Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS23352.roa
File:                     AS23352.roa (raw, json)
Hash identifier:          LbFEcXcnH1dGmDpx9TIwlpPau4qv3MdWSoprA8+eYg4=
Subject key identifier:   80:FD:5B:C6:00:9E:63:49:21:0D:1D:29:9F:BB:2B:22:8C:C0:72:20
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       55089D9F3E67AF67FD02EFE16F08507EF812446A
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS23352.roa
Signing time:             Wed 18 Jan 2023 17:16:43 +0000
ROA not before:           Wed 18 Jan 2023 17:11:43 +0000
ROA not after:            Wed 17 Jan 2024 17:16:43 +0000
asID:                     23352
IP address blocks:        206.53.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:08:9d:9f:3e:67:af:67:fd:02:ef:e1:6f:08:50:7e:f8:12:44:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 18 17:11:43 2023 GMT
            Not After : Jan 17 17:16:43 2024 GMT
        Subject: CN=80FD5BC6009E6349210D1D299FBB2B228CC07220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:ca:5a:d4:76:ec:c3:79:a8:d7:44:14:43:
                    77:a3:ad:ef:bc:a1:10:84:58:3a:03:dc:89:80:56:
                    7d:ff:8e:5e:0b:f3:3b:53:64:57:02:b8:99:eb:5e:
                    30:29:02:18:e4:01:e2:23:e2:87:ba:cd:e4:88:0f:
                    e0:21:b3:37:9e:07:4b:07:f1:4f:75:21:3e:38:26:
                    00:a2:b3:7c:b1:f3:45:ba:a7:c3:58:3b:cc:55:76:
                    08:c8:71:48:ac:a3:ea:8f:91:68:86:89:dc:7d:1e:
                    c0:38:3a:70:b5:ae:64:6d:42:63:09:8d:9f:c7:30:
                    20:75:60:ce:83:c0:da:c3:65:bc:99:4e:cf:9d:a8:
                    7a:f3:bd:31:28:e0:de:33:a5:b4:f1:e3:eb:ff:31:
                    4b:4e:e9:1d:21:f4:c1:73:48:75:cb:19:83:88:ff:
                    a5:79:8d:66:b6:d3:0b:a2:9b:5e:8d:c3:73:3b:0d:
                    db:bc:b2:38:05:f9:f0:bb:db:6b:df:44:dc:50:0f:
                    f3:29:35:61:66:2c:7c:4f:02:30:f4:21:c7:8e:f5:
                    e6:70:92:10:2a:52:a1:eb:ef:c2:b9:e2:7b:73:5f:
                    0c:d5:52:5f:f8:4b:4c:29:3a:63:3f:89:7b:a8:42:
                    8f:b7:9f:a6:d7:50:2d:96:45:f8:1e:34:73:68:97:
                    6d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FD:5B:C6:00:9E:63:49:21:0D:1D:29:9F:BB:2B:22:8C:C0:72:20
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS23352.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:cf:1c:7d:a0:21:7f:68:c9:b7:58:36:48:94:0b:61:a3:7a:
         e2:b1:b4:79:25:cf:92:9f:9c:f0:0e:66:c9:18:a0:b1:93:e5:
         a6:d1:03:03:f3:0b:eb:c7:09:d6:00:c0:68:d0:e4:88:4d:a0:
         21:65:db:d6:be:49:8f:50:8c:d3:c3:b1:27:fb:6a:03:fe:e2:
         bb:23:f1:f0:d1:23:9e:20:d8:36:e1:20:f2:65:a5:ad:ff:a3:
         15:6f:1c:cd:56:8c:59:92:20:33:4c:57:fe:06:8f:18:cf:e4:
         84:b7:7a:50:16:8f:e8:74:42:34:eb:1c:99:2e:9d:55:8b:04:
         47:fa:5e:48:61:51:10:50:e1:3f:c7:35:b9:cd:a9:d6:dc:b2:
         58:97:a0:55:97:2d:e2:69:89:74:04:f0:9f:ca:5e:75:2a:71:
         a7:81:bb:cc:67:9f:f1:3f:02:1c:3a:e7:85:b0:61:39:4b:c0:
         f2:b1:f0:e8:77:39:b6:59:48:9e:3b:30:7f:32:8d:ea:27:30:
         5f:0c:67:87:a9:ed:d1:ae:4d:b2:57:c8:bd:5a:8a:2f:18:bf:
         77:34:4a:93:9c:89:2e:d4:9d:41:0d:aa:87:10:94:33:97:45:
         7e:97:7d:ae:c7:63:08:11:65:14:cd:e4:df:ad:56:d9:ff:ec:
         8a:77:c4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----