Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204829.roa
File:                     AS204829.roa (raw, json)
Hash identifier:          Q16dPB/1Mjb/cP7JrqmiO4a9AJlrf8h5gzQvi5Cp2go=
Subject key identifier:   C3:31:82:02:F5:95:2C:49:82:9E:22:88:AA:F9:3D:EA:72:75:A6:65
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       3147B63557032163395D6391439C7FDCE3A2988A
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204829.roa
Signing time:             Tue 03 Jan 2023 02:07:18 +0000
ROA not before:           Tue 03 Jan 2023 02:02:18 +0000
ROA not after:            Tue 02 Jan 2024 02:07:18 +0000
asID:                     204829
IP address blocks:        2a06:a005:9e0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:47:b6:35:57:03:21:63:39:5d:63:91:43:9c:7f:dc:e3:a2:98:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan  3 02:02:18 2023 GMT
            Not After : Jan  2 02:07:18 2024 GMT
        Subject: CN=C3318202F5952C49829E2288AAF93DEA7275A665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:df:5d:56:89:9d:63:53:8c:34:ba:8d:11:
                    39:87:fd:9c:a9:5e:3c:87:0d:17:15:73:6d:7a:85:
                    13:0d:b6:89:b8:d3:dd:bf:4e:a3:6f:28:1e:16:f7:
                    b4:1f:0c:d1:ab:6f:65:41:d7:25:73:dc:87:cc:be:
                    c7:eb:15:40:49:64:77:80:b6:0a:75:53:47:5e:d3:
                    ee:f8:b1:35:f8:b6:da:4e:6e:8c:da:f8:5e:8c:9a:
                    44:85:49:2f:0c:44:47:0c:eb:8e:d4:ad:08:93:6f:
                    bd:10:f4:be:66:59:7f:99:f4:ef:78:6f:3c:05:5d:
                    6f:cf:c8:74:6d:78:47:a9:4c:8b:9b:62:d6:dd:00:
                    3e:08:0b:65:33:bb:bc:84:18:e4:d4:f9:78:5b:1c:
                    bb:36:82:43:74:cb:66:ba:f0:ca:77:0a:59:60:0a:
                    c0:3c:52:21:06:ca:0a:5a:d6:46:0c:4f:bd:1d:6f:
                    ec:e0:63:2a:27:4b:89:b0:e0:a2:ca:57:07:56:b4:
                    e9:b8:11:72:dd:72:26:88:57:fd:9d:db:ad:87:8b:
                    4c:da:7e:7e:a6:2d:6b:0e:a7:cf:5b:05:95:8f:08:
                    fd:b1:bd:fa:ea:b0:b6:98:6f:16:cb:db:fd:c0:44:
                    9f:f6:c7:67:81:70:03:27:cc:1c:0e:c5:9b:e8:c2:
                    62:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:31:82:02:F5:95:2C:49:82:9E:22:88:AA:F9:3D:EA:72:75:A6:65
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204829.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:9e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         3c:ff:84:d0:d3:3b:53:0b:a2:80:89:1a:08:23:d6:8b:0b:cc:
         fd:c3:5f:aa:99:fa:7c:41:55:a0:08:59:2a:37:dd:41:f3:32:
         29:78:17:c3:df:ba:7f:05:8a:88:1b:2e:6d:1e:a2:9c:81:42:
         db:de:16:d2:3b:6e:c8:7b:56:5a:1c:45:8e:13:17:f9:07:cb:
         af:49:16:18:ea:a3:6d:20:76:f0:c1:47:3d:ea:81:e8:34:f4:
         98:1b:13:f3:3f:99:b0:47:7a:98:4b:f8:5c:01:66:26:35:be:
         16:0b:1c:ab:79:8e:38:3f:9c:80:9e:28:dc:b4:ac:2c:85:ba:
         cd:82:d6:79:80:e9:b7:0d:0c:4e:dd:5a:8e:7a:dc:69:2f:a1:
         3d:79:50:91:23:f2:53:bc:0b:f6:28:6d:46:44:30:e4:21:f2:
         89:e9:ff:78:c4:c5:25:17:fb:40:06:a5:e9:05:14:b5:b7:2d:
         18:34:1b:8b:84:7d:7f:e2:00:4c:14:f7:73:b5:f0:38:94:86:
         82:97:ef:73:32:e1:32:ff:30:a9:75:72:13:ec:cc:6b:04:0d:
         26:04:36:c2:65:3a:bd:fd:21:2e:d2:74:5c:14:57:02:ff:e0:
         e6:f8:6a:0b:e7:b2:bc:4a:fd:b0:2a:4e:5b:d5:40:2a:d6:2f:
         e0:94:f7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----