Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212294.roa
File:                     AS212294.roa (raw, json)
Hash identifier:          DCbDytFl3pRtL4WrmDYTqNKNVYgTUjZV+pexMDPx9nw=
Subject key identifier:   3D:1F:99:EF:45:9F:27:98:F7:BF:89:93:24:F8:62:D0:A3:73:91:40
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       24CEE15F9007370637BC90D1D450689A170E8535
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212294.roa
Signing time:             Wed 25 Jan 2023 02:04:04 +0000
ROA not before:           Wed 25 Jan 2023 01:59:04 +0000
ROA not after:            Wed 24 Jan 2024 02:04:04 +0000
asID:                     212294
IP address blocks:        2a06:a005:e40::/44 maxlen: 48
                          2a06:a005:1610::/44 maxlen: 48
                          2a06:a005:1620::/44 maxlen: 48
                          2a06:a005:1630::/44 maxlen: 48
                          2a06:a005:1800::/44 maxlen: 48
                          2a06:a005:18d0::/44 maxlen: 48
                          2a06:a005:1f40::/44 maxlen: 48
                          2a06:a005:1f50::/44 maxlen: 48
                          2a06:a005:1f60::/44 maxlen: 48
                          2a06:a005:1f70::/44 maxlen: 48
                          2a06:a005:1f80::/44 maxlen: 48
                          2a06:a005:2200::/44 maxlen: 48
                          2a06:a005:2210::/44 maxlen: 48
                          2a06:a005:2220::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ce:e1:5f:90:07:37:06:37:bc:90:d1:d4:50:68:9a:17:0e:85:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan 25 01:59:04 2023 GMT
            Not After : Jan 24 02:04:04 2024 GMT
        Subject: CN=3D1F99EF459F2798F7BF899324F862D0A3739140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e9:e6:df:b7:89:6b:1e:36:b8:e6:3f:3c:7e:
                    94:35:50:f2:42:51:bf:66:99:9f:d9:a5:ad:38:e2:
                    00:e6:bd:8f:44:93:65:47:53:07:e1:14:ac:fc:75:
                    88:a6:eb:cd:8c:de:34:ce:eb:05:8c:7e:54:6b:a8:
                    80:f0:8c:1c:02:4b:df:64:15:1f:f9:de:9d:9f:da:
                    72:9f:50:89:57:69:39:2a:17:01:47:56:b2:c2:dd:
                    bc:1d:18:b9:f9:2a:ce:cb:de:01:bb:6b:c7:a1:57:
                    a1:6d:3f:c1:0a:3e:89:44:0c:52:e6:10:f2:ee:5d:
                    ae:16:8b:be:69:b1:6d:10:06:5b:31:c6:ea:4d:e6:
                    ad:e2:af:f9:9c:52:19:11:8a:9b:1b:45:70:73:67:
                    3a:b4:e0:bc:51:ac:16:e6:9f:d3:5b:99:94:25:22:
                    3a:41:26:34:f9:d8:6b:53:51:7f:30:89:0d:1d:4e:
                    5d:26:af:8e:b9:b0:b0:02:76:23:74:35:01:d4:1a:
                    58:8d:ca:84:ad:69:c4:f6:1d:4e:79:35:2f:63:45:
                    e2:37:b5:d6:7c:8c:d9:5a:96:7b:98:12:3d:d4:64:
                    00:ba:d5:0d:ae:80:4f:ae:97:3d:24:ed:37:6e:6c:
                    b4:44:19:1b:e9:59:76:fa:71:3e:70:fd:19:e6:2b:
                    3b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1F:99:EF:45:9F:27:98:F7:BF:89:93:24:F8:62:D0:A3:73:91:40
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212294.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:e40::/44
                  2a06:a005:1610::-2a06:a005:163f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:1800::/44
                  2a06:a005:18d0::/44
                  2a06:a005:1f40::-2a06:a005:1f8f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:2200::-2a06:a005:222f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         3d:93:be:db:7e:ff:46:e8:02:29:2b:97:62:92:75:c2:e1:50:
         82:52:15:f9:84:1c:af:d4:17:d0:2a:86:98:57:92:3e:a7:5b:
         36:eb:35:f3:00:f7:dc:b0:db:64:c3:25:9b:57:52:b8:48:68:
         d3:6d:7b:39:89:04:ad:22:79:75:2b:9e:59:4b:c5:77:d8:e6:
         fa:5f:4a:00:ad:ec:60:fe:80:6f:18:b4:73:3a:f3:bd:09:71:
         d0:d9:7c:ba:95:2d:d5:fd:cd:2f:f8:e7:f5:5f:15:5b:86:30:
         ae:e2:b5:b9:2e:21:d5:0f:83:18:ad:59:0b:3d:73:4d:00:d1:
         02:82:72:fb:25:3d:9a:4f:80:96:a8:fc:6c:c7:d8:0d:24:9e:
         ea:3c:bd:9c:f4:25:54:bc:d9:1e:96:fd:95:85:25:f4:69:de:
         f9:0f:6d:4b:b7:7d:3e:a6:5f:96:f1:cd:19:3b:e5:6a:58:14:
         a5:9f:70:69:9f:90:4a:48:c5:15:e8:84:fb:bb:37:3c:50:d2:
         1b:fd:af:b1:25:04:72:c6:93:8c:6f:07:a6:39:78:03:14:45:
         6f:14:d7:56:b3:86:bf:38:ff:4f:14:de:5f:ff:79:b4:ae:26:
         3f:84:48:2c:c8:34:8e:67:69:f4:8b:cd:e7:6b:d3:04:04:3f:
         70:86:c7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----