Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204005.roa
File:                     AS204005.roa (raw, json)
Hash identifier:          bTcYyTbETzGjm1jcscXeXOnxPZXn/irBgCP1KxuhjSA=
Subject key identifier:   36:7A:13:FF:22:56:4C:EE:7E:F1:74:25:CC:BB:B1:55:56:E8:03:DA
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       7EBC1D2C4DB1B55E1FA347A8DD919AB723BB6469
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204005.roa
Signing time:             Tue 03 Jan 2023 02:07:09 +0000
ROA not before:           Tue 03 Jan 2023 02:02:09 +0000
ROA not after:            Tue 02 Jan 2024 02:07:09 +0000
asID:                     204005
IP address blocks:        2a06:a005:ba9::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:bc:1d:2c:4d:b1:b5:5e:1f:a3:47:a8:dd:91:9a:b7:23:bb:64:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan  3 02:02:09 2023 GMT
            Not After : Jan  2 02:07:09 2024 GMT
        Subject: CN=367A13FF22564CEE7EF17425CCBBB15556E803DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:03:68:2d:5b:82:d4:b6:3d:34:6a:dd:39:07:
                    9d:0d:1a:4f:9f:82:37:80:d0:c5:61:c8:44:36:17:
                    69:e7:77:8d:f9:e7:7b:e2:ce:1e:b8:7c:71:7b:c2:
                    1c:3a:ae:7a:c0:29:c8:1e:91:78:5c:2b:dc:c4:4a:
                    94:48:38:3d:ae:1d:40:35:d4:07:01:b4:eb:27:9b:
                    f3:69:9d:59:2f:1d:bb:0c:63:22:ff:ea:2d:72:8e:
                    35:56:6e:1c:c9:a8:6a:12:24:90:d1:a1:b5:3c:05:
                    fb:46:4e:b0:d5:be:f3:06:72:d5:bb:d0:83:54:e7:
                    a6:9f:3b:fd:b6:9f:ff:47:68:01:72:d5:a3:6b:f7:
                    02:ec:9d:da:ff:96:40:f4:dd:60:69:b8:da:90:e1:
                    1b:d5:79:35:d4:8f:3d:f1:c8:17:f2:fe:0b:39:7b:
                    b3:ac:99:02:cc:b0:5b:b8:1d:e4:9a:31:08:0d:0d:
                    05:20:70:dc:45:3b:b3:09:e4:13:19:dc:c6:ce:cf:
                    65:8b:ae:9e:be:30:16:50:0b:ba:82:ae:38:93:d4:
                    4b:4e:b5:80:9e:0b:ed:3a:cd:2b:79:ee:0d:59:f3:
                    cd:44:b0:70:1a:0a:cd:86:99:16:fe:c0:67:40:32:
                    f7:d8:f0:21:98:9c:8f:6c:f7:d3:fc:10:b7:2a:2d:
                    da:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7A:13:FF:22:56:4C:EE:7E:F1:74:25:CC:BB:B1:55:56:E8:03:DA
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204005.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:ba9::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:55:b3:0a:f1:bd:09:82:35:d6:2d:36:ba:40:0f:0a:b0:82:
         25:fc:94:1f:78:82:dc:b9:51:44:7b:da:b2:6f:c0:90:e0:89:
         97:07:9f:f7:1c:00:e4:f1:ce:03:bb:d5:18:70:22:1f:74:1b:
         4a:dc:51:5e:d4:61:9b:09:d5:ff:89:cd:99:38:1a:7a:00:ea:
         7b:44:95:e3:fd:fc:69:e0:d8:4c:4f:73:ac:6d:98:37:11:bf:
         43:76:eb:b2:a5:ba:44:bb:94:bc:74:19:4d:41:f7:4c:e2:1d:
         fd:3f:1f:86:43:cf:4f:ec:ef:b3:9f:23:6d:da:1a:25:93:93:
         f0:d2:e1:5b:73:64:1d:24:94:06:64:06:b7:b5:da:27:ab:29:
         4b:20:c1:f8:a6:0e:73:2a:74:85:a2:32:1e:f5:6f:1d:0f:68:
         98:88:de:48:35:af:02:7c:70:d4:61:8e:cf:10:d4:8d:1f:e8:
         79:87:c7:42:32:6a:02:3f:99:ff:82:03:20:f5:4b:95:b0:5e:
         0d:ba:d9:3c:83:a4:b4:99:c2:59:8c:4f:17:d3:9d:29:86:ad:
         7b:29:ff:2c:e3:95:a6:e2:44:77:e1:21:e3:2f:22:c8:b1:f6:
         ea:5a:b7:2e:e7:93:63:d2:ab:e3:25:d1:bb:d4:ff:be:68:29:
         d5:7d:61:4e
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUfrwdLE2xtV4fo0eo3ZGatyO7ZGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzAxMDMwMjAyMDlaFw0yNDAxMDIwMjA3MDlaMDMxMTAvBgNV
BAMTKDM2N0ExM0ZGMjI1NjRDRUU3RUYxNzQyNUNDQkJCMTU1NTZFODAzREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClA2gtW4LUtj00at05B50NGk+f
gjeA0MVhyEQ2F2nnd43553vizh64fHF7whw6rnrAKcgekXhcK9zESpRIOD2uHUA1
1AcBtOsnm/NpnVkvHbsMYyL/6i1yjjVWbhzJqGoSJJDRobU8BftGTrDVvvMGctW7
0INU56afO/22n/9HaAFy1aNr9wLsndr/lkD03WBpuNqQ4RvVeTXUjz3xyBfy/gs5
e7OsmQLMsFu4HeSaMQgNDQUgcNxFO7MJ5BMZ3MbOz2WLrp6+MBZQC7qCrjiT1EtO
tYCeC+06zSt57g1Z881EsHAaCs2GmRb+wGdAMvfY8CGYnI9s99P8ELcqLdrRAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUNnoT/yJWTO5+8XQlzLuxVVboA9owHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjA0MDA1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKgagBQupMA0GCSqGSIb3DQEBCwUAA4IBAQCgVbMK
8b0JgjXWLTa6QA8KsIIl/JQfeILcuVFEe9qyb8CQ4ImXB5/3HADk8c4Du9UYcCIf
dBtK3FFe1GGbCdX/ic2ZOBp6AOp7RJXj/fxp4NhMT3OsbZg3Eb9DduuypbpEu5S8
dBlNQfdM4h39Px+GQ89P7O+znyNt2holk5Pw0uFbc2QdJJQGZAa3tdonqylLIMH4
pg5zKnSFojIe9W8dD2iYiN5INa8CfHDUYY7PENSNH+h5h8dCMmoCP5n/ggMg9UuV
sF4Nutk8g6S0mcJZjE8X050phq17Kf8s45Wm4kR34SHjLyLIsfbqWrcu55Nj0qvj
JdG71P++aCnVfWFO
-----END CERTIFICATE-----