Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS41732.roa
File:                     AS41732.roa (raw, json)
Hash identifier:          BlM8qqPG0W2ffZ9gxdU+Q2yZhKa/gUeuNHTWTaxAuiQ=
Subject key identifier:   42:54:20:E8:95:54:5E:CE:84:F0:CB:CC:8B:72:73:B7:B7:BF:63:7F
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       53F8EEB770F56CEB2D821C6168F3A51E4B5C3B62
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS41732.roa
Signing time:             Wed 04 Jan 2023 10:37:43 +0000
ROA not before:           Wed 04 Jan 2023 10:32:43 +0000
ROA not after:            Wed 03 Jan 2024 10:37:43 +0000
asID:                     41732
IP address blocks:        2a06:a005:6::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f8:ee:b7:70:f5:6c:eb:2d:82:1c:61:68:f3:a5:1e:4b:5c:3b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan  4 10:32:43 2023 GMT
            Not After : Jan  3 10:37:43 2024 GMT
        Subject: CN=425420E895545ECE84F0CBCC8B7273B7B7BF637F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e1:bf:9a:cb:cf:14:00:d2:18:9d:20:45:32:
                    c8:45:36:bb:65:af:c3:d3:06:92:59:f1:a6:a7:40:
                    f3:d7:4b:b5:24:3d:62:66:3c:12:21:eb:0a:85:e2:
                    2e:8f:09:13:84:fc:4c:c5:05:3a:92:4e:c0:bd:3e:
                    2c:71:dd:21:cd:50:65:30:ca:a7:6c:84:74:a3:e0:
                    68:37:7b:f9:4b:b0:a9:97:b4:fa:c4:e3:05:d1:94:
                    de:ad:ef:f7:bd:c0:58:45:f3:9b:30:2b:b8:56:91:
                    7b:88:22:f1:c5:f3:cc:ef:b4:5a:82:10:a0:f3:c0:
                    96:62:77:af:74:1d:c3:c4:86:b2:18:2f:36:2f:64:
                    58:73:1b:47:5b:ab:81:a2:7d:f0:ec:1d:3a:42:ef:
                    ce:23:ba:c2:04:37:48:3c:c0:e7:a0:e9:31:38:4b:
                    f5:dc:fd:33:30:90:2a:47:b1:cf:0e:36:70:e9:0e:
                    06:b6:d1:7b:7a:b0:fa:29:c4:3e:18:c5:e3:e8:44:
                    09:5f:56:99:e0:eb:21:a8:78:39:e5:84:4a:e0:16:
                    07:cd:71:b7:88:4c:0d:9d:e8:2e:e8:1a:cc:8e:fe:
                    05:4c:3b:83:bc:98:b6:e9:27:42:17:92:e7:97:37:
                    d4:95:11:01:a5:52:5d:77:aa:8a:fc:68:a6:fb:d5:
                    96:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:54:20:E8:95:54:5E:CE:84:F0:CB:CC:8B:72:73:B7:B7:BF:63:7F
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS41732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:0f:40:bf:f3:7e:a2:31:1b:fc:54:37:c6:7c:b0:08:56:1f:
         59:c4:73:66:94:8f:8f:11:99:e1:b3:32:1a:09:75:aa:44:7c:
         aa:51:b0:d9:38:a0:14:fa:0e:a2:b3:17:73:42:0f:93:bb:0a:
         33:a9:cd:32:88:81:7a:48:ad:65:30:72:22:2c:3c:b4:4b:51:
         39:b1:3f:2d:00:c9:2a:14:34:6a:13:5d:1d:50:e2:f7:f8:61:
         3d:1d:d8:be:bf:16:ac:90:78:97:53:55:03:fc:36:cb:c4:e4:
         cb:c9:8b:a2:5c:b3:af:f0:8e:2e:2f:1d:d8:8b:e0:cf:b6:87:
         e1:e5:17:d0:f2:e2:16:56:74:85:97:5b:4f:d7:a8:00:e4:b9:
         5a:f9:01:21:45:27:84:12:94:12:74:1a:9e:12:a6:bc:10:82:
         fd:bb:42:67:5e:96:db:7e:7e:20:49:67:5e:a9:b1:fe:6d:4e:
         39:0c:51:2f:54:62:22:7b:1b:24:3b:d5:11:18:96:21:97:f0:
         08:8c:65:34:d9:7d:bf:55:25:ac:4d:f5:cf:33:5e:f1:91:0a:
         44:8f:c0:1d:f4:c9:d7:7a:0d:6c:8f:76:66:e0:13:de:7a:c9:
         e4:e1:17:94:a0:1c:4c:15:01:96:59:85:9b:ae:c7:6d:ed:8a:
         44:60:4d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----