Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3133322e302f32322d3234203d3e20383334.roa
File:                     3135372e3235342e3133322e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          JFqOwBCEckv6IdOaYNJsrfCrUIV8N5QxRkcoxr/Qzng=
Subject key identifier:   B3:CB:3D:BA:DF:FB:3D:58:19:FC:57:E2:A1:83:05:0D:D1:62:6B:C2
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       5FF9827E8DE2CDFAB3101851478690195C71A374
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3133322e302f32322d3234203d3e20383334.roa
Signing time:             Thu 13 Apr 2023 00:00:09 +0000
ROA not before:           Wed 12 Apr 2023 23:55:09 +0000
ROA not after:            Thu 11 Apr 2024 00:00:09 +0000
asID:                     834
IP address blocks:        157.254.132.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f9:82:7e:8d:e2:cd:fa:b3:10:18:51:47:86:90:19:5c:71:a3:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr 12 23:55:09 2023 GMT
            Not After : Apr 11 00:00:09 2024 GMT
        Subject: CN=B3CB3DBADFFB3D5819FC57E2A183050DD1626BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:4a:70:bd:4a:93:51:64:58:9a:b1:57:1c:
                    f2:02:2f:24:fc:71:db:a6:de:4e:bc:2a:76:5f:14:
                    8d:1f:4c:67:88:8c:8a:36:ae:fa:26:81:58:b1:7c:
                    91:5b:56:c7:f3:f2:f4:84:6c:d4:22:58:a4:00:17:
                    c0:19:91:f5:32:fb:8a:0f:fd:41:29:14:3b:29:83:
                    7e:aa:11:4b:09:1a:c4:b6:6e:5c:b0:fa:b4:7c:66:
                    f1:22:f0:a4:7f:7c:34:24:5a:dc:7d:c5:fa:1d:84:
                    20:bc:18:15:05:23:cc:3b:53:bd:65:3d:5b:8f:08:
                    21:34:45:e6:52:a9:fc:a9:11:be:08:6b:9e:fb:29:
                    fb:bf:c7:7e:d8:eb:8c:06:6b:55:df:2f:74:30:9f:
                    6a:d5:d8:7a:80:d9:92:2f:17:28:2a:08:9f:a5:aa:
                    87:4b:35:29:98:9a:2b:7b:f4:79:5a:39:72:f5:64:
                    5e:d2:cd:43:14:b1:78:20:76:d1:b5:49:6f:df:d1:
                    c7:f7:ba:eb:00:c3:c5:fd:fc:c4:0b:f3:d8:1d:fc:
                    81:5f:42:c6:66:27:63:ba:a3:9b:69:f5:22:1f:ac:
                    06:4b:24:2e:45:41:8d:66:dc:8e:f5:f4:48:31:29:
                    ba:d0:9d:b0:e7:fa:04:f2:b9:f7:90:e2:18:cf:a9:
                    eb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CB:3D:BA:DF:FB:3D:58:19:FC:57:E2:A1:83:05:0D:D1:62:6B:C2
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3133322e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:c8:27:b4:8a:2d:5a:71:6a:0d:27:18:58:d0:64:db:df:58:
         3e:70:e3:2d:11:38:7c:ac:06:3c:71:dd:a5:bd:00:2e:cd:94:
         bc:43:46:e4:70:30:af:8c:45:2e:98:02:89:94:86:da:f7:fa:
         ea:61:fc:e6:8d:35:43:84:88:5f:98:b7:35:a0:6d:e7:e4:85:
         c1:55:b9:5d:5f:19:29:6e:21:7a:df:7f:18:05:87:e6:7c:8e:
         16:d1:1e:b1:a9:85:b2:8c:26:05:7c:b6:f4:bd:08:66:c4:18:
         4a:d5:88:74:d0:c5:ca:48:42:a3:ea:ec:d4:e6:f2:86:c7:8e:
         9d:f7:72:f7:9a:6b:f8:b2:1c:ec:17:6d:98:53:df:a9:33:6f:
         cc:cc:1b:69:5a:6b:16:9e:e5:99:f9:d2:c7:03:aa:53:39:64:
         e3:e3:98:7d:8d:02:62:26:f8:66:52:08:4f:fb:ec:3e:cb:17:
         98:5c:11:15:5a:f6:12:15:83:b1:61:39:7d:ed:11:6f:58:c8:
         b6:55:54:1e:11:46:af:f0:a6:e6:7f:a3:69:88:f8:31:7d:6b:
         c6:02:87:5f:1e:8d:5c:3e:8d:d3:b2:32:f5:03:05:91:ee:45:
         bd:71:8b:c1:80:18:bc:55:f3:5c:16:80:97:5c:62:96:14:59:
         e6:5f:1a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 08:23:25 2023 by rpki-client on console-fra.rpki-client.org