Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS32613.roa
File:                     AS32613.roa (raw, json)
Hash identifier:          oJNs2caBP23cfMifQr9uMN/sCXpn4CH2JoJ4dxYB3eM=
Subject key identifier:   72:F0:E7:43:CD:6D:7E:2E:56:F5:7B:C0:77:05:38:39:7F:87:55:A5
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       38CDB94FF09F0B5D1AF50FC3F0E261A594A2E9ED
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS32613.roa
Signing time:             Sat 29 Jul 2023 12:49:50 +0000
ROA not before:           Sat 29 Jul 2023 12:44:50 +0000
ROA not after:            Sat 27 Jul 2024 12:49:50 +0000
asID:                     32613
IP address blocks:        205.234.176.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 00:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:cd:b9:4f:f0:9f:0b:5d:1a:f5:0f:c3:f0:e2:61:a5:94:a2:e9:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Jul 29 12:44:50 2023 GMT
            Not After : Jul 27 12:49:50 2024 GMT
        Subject: CN=72F0E743CD6D7E2E56F57BC0770538397F8755A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:15:d2:b6:5a:73:51:e1:be:37:cb:70:30:4e:
                    14:ba:13:6f:b3:e4:84:91:f5:b7:f2:50:1f:0b:5d:
                    39:e4:69:55:79:84:f9:50:5f:8a:8a:a7:c9:da:5c:
                    57:5f:78:3b:02:2f:a2:c1:2d:04:5f:b0:99:71:44:
                    b0:9a:1e:17:61:8c:fa:d3:ab:66:31:05:ef:00:12:
                    2c:5f:a0:56:c0:31:29:c1:ec:d7:2c:06:01:55:0b:
                    83:9e:f1:7a:27:22:20:59:f4:da:83:62:33:1a:fe:
                    ce:a1:4b:5d:6c:1b:0d:49:fe:d9:ef:08:0f:2d:1d:
                    94:27:72:b3:92:14:2e:ba:8a:6a:16:ef:24:b3:4b:
                    0f:bf:d5:31:91:fe:77:a9:2a:2e:8d:8d:84:8e:76:
                    59:8a:8f:e7:30:57:25:ca:2f:13:bd:41:3e:09:bc:
                    5b:35:fc:26:4a:9e:f8:5a:ad:2f:3f:32:f1:80:38:
                    d0:03:f6:90:99:a8:0f:63:0f:f9:d1:c9:60:f6:6b:
                    e8:7e:4f:a1:28:02:9b:60:c9:02:82:10:8c:31:1d:
                    8c:1e:25:fc:36:49:32:32:31:19:a0:3e:0c:57:80:
                    20:d2:57:20:93:1a:17:0e:92:af:0d:69:a0:ec:73:
                    ff:de:90:5b:92:30:61:1f:4b:22:cc:59:9d:6b:85:
                    44:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F0:E7:43:CD:6D:7E:2E:56:F5:7B:C0:77:05:38:39:7F:87:55:A5
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS32613.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:07:10:d8:8f:b0:7c:b9:a1:aa:16:31:74:b8:3a:6e:e5:80:
         64:f4:d6:83:ec:2b:6d:ae:ab:74:4b:a7:0a:b1:3e:59:89:5d:
         64:76:da:0b:05:db:d0:66:3c:42:5f:40:4d:19:6d:99:64:c9:
         95:52:92:3c:cb:0a:9d:85:1e:5f:1f:1f:38:ba:55:00:33:ac:
         70:db:03:b0:3c:89:7f:93:31:af:bc:1f:de:11:26:a1:02:39:
         9d:75:8f:d9:e3:2b:eb:f1:56:7d:9a:4c:52:55:a0:c4:cd:3b:
         49:f0:e1:9f:dd:b5:f3:e5:8a:bd:03:bc:08:a3:dc:97:b6:ac:
         7f:19:5d:e6:f8:b0:49:72:fa:72:d8:86:0c:f7:fa:04:c5:6a:
         56:da:f1:ab:fb:5a:bb:ac:6e:81:0c:9b:18:8a:62:24:7f:1e:
         d7:1d:57:b1:74:79:5b:f6:d8:e7:06:b4:2f:5e:e2:7c:02:03:
         12:88:c6:88:dc:b3:70:03:f8:8a:d9:d6:18:e2:3b:8e:af:c1:
         29:b8:37:d4:23:1e:70:4b:4e:9e:dc:50:8a:18:78:72:c4:07:
         34:c1:b5:ce:05:43:65:dc:36:bc:ea:03:58:b0:b5:1a:97:a2:
         28:d0:6e:df:f1:86:57:ca:e4:d4:75:8b:46:ca:67:c2:b4:ae:
         d1:fe:e2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----