2:49:03:64:4f:
                    21:72:89:a1:04:7e:06:4c:d0:1c:30:1c:ba:36:e5:
                    bf:45:e6:bf:96:26:97:0a:6f:a9:c3:c8:1f:71:88:
                    f4:44:3b:1b:3a:09:5a:7d:18:52:7d:70:79:40:d6:
                    e1:1f:0f:16:bf:fc:fc:dc:fd:b2:2d:85:83:ea:48:
                    1c:38:76:d6:e4:77:24:3d:2c:e2:cb:80:fe:5e:7d:
                    cb:77:23:87:9c:3b:d2:0e:cf:cd:8d:b5:23:8f:b0:
                    66:dc:8f:24:4f:91:bb:4b:ea:8f:58:84:84:bd:6f:
                    ca:80:bd:3a:c1:b1:9d:97:f5:4e:04:26:47:4d:25:
                    cd:f8:5a:3e:be:f7:7a:f8:25:78:fb:b6:ef:c1:f6:
                    e4:df:b2:f1:15:9c:0d:58:d8:b8:f5:f4:c7:06:c7:
                    29:ae:7a:0f:40:12:7b:e0:f7:a1:c4:87:a5:33:ee:
                    e5:d1:9a:2b:61:96:6f:2b:bd:c4:6c:8a:05:80:ed:
                    39:b9:12:37:95:4c:23:f1:5a:4b:45:b7:80:19:1e:
                    04:a6:4a:25:ff:73:e4:65:5f:f6:16:01:0b:d2:f7:
                    0d:76:44:da:a3:38:3f:b8:92:b2:75:60:12:af:7e:
                    a1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DE:53:0F:72:E9:78:76:F5:35:DC:B6:C8:A3:43:B0:18:78:16:C2
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS200482.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:8c:ff:02:70:ee:a5:aa:7b:23:6f:a7:4f:1c:f3:96:1a:bf:
         5c:c7:b7:52:b5:52:98:60:78:46:31:01:e3:73:65:ee:3d:16:
         92:d7:f9:7f:70:b9:f5:67:44:af:ed:36:f5:80:76:75:3a:3c:
         3c:3c:15:d3:05:aa:e3:e9:9f:55:b1:97:93:65:b0:ec:3e:28:
         f3:ee:cd:d4:12:6e:5e:5a:bb:2b:33:1a:da:b3:53:bc:76:a8:
         cf:41:2b:47:d3:e1:9d:45:5f:9f:db:01:8a:8e:d1:2b:52:5e:
         74:39:84:6a:57:6e:e5:14:2a:45:f4:a5:4c:e6:fd:a1:19:77:
         26:cc:96:88:27:dc:2a:70:62:61:c4:8a:7b:aa:57:ba:63:fb:
         37:85:8e:c8:48:ed:c8:e9:d3:d9:dd:cd:be:08:74:ec:be:80:
         6c:b3:54:c4:d8:56:2e:02:a1:db:ba:67:c9:1b:0a:50:21:1f:
         ef:fa:49:25:1b:37:ee:7e:c6:85:9b:76:31:f5:02:de:4c:c4:
         7a:1b:ae:c6:bd:24:9d:c9:fb:c0:8c:86:ed:77:ef:38:39:1d:
         08:51:5d:65:3c:b0:c2:93:42:45:39:84:07:18:0d:9c:09:aa:
         77:a2:b9:6f:1e:d0:26:41:24:70:4c:4e:7f:00:bc:c8:45:f5:
         eb:39:e6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----