Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS979.roa
File:                     AS979.roa (raw, json)
Hash identifier:          h8rszGleNnJLAbkUh5d8q+BqPZy3h8NPAlK56QT6R1A=
Subject key identifier:   AD:62:52:84:91:E8:85:8E:C1:81:4C:87:6B:DB:10:6A:54:C3:6E:06
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7813B9EBCC11CB12E3078EEF26BB3205192F78F3
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS979.roa
Signing time:             Sat 31 Aug 2024 18:35:57 +0000
ROA not before:           Sat 31 Aug 2024 18:30:57 +0000
ROA not after:            Sat 30 Aug 2025 18:35:57 +0000
asID:                     979
IP address blocks:        23.95.159.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 18 Nov 2024 00:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:13:b9:eb:cc:11:cb:12:e3:07:8e:ef:26:bb:32:05:19:2f:78:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug 31 18:30:57 2024 GMT
            Not After : Aug 30 18:35:57 2025 GMT
        Subject: CN=AD62528491E8858EC1814C876BDB106A54C36E06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:49:55:60:da:d1:62:c8:f9:a0:24:4c:ae:c5:
                    5a:ac:72:f4:92:4d:4b:c5:36:a7:fc:31:23:7e:6e:
                    ce:ac:d2:ce:ed:24:99:df:11:fe:2d:16:29:e5:5c:
                    9f:d4:62:72:d9:5b:72:82:3d:1c:08:ea:75:81:b2:
                    d3:ff:7d:18:ed:67:f3:ea:77:ab:c6:6e:4a:59:91:
                    44:c8:5a:11:ff:1f:50:1a:29:df:21:5b:8b:3b:a7:
                    c7:8f:9c:fe:66:25:25:48:d5:41:a4:de:94:56:96:
                    82:bb:d1:fb:2f:8f:5b:fd:bc:26:a8:48:f4:e0:2b:
                    2d:42:74:c5:61:5e:06:ed:ef:0c:e9:5e:12:01:d9:
                    35:a3:94:98:21:97:a4:9d:c3:9e:7f:e9:a4:de:65:
                    2a:2c:98:95:79:1e:b1:24:48:75:e0:db:44:58:ab:
                    8f:15:88:46:9f:0c:4f:eb:0a:4d:2e:1f:ad:6e:22:
                    b9:a5:1e:ea:d9:1a:93:4f:aa:ee:81:0b:4d:cb:1f:
                    62:ee:ae:dc:b8:4c:c2:2a:c2:5b:eb:c9:97:67:ae:
                    46:0c:18:91:3b:52:45:07:f5:e3:08:12:5d:d2:34:
                    7d:4c:1b:47:c9:fc:41:7b:9d:4d:c5:75:2d:6e:5a:
                    73:b5:e6:96:05:0b:cd:69:e0:46:32:62:14:10:2b:
                    2c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:62:52:84:91:E8:85:8E:C1:81:4C:87:6B:DB:10:6A:54:C3:6E:06
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS979.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:99:a5:72:b4:52:6e:5f:b9:0a:67:5c:01:7f:43:67:00:d9:
         33:a9:b0:37:88:cb:74:3e:27:7f:84:ee:87:b7:69:27:00:26:
         b7:23:7e:53:aa:30:e3:91:7d:c9:44:7b:8d:be:34:45:13:2c:
         2d:e5:7b:75:fb:72:f8:d8:be:85:7b:b8:6c:d6:6c:5d:6e:27:
         5f:de:0b:ea:b3:35:d7:ab:30:09:6a:97:85:22:c9:75:71:14:
         db:bd:93:22:c7:e6:8b:71:67:f5:0c:8e:31:e4:aa:5e:17:7c:
         43:97:e0:72:0f:10:73:a8:36:21:08:eb:98:25:08:f3:17:71:
         7b:3f:94:dc:de:86:99:f1:13:43:f7:44:ff:7b:fb:e9:29:ae:
         b3:8d:2b:0c:73:e0:b3:ee:f8:f9:99:7d:67:e4:2f:8f:e5:a3:
         06:9e:c4:c5:16:a5:ef:fc:4c:19:d9:d8:2f:5b:80:71:ac:9d:
         5c:da:81:e1:85:de:20:82:e7:42:50:b9:cb:54:64:9c:50:80:
         d1:07:c9:4d:81:cc:30:5d:43:0e:ae:07:72:77:3d:0c:64:42:
         6a:30:34:a2:ce:54:bc:0f:63:4a:0a:4c:59:49:4d:7a:b8:0f:
         2c:f8:8b:02:2f:a9:53:76:80:58:70:e4:3b:3c:cd:2a:8c:b5:
         9d:c5:87:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----