Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e203333363936.roa
File:                     34352e34322e34342e302f32342d3234203d3e203333363936.roa (raw, json)
Hash identifier:          QTapIxcKwyJIv4iZE5IZVA35fHOr6HDK9ztlrfexaZY=
Subject key identifier:   92:9C:BE:0B:2F:95:66:3E:39:62:79:B8:56:7A:9F:40:4B:A9:98:5E
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       6E0B100FFFD54500B362780A5E379DA7DD5EA498
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e203333363936.roa
Signing time:             Fri 20 Jan 2023 06:11:11 +0000
ROA not before:           Fri 20 Jan 2023 06:06:11 +0000
ROA not after:            Fri 19 Jan 2024 06:11:11 +0000
asID:                     33696
IP address blocks:        45.42.44.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0b:10:0f:ff:d5:45:00:b3:62:78:0a:5e:37:9d:a7:dd:5e:a4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Jan 20 06:06:11 2023 GMT
            Not After : Jan 19 06:11:11 2024 GMT
        Subject: CN=929CBE0B2F95663E396279B8567A9F404BA9985E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:75:0b:98:4f:b1:66:d8:ad:f8:8e:e4:43:1b:
                    ef:46:85:01:2b:a9:69:3d:dc:ae:38:ce:39:6e:37:
                    2a:95:ea:66:a9:47:18:6b:f9:3d:e2:66:2c:a3:c1:
                    6e:a9:37:48:70:96:ac:4c:3b:20:15:32:00:18:89:
                    0f:14:79:50:7b:03:a7:b8:95:1b:cf:e6:21:a3:9a:
                    44:7e:f6:9a:50:91:da:dc:61:fe:c0:94:38:e4:4c:
                    7e:3d:c2:0c:14:52:55:77:ee:de:83:12:aa:20:a4:
                    a0:ef:c4:be:af:d0:2a:85:4f:5f:59:eb:97:9f:f8:
                    b0:13:11:28:4a:f4:ce:68:2f:a4:8e:4c:ca:a1:01:
                    d0:3d:da:2a:7c:03:cc:9a:f8:6c:a7:03:9f:60:21:
                    0a:82:b1:50:61:a9:bd:02:70:da:54:b5:75:47:74:
                    64:35:0a:e3:00:91:1d:1f:e1:1a:cf:0b:9a:1d:7c:
                    9c:27:40:06:f7:de:b3:04:18:94:64:45:1d:9e:68:
                    4f:fa:eb:2f:93:37:fd:4f:4f:aa:6b:88:23:c5:3f:
                    f9:c4:d8:7c:59:5e:43:6d:1c:f2:10:c7:d1:ee:b1:
                    23:46:14:d2:f7:3a:ef:e4:3d:c7:6c:f2:51:b6:5e:
                    28:7e:22:21:6e:82:e5:56:80:7c:3f:14:02:42:d9:
                    09:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9C:BE:0B:2F:95:66:3E:39:62:79:B8:56:7A:9F:40:4B:A9:98:5E
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e203333363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:39:6c:8c:8b:29:47:ca:66:90:a6:f8:9c:6f:6f:27:af:77:
         8c:ea:31:fd:68:ea:9b:dc:2a:5b:2f:b4:fb:c7:0d:e6:4c:c6:
         44:24:24:56:a2:e6:0d:a7:8d:82:74:86:53:ee:d5:ac:ec:bc:
         82:7c:5f:6c:f0:91:cb:51:00:92:90:06:0a:ab:24:5a:b3:0a:
         de:76:4e:1b:a5:1e:ab:ce:a3:4b:02:5f:a0:82:ea:f1:04:f8:
         27:0d:96:d8:af:0e:71:72:dc:37:af:7a:14:04:75:6c:87:81:
         ea:b4:e5:80:10:aa:3e:6f:11:dc:40:5c:7c:54:7e:ab:05:52:
         14:cc:3b:6f:33:6b:00:00:ed:b8:d3:4c:29:d4:d8:71:e5:78:
         92:ad:c4:f8:97:e5:79:96:b9:59:e4:ea:f1:26:da:ea:36:65:
         24:20:db:1e:80:d7:b8:f0:6b:70:0b:25:c0:c9:29:b1:f5:ce:
         4e:c5:32:c5:20:ce:c3:0c:de:f2:58:11:b0:c1:0f:9b:7d:3b:
         48:3a:8b:c4:18:d3:42:42:d8:71:6c:9e:ff:16:68:80:7b:a9:
         74:46:e2:ff:85:71:a6:7f:d5:f5:d7:52:7b:eb:15:a2:fb:b0:
         67:92:0e:77:d9:f7:e6:7c:9b:34:08:74:49:3e:7d:6a:41:22:
         b1:f9:98:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----