Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208076.roa
File:                     AS208076.roa (raw, json)
Hash identifier:          kbmX9tyoQjPwNS6fyD5H0OkBYWdZgxfA9kI+Q7rLjoI=
Subject key identifier:   20:0B:6D:41:4B:CA:A9:CB:0B:4F:C4:01:BD:95:55:29:3D:97:7E:AE
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       212467866F3EFD6D9559E58DAD0B4EE14988C0AF
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208076.roa
Signing time:             Tue 03 Jan 2023 02:07:19 +0000
ROA not before:           Tue 03 Jan 2023 02:02:19 +0000
ROA not after:            Tue 02 Jan 2024 02:07:19 +0000
asID:                     208076
IP address blocks:        2a06:a005:5ae::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:24:67:86:6f:3e:fd:6d:95:59:e5:8d:ad:0b:4e:e1:49:88:c0:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan  3 02:02:19 2023 GMT
            Not After : Jan  2 02:07:19 2024 GMT
        Subject: CN=200B6D414BCAA9CB0B4FC401BD9555293D977EAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2d:91:6b:7f:7b:90:18:d0:97:0b:2a:e9:f4:
                    a3:06:dc:84:bd:e4:c2:02:80:ba:14:db:a8:d2:dd:
                    dd:0e:18:34:24:1e:64:2c:89:c7:55:e8:08:72:07:
                    c2:92:7b:dd:50:31:31:1e:c3:2a:ce:98:4c:5e:2f:
                    4a:08:a1:07:92:8c:4f:3d:ac:73:0f:a4:9c:bb:ea:
                    47:b4:d3:a7:44:16:7f:ee:1e:7c:40:3c:e4:85:86:
                    0d:93:f8:d8:4b:e6:85:8f:45:4b:66:e1:79:49:a1:
                    8d:9a:41:e3:6e:5b:fb:32:34:c2:34:c9:88:19:4c:
                    2c:39:db:99:fc:da:9f:83:a6:51:8a:df:3d:45:1a:
                    bc:14:3f:19:f8:a3:fa:42:83:4e:c0:66:2e:26:3b:
                    9d:7e:52:64:e4:17:4d:0a:17:9a:c0:fe:d7:0a:f9:
                    13:3c:7d:dc:d3:09:8d:a9:7f:76:76:05:15:26:fc:
                    ef:d4:ac:47:a0:d9:ef:62:4d:fe:7a:20:64:9d:9b:
                    d2:03:08:76:4c:1a:47:97:70:39:d0:3b:6e:3c:82:
                    44:40:73:ae:34:6d:99:e9:38:0c:70:60:f8:c1:ec:
                    45:d5:7b:5f:af:ba:6d:84:c0:84:3f:35:30:b7:d3:
                    a1:ec:9c:1a:b7:96:74:11:ea:3a:ed:67:cf:ce:73:
                    5b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0B:6D:41:4B:CA:A9:CB:0B:4F:C4:01:BD:95:55:29:3D:97:7E:AE
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208076.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5ae::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:9b:af:63:dc:26:a7:7f:67:4e:ae:15:41:b1:b0:91:11:9f:
         88:33:24:73:a0:bf:ca:a7:8e:72:d9:83:bf:d9:2e:92:ee:97:
         df:1d:27:67:22:02:65:bf:55:7e:10:91:d7:e6:a4:d3:31:6f:
         ba:fd:de:5c:bd:1a:73:6d:24:4c:f5:de:ed:43:8b:a3:a3:74:
         8f:52:33:a6:b8:ee:d7:bf:7e:aa:cf:15:40:76:a8:44:9f:92:
         10:de:6a:f4:4f:d8:43:4c:61:41:f3:84:ee:ee:33:5c:69:8a:
         8f:c8:51:ae:9f:cc:9f:62:a4:5d:b4:34:f3:e5:a7:5d:b3:94:
         e1:fd:62:b6:f5:81:b7:47:07:91:17:c9:25:61:68:01:cf:2b:
         5e:0a:2e:79:cd:0b:c5:58:0f:74:07:03:ba:db:23:00:1a:e1:
         c3:bb:33:c6:52:7b:1f:d9:79:5c:84:aa:fc:a0:e7:d3:19:b9:
         a7:7b:80:ce:f5:f3:6a:cb:cc:61:b5:31:b2:b4:ce:00:ff:73:
         3b:a8:26:ca:f4:ba:0b:9c:f4:47:9a:b5:d8:1a:f6:f6:d2:29:
         f6:14:ec:b0:96:4f:2e:71:d3:0c:6d:5d:a3:bc:ed:a6:55:13:
         a7:07:c4:73:e5:5f:85:7c:46:91:f5:70:3f:0d:f1:68:8b:ba:
         34:34:8f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----