Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206216.roa
File:                     AS206216.roa (raw, json)
Hash identifier:          V6G3kE6C/J3OVu8Z+jUQ4CzHcEfwp72jtGPJ1E0Hf0M=
Subject key identifier:   80:15:FE:CE:31:ED:B3:EA:E8:33:28:EF:B8:79:CB:CB:6E:74:2E:90
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       3A65A937300340D4185C9567C398E294B61A30AF
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206216.roa
Signing time:             Tue 03 Jan 2023 02:07:07 +0000
ROA not before:           Tue 03 Jan 2023 02:02:07 +0000
ROA not after:            Tue 02 Jan 2024 02:07:07 +0000
asID:                     206216
IP address blocks:        2a06:a005:4d1::/48 maxlen: 48
                          2a06:a005:853::/48 maxlen: 48
                          2a06:a005:1d51::/48 maxlen: 48
                          2a06:a005:1d53::/48 maxlen: 48
                          2a06:a005:1d58::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:65:a9:37:30:03:40:d4:18:5c:95:67:c3:98:e2:94:b6:1a:30:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan  3 02:02:07 2023 GMT
            Not After : Jan  2 02:07:07 2024 GMT
        Subject: CN=8015FECE31EDB3EAE83328EFB879CBCB6E742E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:31:67:13:60:17:a3:28:91:3a:59:13:ba:13:
                    94:08:9e:5c:e3:63:23:85:7c:1d:79:e4:f2:03:51:
                    31:29:81:f7:e6:1f:f2:2e:f2:2b:d2:8e:2e:8d:a9:
                    1a:8e:e6:5f:cf:fa:ed:c4:87:28:f3:9f:98:4f:af:
                    57:47:36:ca:bd:5b:eb:80:36:21:70:13:ef:ba:e2:
                    00:8d:62:7c:e7:56:5a:40:40:dc:73:2f:a1:57:0b:
                    f7:e8:30:e3:3b:0b:65:2d:b7:e2:59:94:53:70:dd:
                    6e:27:32:f8:51:18:7f:6c:fb:3a:ed:29:dd:08:81:
                    12:d5:89:1e:23:b9:f7:01:eb:26:63:34:3e:0f:ce:
                    83:3c:9b:43:6d:46:94:7c:e4:cb:37:90:22:a7:55:
                    dd:5e:ec:11:7c:aa:da:98:48:e4:d6:62:2e:ee:d2:
                    f9:db:18:73:72:07:66:40:19:f8:50:d3:fb:d2:be:
                    ae:61:c5:5a:e4:fa:b7:68:ad:8a:f5:a5:1d:88:4c:
                    65:9c:f9:d4:62:44:e7:ae:d8:a6:3b:82:46:84:d3:
                    ac:02:12:76:ef:49:34:d9:9a:25:13:c4:c5:f2:33:
                    a4:ea:0a:44:d5:9f:bc:7a:54:d6:ae:3e:b2:24:04:
                    f0:9d:cd:5a:ad:86:0f:46:96:24:de:66:f5:78:ab:
                    a9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:15:FE:CE:31:ED:B3:EA:E8:33:28:EF:B8:79:CB:CB:6E:74:2E:90
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206216.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4d1::/48
                  2a06:a005:853::/48
                  2a06:a005:1d51::/48
                  2a06:a005:1d53::/48
                  2a06:a005:1d58::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:f1:e7:e8:91:0f:d0:f8:45:60:2a:3b:ac:5f:f0:df:40:64:
         61:20:b3:74:40:ed:6c:f6:c6:3e:c1:30:14:e4:06:f5:fd:65:
         ea:5b:c7:06:41:4e:2c:d9:06:54:06:d1:ec:50:71:8e:09:cb:
         45:59:ec:55:b6:31:e0:90:a8:be:7a:78:c9:ec:fd:94:d2:7f:
         2f:92:4d:a0:a3:28:b1:a4:68:a0:4d:82:64:66:f5:68:f3:17:
         22:e4:21:4f:39:3e:b8:48:cb:7d:0f:c9:63:31:5d:c5:6c:a0:
         5c:1a:df:15:f7:e0:84:2f:d6:46:38:64:01:3a:32:da:cb:f6:
         c7:27:0f:10:25:24:23:f4:3c:4d:30:a6:95:b1:bf:22:32:1b:
         cb:a7:63:40:e5:4d:43:63:d4:ba:76:f0:d4:6c:37:bc:9f:f7:
         02:2d:32:de:31:25:7b:db:fa:47:66:85:a1:cc:75:27:42:0d:
         5e:49:52:8f:fe:5a:1e:ed:31:c8:e2:c7:02:2f:da:64:b1:19:
         fb:11:98:2f:42:a5:32:42:b4:11:38:ce:ee:26:2b:54:f4:5e:
         49:96:f5:9a:10:e4:90:df:62:16:8f:65:78:91:3e:d4:f3:34:
         51:83:bb:af:fc:2b:4c:ce:af:81:63:10:e4:b8:37:86:1c:2d:
         08:64:28:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----