Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e2031323339.roa
File:                     3139332e38342e3131312e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          nnPtJXzaioMG86yi8nfmRaXN5PQOd5gxT6DlGmF9QjA=
Subject key identifier:   57:E6:59:0A:21:D0:34:D0:11:DF:16:FC:25:0E:93:AF:6C:71:1D:E4
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       5DBFCA1599A0D2945351918B2D9FBD05371E68E1
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e2031323339.roa
Signing time:             Sun 11 Jun 2023 21:28:29 +0000
ROA not before:           Sun 11 Jun 2023 21:23:29 +0000
ROA not after:            Sun 09 Jun 2024 21:28:29 +0000
asID:                     1239
IP address blocks:        193.84.111.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:bf:ca:15:99:a0:d2:94:53:51:91:8b:2d:9f:bd:05:37:1e:68:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jun 11 21:23:29 2023 GMT
            Not After : Jun  9 21:28:29 2024 GMT
        Subject: CN=57E6590A21D034D011DF16FC250E93AF6C711DE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e2:ca:77:5c:cc:f4:bf:b1:64:bb:28:f2:e8:
                    0f:32:ff:7d:c8:ca:4a:7d:71:5f:6d:a0:4f:13:ff:
                    a9:d2:fa:1d:ca:73:c4:c0:f3:4c:f0:c1:01:8d:c5:
                    d1:ce:07:9d:18:98:1f:61:9b:0e:17:fe:ac:0a:0c:
                    ab:4b:d9:5a:cd:24:91:d7:87:09:9b:de:21:93:00:
                    e4:6e:3e:cb:fb:87:ad:e0:88:6c:42:7b:bb:7c:89:
                    df:b6:ff:3a:2c:15:8e:b8:20:5a:73:bf:55:48:e7:
                    6a:af:e3:6e:c9:71:b4:1a:a4:2b:55:db:24:34:5e:
                    4a:3b:65:56:9b:cc:de:36:3b:3b:98:e0:dc:8a:33:
                    6c:4e:5e:a8:96:cc:ba:9f:51:2a:64:21:1a:01:9c:
                    da:0b:0a:ac:fb:86:3b:de:6c:d4:60:83:eb:c1:cb:
                    cc:32:86:94:8d:0a:12:af:bc:de:c1:5d:60:7d:43:
                    cc:97:57:c8:4a:1e:a4:10:9e:db:a2:fb:a2:93:ff:
                    5d:e0:c6:61:b5:04:e4:8d:9c:f2:c4:c6:fd:73:72:
                    df:44:a7:6a:2a:1d:4d:a1:3a:2e:c0:1e:99:93:c9:
                    ad:c2:de:dc:c7:b8:da:d7:35:95:01:5e:dd:3a:e4:
                    9d:7c:66:92:81:fb:35:aa:1b:9c:bf:e3:e5:9f:28:
                    cf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E6:59:0A:21:D0:34:D0:11:DF:16:FC:25:0E:93:AF:6C:71:1D:E4
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:94:98:eb:01:ab:b2:0b:8b:97:a1:e2:27:00:5e:bf:a0:69:
         c0:27:92:ba:e4:8e:35:f5:9d:a4:1b:72:57:63:6a:ec:af:50:
         a9:f1:a5:b7:92:b2:b2:0e:5b:a1:93:f5:78:bb:72:ef:4e:cf:
         40:0a:eb:8e:0f:6a:12:ae:3a:e1:0b:29:a3:0c:3c:22:97:b8:
         ac:93:e2:0b:b3:a2:66:e4:73:50:ee:35:83:1c:56:44:fb:b2:
         20:63:7f:2c:28:bb:31:b9:04:34:8e:d8:9c:d6:36:5d:4a:0e:
         ff:d7:61:b7:b9:ea:88:b2:4d:01:dc:f2:37:60:92:63:22:16:
         d7:6c:30:f0:32:f2:40:b6:f7:2d:45:d5:14:02:04:9b:f3:14:
         db:ad:d2:3a:39:94:96:2d:43:0b:d9:aa:98:b2:5d:78:85:f3:
         ad:7d:82:86:0b:cb:b9:c9:c3:72:dd:e8:f3:22:e4:8e:8c:e1:
         c0:96:86:7a:69:cf:92:bf:4c:12:b4:f8:bb:b7:79:d1:f5:49:
         a0:09:32:d2:54:a4:3f:36:f2:c4:c5:f2:ed:c5:ec:41:89:93:
         08:2f:4c:c0:7b:07:95:8d:0f:19:57:aa:6d:64:6a:fc:77:af:
         95:32:47:9a:2e:eb:e5:33:06:51:e7:65:a6:e1:02:45:88:1b:
         75:57:f7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----