Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3232322e302f32332d3234203d3e20383334.roa
File:                     3230352e3233342e3232322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          awvxjXZhTKXX08PVBV8fIzM0C18puXmx1sCCgDIG2gQ=
Subject key identifier:   42:07:85:27:D8:FB:BC:DE:4B:E1:8C:61:8E:BB:8D:C0:31:65:86:AB
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       73EA151ABAA9C57B1F7B323E297547AB813D54AF
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3232322e302f32332d3234203d3e20383334.roa
Signing time:             Thu 20 Apr 2023 00:00:16 +0000
ROA not before:           Wed 19 Apr 2023 23:55:16 +0000
ROA not after:            Thu 18 Apr 2024 00:00:16 +0000
asID:                     834
IP address blocks:        205.234.222.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ea:15:1a:ba:a9:c5:7b:1f:7b:32:3e:29:75:47:ab:81:3d:54:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 19 23:55:16 2023 GMT
            Not After : Apr 18 00:00:16 2024 GMT
        Subject: CN=42078527D8FBBCDE4BE18C618EBB8DC0316586AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:a7:b4:94:98:07:20:31:99:71:ca:dd:04:
                    ec:5a:f4:a8:17:8e:5b:68:01:26:88:a5:b6:8e:d6:
                    9c:a8:3f:bb:75:74:e9:09:85:d1:43:c1:ee:c0:45:
                    5b:bf:2e:db:e8:78:6e:f6:84:54:99:3a:12:90:8d:
                    d0:ec:f4:9d:42:f8:22:c3:f5:39:3f:16:ec:22:d2:
                    e5:af:d1:e5:25:37:d5:48:7a:74:e6:10:51:a9:d0:
                    e8:2a:f5:b2:99:c2:1b:17:61:a4:e5:88:9f:10:7a:
                    ff:90:75:31:2f:e9:7c:16:d2:15:b5:63:a3:cb:fd:
                    bd:42:e0:62:e3:79:fc:c1:28:32:13:0d:27:f7:49:
                    4a:c5:de:cf:93:c8:a0:66:93:73:63:3d:06:82:c5:
                    75:19:79:be:24:d0:24:a2:79:09:fb:05:77:e2:da:
                    18:4c:89:c0:4e:4c:d5:0d:23:90:3f:8b:8c:5d:36:
                    2f:e2:3f:f1:2b:ef:d4:17:87:c9:6d:d5:e5:6d:b7:
                    01:7c:58:a0:50:ed:07:db:a9:3b:f5:6f:63:56:92:
                    6e:04:41:2d:a2:ae:73:68:d9:04:4d:29:de:aa:f0:
                    a7:14:0b:15:43:28:e3:8a:16:89:df:bf:2b:b4:55:
                    8b:17:c5:1d:17:20:bb:1d:c2:2f:ee:e9:d8:fd:58:
                    9c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:07:85:27:D8:FB:BC:DE:4B:E1:8C:61:8E:BB:8D:C0:31:65:86:AB
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3232322e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:44:87:10:14:1e:b8:22:5f:5f:06:5f:c0:8c:23:8e:62:ed:
         63:8f:e3:ca:88:c8:d8:c0:be:4d:b7:71:56:09:e2:70:be:ac:
         5b:dc:40:a0:89:c2:21:ed:ed:c7:92:12:07:19:df:50:61:2a:
         55:32:fe:bf:a2:cd:1a:2b:d2:40:b9:5f:1a:aa:a3:9f:f0:a2:
         a4:77:c6:1c:e5:57:e3:15:c2:4e:ac:30:e6:45:bf:9d:f5:65:
         c9:1d:a8:60:9d:7d:17:3a:dd:53:8e:32:52:cf:60:34:f2:1e:
         80:d6:1e:43:07:0b:13:bf:4f:2f:a8:de:62:3d:6e:ad:92:91:
         1e:6b:14:35:47:4d:e0:56:5d:80:9e:b4:c6:79:2f:c5:6d:77:
         8c:db:23:84:dd:d6:e4:b5:4c:2b:67:40:a2:d4:d2:bc:d5:62:
         81:14:66:0c:2f:c1:99:1b:6c:62:71:ff:04:53:79:5c:4a:f8:
         19:71:a1:75:28:40:7b:77:b2:90:8d:aa:c9:ab:d2:f8:48:a1:
         76:84:e1:75:10:5b:5a:82:87:2e:ad:36:8b:f3:1e:5a:c1:0e:
         51:55:7e:e6:f6:ba:05:f9:fa:2e:e6:db:d1:f1:5f:99:c3:91:
         e3:4f:40:1f:66:0b:2e:c2:e4:29:b7:f1:d2:d2:db:ff:ff:1e:
         d9:ac:4e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----