Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205421.roa
File:                     AS205421.roa (raw, json)
Hash identifier:          OtKm0INAtF8BXwbQwQCBs9+LH0xy81lRKhS+d10uIa4=
Subject key identifier:   EF:73:0C:4C:29:66:06:84:0A:D1:B5:74:C0:22:9D:09:EA:EB:68:A3
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       2D1D2AD43A76A242DDD4E0D4C54D25B7AC29E990
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205421.roa
Signing time:             Tue 03 Jan 2023 02:07:17 +0000
ROA not before:           Tue 03 Jan 2023 02:02:17 +0000
ROA not after:            Tue 02 Jan 2024 02:07:17 +0000
asID:                     205421
IP address blocks:        2a06:a005:1b80::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1d:2a:d4:3a:76:a2:42:dd:d4:e0:d4:c5:4d:25:b7:ac:29:e9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan  3 02:02:17 2023 GMT
            Not After : Jan  2 02:07:17 2024 GMT
        Subject: CN=EF730C4C296606840AD1B574C0229D09EAEB68A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6e:e8:43:3e:86:c1:c4:d7:8c:fb:24:08:f6:
                    bf:a1:4c:3c:40:e0:fa:84:96:7f:aa:e2:75:4f:87:
                    74:10:cf:f3:21:4a:f0:52:87:bb:e9:5a:7a:92:86:
                    8b:45:53:3e:12:da:68:02:46:6c:01:31:74:32:81:
                    e0:ec:85:e4:82:66:07:ea:9d:16:c6:a8:c9:5c:4f:
                    01:8e:3a:5e:1d:eb:0d:8f:bf:74:00:a0:c9:ea:bd:
                    c1:8c:ea:3e:37:9f:96:c7:21:72:2d:49:51:34:cb:
                    3c:e3:77:10:10:1d:bb:72:b6:7b:e6:be:df:7f:e4:
                    7c:f8:e5:d6:04:2c:68:1e:ab:04:1b:79:62:63:95:
                    b1:c6:01:f9:4a:13:48:1a:b6:fc:3f:91:e4:b1:4a:
                    48:2e:a3:e1:c4:25:00:3f:c6:84:9a:d7:e1:92:89:
                    4f:8e:6b:8a:04:33:c5:82:56:ed:9a:ae:9d:7b:e1:
                    bc:d3:34:da:5c:2b:2d:02:a1:84:0a:4d:09:87:21:
                    02:2f:38:6f:32:3d:0b:a4:e4:6a:af:53:06:01:9f:
                    4d:19:8d:03:8d:02:f6:5b:3d:ca:2a:76:a8:f3:97:
                    9c:cb:a8:7b:43:16:ec:60:6c:f2:c3:de:4e:c4:23:
                    d6:ec:21:80:df:25:fb:e2:5f:9e:0b:63:0b:5d:ad:
                    35:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:73:0C:4C:29:66:06:84:0A:D1:B5:74:C0:22:9D:09:EA:EB:68:A3
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205421.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1b80::/44

    Signature Algorithm: sha256WithRSAEncryption
         29:a4:28:8d:95:71:51:a9:14:e1:96:c9:68:fc:4e:90:0d:ee:
         e4:b2:a9:75:98:41:db:be:2a:ea:48:b6:a4:ba:2d:9f:99:07:
         44:7a:0e:ea:e5:00:5e:71:e7:09:19:74:ba:15:72:16:ef:1f:
         68:25:74:cc:cd:c5:2c:25:64:b3:d9:53:b8:58:d1:45:9d:71:
         f6:2d:6c:2c:36:0c:17:55:36:97:7a:42:86:48:43:43:f3:9b:
         c8:39:76:6f:ba:81:65:eb:fc:7b:3d:1d:40:1f:0d:6f:68:de:
         4a:9d:26:ad:af:bc:0f:92:92:63:14:34:07:47:c1:80:a9:52:
         0d:9b:5e:9c:08:bf:90:f9:a4:46:e3:4a:dd:34:a6:d2:7d:ca:
         4b:f7:a4:f3:89:42:0f:97:d1:9f:77:5e:d4:f0:3c:ad:f5:12:
         74:09:1c:3c:54:72:09:8a:2d:53:c1:24:94:57:fa:48:ef:8b:
         74:38:d3:75:36:9e:d0:62:57:a3:6e:3d:d1:55:49:57:f0:bc:
         63:68:91:a4:3c:64:6c:0d:85:74:70:39:a2:06:ef:be:ae:91:
         07:53:07:15:1d:84:53:48:bc:b9:42:69:5e:5c:29:98:f3:4a:
         14:19:bc:36:1a:ca:48:7a:87:99:e0:ab:3e:48:bf:e5:f9:ad:
         4d:18:7c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----