Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211576.roa
File:                     AS211576.roa (raw, json)
Hash identifier:          I6nQvgzFJLpkwMwaboynTBXkYe3ob70XmhHW7U+unHE=
Subject key identifier:   32:CC:A6:B5:3D:F6:1A:86:94:8E:EA:FB:76:20:DB:A8:C9:FE:BC:2F
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       0439BD5EF9310EF5812E67095B391E9ACDD55D93
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211576.roa
Signing time:             Tue 07 Mar 2023 09:40:47 +0000
ROA not before:           Tue 07 Mar 2023 09:35:47 +0000
ROA not after:            Tue 05 Mar 2024 09:40:47 +0000
asID:                     211576
IP address blocks:        2a06:a005:2990::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:39:bd:5e:f9:31:0e:f5:81:2e:67:09:5b:39:1e:9a:cd:d5:5d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Mar  7 09:35:47 2023 GMT
            Not After : Mar  5 09:40:47 2024 GMT
        Subject: CN=32CCA6B53DF61A86948EEAFB7620DBA8C9FEBC2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:60:b3:cd:31:27:86:86:ea:92:7a:db:e4:63:
                    8f:b5:93:21:95:21:29:95:75:2a:4b:ab:e0:83:5d:
                    c4:a8:bd:57:ab:a2:e5:b2:cb:fc:8c:c7:a0:43:4e:
                    ce:56:97:13:fa:6b:4a:ca:5f:75:ed:da:92:c4:bb:
                    04:da:2b:c5:ff:34:1d:51:4d:38:79:d8:94:65:7b:
                    8e:c1:bb:dd:bd:d3:a8:a7:2b:45:3d:ee:54:25:7f:
                    08:ae:fc:e6:0c:e5:2a:14:36:c7:e8:6e:06:82:b4:
                    27:22:5d:3f:fa:c0:da:26:dc:bf:11:40:6f:a3:a5:
                    db:26:af:c7:12:be:71:a7:13:7c:d4:a6:2b:7f:8f:
                    2c:a9:18:c4:f7:49:81:1a:c5:af:c7:ec:b1:c5:6c:
                    77:08:05:43:dc:b0:4c:6e:ca:f5:6e:92:f2:f7:1d:
                    80:0b:08:19:c2:82:c2:b7:bc:37:2e:21:e6:f0:7e:
                    d1:51:00:42:82:51:0f:4a:be:d9:e7:3b:e2:cf:ec:
                    e2:16:42:68:b8:31:fb:4e:b5:de:4d:a8:0b:42:f9:
                    41:2e:b4:fa:8b:90:d7:0f:c4:be:e4:f4:94:19:4b:
                    85:4b:03:3b:98:12:dd:f9:0f:1b:b4:9a:bb:bc:89:
                    2a:13:57:2b:52:e2:36:9d:75:24:73:74:f3:00:da:
                    85:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CC:A6:B5:3D:F6:1A:86:94:8E:EA:FB:76:20:DB:A8:C9:FE:BC:2F
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211576.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2990::/44

    Signature Algorithm: sha256WithRSAEncryption
         57:e6:28:91:0c:09:4a:91:9e:43:89:a5:b6:6f:16:a2:19:01:
         e2:02:36:77:cb:96:95:5f:e1:c0:06:0c:8b:1a:8b:c2:20:91:
         4e:ee:5b:bf:1c:6b:bf:0b:a1:c5:6d:88:84:e7:ee:92:af:6a:
         b3:8b:43:9f:26:62:98:86:cf:7a:e8:59:c3:9a:68:8c:5a:7c:
         03:f6:14:e8:9b:94:ec:eb:78:c9:6f:e7:2f:86:aa:8e:41:13:
         2c:d7:34:5d:fd:3b:b4:f7:95:4b:99:4f:2f:a2:7a:36:1c:60:
         dc:d6:d9:c2:26:11:72:4c:0c:fa:9c:20:88:ff:a6:82:02:95:
         57:a3:12:3a:7b:16:da:97:2b:31:fc:9f:35:7b:c7:6e:3b:8e:
         82:55:c1:db:cd:6a:8e:54:1e:d7:10:fd:9e:69:c6:11:9b:75:
         19:54:82:92:9b:9d:f0:24:05:25:db:69:91:6e:62:d5:25:73:
         06:ea:56:6f:61:79:1f:91:96:4c:0a:e5:b7:a8:08:b9:da:f8:
         1c:be:d8:f5:45:f2:90:a0:bc:aa:77:6c:7d:1b:81:7b:1d:cd:
         fd:e0:a4:51:b0:e2:29:5b:90:c8:e9:c5:da:23:cb:a2:66:a3:
         b1:55:62:5c:9f:75:01:93:ad:0f:14:e1:f9:6b:ff:b6:60:e3:
         0f:60:fe:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----