Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201732.roa
File:                     AS201732.roa (raw, json)
Hash identifier:          T2oh1tNZqEOukDQgApziUYtVwzL/h+wZpTsdp8sOPAk=
Subject key identifier:   28:AD:AC:4A:6C:99:1A:7E:02:BD:BB:5F:3C:73:F1:A0:AA:95:01:B8
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       5BF145CF6501CB973CB6F7A54DB43D72817BFDB3
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201732.roa
Signing time:             Tue 10 Jan 2023 12:42:27 +0000
ROA not before:           Tue 10 Jan 2023 12:37:27 +0000
ROA not after:            Tue 09 Jan 2024 12:42:27 +0000
asID:                     201732
IP address blocks:        2a06:a005:b60::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f1:45:cf:65:01:cb:97:3c:b6:f7:a5:4d:b4:3d:72:81:7b:fd:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan 10 12:37:27 2023 GMT
            Not After : Jan  9 12:42:27 2024 GMT
        Subject: CN=28ADAC4A6C991A7E02BDBB5F3C73F1A0AA9501B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:6b:54:b8:e3:6d:a3:46:74:70:5f:9f:e9:
                    82:35:38:92:01:e8:d3:2b:ef:5e:5a:e0:87:d4:39:
                    9b:02:69:bf:cd:26:ea:54:3e:82:07:44:02:e6:6b:
                    fb:fb:32:28:41:26:50:5c:96:0e:90:60:29:6c:e1:
                    d4:7d:5e:c4:bc:b2:aa:c7:66:2e:52:06:08:af:d3:
                    3e:34:33:5f:a1:01:48:7e:fa:d5:34:10:58:ea:05:
                    2a:2f:88:29:5c:cf:b5:19:32:3c:52:e7:0b:69:bb:
                    91:a9:d5:7d:7f:8a:27:6f:de:5a:3a:d9:d3:52:b7:
                    f3:78:88:b0:8b:e4:ed:3b:b9:86:ce:8d:72:86:9e:
                    aa:b5:24:1c:80:2b:97:3c:11:ea:48:42:cb:a8:9a:
                    cc:37:e1:87:d1:27:2d:cd:70:58:44:7e:be:98:c9:
                    68:3c:08:2e:54:f7:7f:0b:a9:49:9d:80:b9:ea:0f:
                    2c:7f:de:e3:54:20:50:2f:6e:d2:20:a1:ba:26:7f:
                    73:8a:c2:33:d3:df:e7:44:7b:92:db:79:7c:8c:11:
                    22:2b:e0:58:0b:a4:13:60:28:58:98:65:8d:b8:c9:
                    42:d7:90:28:ef:84:b4:c4:aa:2a:c3:24:e2:df:8e:
                    3d:97:ec:c8:cd:fc:d9:93:51:83:7b:72:b2:60:3f:
                    43:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AD:AC:4A:6C:99:1A:7E:02:BD:BB:5F:3C:73:F1:A0:AA:95:01:B8
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:b60::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:a8:90:d7:0d:61:5b:ff:cf:6a:c2:51:a2:14:23:e6:bb:ba:
         5e:79:e9:9b:99:9f:6f:2b:28:73:a1:fb:8e:b4:18:6d:36:93:
         db:c9:1e:cf:d3:01:73:ee:8a:25:f8:6f:df:c6:fa:58:37:ea:
         ae:cd:ab:06:c0:2c:eb:d0:eb:c3:22:b9:d4:c4:b7:bb:6e:0e:
         c8:68:b0:98:8c:d8:cc:c9:98:18:f9:9e:57:e1:e6:c5:18:e6:
         c9:fe:87:53:c7:03:79:6f:04:10:5b:a9:44:53:ec:f8:f5:bd:
         92:6c:a5:ff:75:28:14:c0:7f:6a:b6:8f:b4:fd:06:84:a9:20:
         96:11:a6:23:03:92:81:4d:40:45:38:96:69:e4:1b:37:98:9d:
         f1:e4:76:d0:b5:bb:ae:ef:4c:4f:44:aa:c4:dc:52:53:1a:a0:
         bc:fc:77:d3:5e:2e:c2:ea:4f:a2:a0:ef:39:a6:21:ef:c3:3e:
         d9:65:b2:4a:77:74:a6:8a:55:a4:c1:9b:06:99:a9:71:d2:66:
         37:a7:7a:1d:4c:08:e3:7c:f9:50:f2:2e:26:34:86:b1:df:51:
         b4:d4:0e:5b:b7:52:cd:c3:4a:a6:2b:37:71:04:d5:e8:2a:bb:
         60:8a:5c:06:5a:9c:6b:1b:de:16:84:a6:b5:76:0d:a0:ec:15:
         5c:8c:78:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----