Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63025.roa
File:                     AS63025.roa (raw, json)
Hash identifier:          R0VDCJ5zhWfFGYIMD5wqSqA+Y7Q0NwBoRQ4kkqk9bHQ=
Subject key identifier:   21:4A:AD:73:4D:D5:04:00:B8:59:9F:FE:84:5E:2F:1A:74:4E:93:11
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       6E7F395AF8F2B807F488D3EC666B5A8EB7EE8B54
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63025.roa
Signing time:             Thu 13 Jun 2024 15:08:15 +0000
ROA not before:           Thu 13 Jun 2024 15:03:15 +0000
ROA not after:            Thu 12 Jun 2025 15:08:15 +0000
asID:                     63025
IP address blocks:        23.94.142.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 24 Jun 2024 09:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7f:39:5a:f8:f2:b8:07:f4:88:d3:ec:66:6b:5a:8e:b7:ee:8b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 13 15:03:15 2024 GMT
            Not After : Jun 12 15:08:15 2025 GMT
        Subject: CN=214AAD734DD50400B8599FFE845E2F1A744E9311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a6:08:6b:d4:09:a9:8b:85:11:d1:b1:39:98:
                    4b:ce:30:34:16:54:aa:e6:6f:22:36:8d:5f:4b:79:
                    43:b3:da:e5:9e:f7:72:e8:5e:42:93:8b:8d:2f:1a:
                    fb:fc:f4:b3:22:94:07:03:60:c6:28:3d:8b:46:07:
                    c0:b3:c8:b7:8e:84:17:4f:cd:ef:40:00:68:a1:e5:
                    7b:a7:6b:c7:a4:c9:f3:d4:c1:f9:54:29:d5:63:ae:
                    3d:f6:19:50:28:10:65:81:9a:fc:6c:57:7c:d9:5c:
                    50:09:a7:19:22:56:e0:5e:64:e8:93:ec:7b:a6:85:
                    ef:c7:8e:bc:b3:9f:86:d4:da:16:79:24:0e:7d:90:
                    f9:9c:aa:7a:54:1f:aa:43:f4:c9:6c:7b:17:55:f8:
                    99:9e:95:c5:7d:c5:20:95:53:36:bf:60:4b:c1:d2:
                    f2:ce:a7:c4:bf:16:b2:c1:1e:b8:61:4a:bb:8c:a2:
                    e0:3f:ea:80:43:0e:ee:1c:80:f3:31:05:b9:ec:d5:
                    26:a2:ec:07:ab:97:67:29:69:c1:d6:03:a1:4e:d2:
                    6d:c5:45:ad:0f:44:de:96:0e:be:a6:ca:66:6a:1d:
                    07:2e:fa:01:16:60:35:a1:36:89:bc:5f:b2:a1:7c:
                    1c:17:c3:55:14:25:1a:21:a0:d9:62:17:09:44:75:
                    a3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4A:AD:73:4D:D5:04:00:B8:59:9F:FE:84:5E:2F:1A:74:4E:93:11
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63025.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:32:2c:d9:f1:15:93:dd:fa:10:46:08:ca:ae:98:a0:84:f3:
         74:7d:29:a0:28:49:9a:fa:26:89:6d:c4:08:24:a6:1e:4c:1e:
         86:3a:b6:c2:25:a8:cf:f2:31:cc:50:82:5d:e7:56:bb:52:89:
         fe:b0:a7:f2:6c:16:ac:e5:be:0f:23:e4:2d:4c:94:e1:42:21:
         ed:fe:58:7d:09:4b:65:27:d2:32:be:ed:b1:cc:48:db:1e:90:
         0f:0d:b5:eb:2b:36:42:b6:0f:ba:59:4b:5f:e9:28:95:25:77:
         57:90:4a:4c:e2:b6:5a:b8:bf:83:91:6e:6c:ae:fc:15:7d:0d:
         be:53:7d:7a:71:31:0e:8d:cf:43:6a:5e:e9:2c:e2:20:26:03:
         8e:9b:12:ff:5d:bb:f1:95:98:81:f1:77:b2:e7:38:be:d3:44:
         eb:64:1c:a4:d1:9a:06:a0:1b:fa:23:ef:1a:7d:0b:95:a1:42:
         84:17:ec:9a:04:50:ff:ab:77:4c:35:01:f3:47:6d:45:2a:07:
         e5:b4:1b:46:59:fe:b9:22:58:e2:f1:35:6e:bb:fe:ff:21:36:
         db:0e:de:80:95:f3:07:63:9b:72:55:91:19:c2:d1:24:6f:2c:
         a6:78:a3:ec:cf:3e:e0:f7:30:b1:19:40:db:44:19:03:bd:ef:
         2c:cf:63:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----