Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e203139343337.roa
File:                     34352e34322e34362e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          hoC+dBWxdaASyI9g7JYSPfpwitO1WiVJdTcerNRwLGU=
Subject key identifier:   AD:F6:12:52:A6:15:62:E1:F8:A5:6D:A6:B7:66:9D:A4:FF:AE:C4:94
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       675452262F19A6134C00053AC3A57B5B8B68DE98
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e203139343337.roa
Signing time:             Fri 20 Jan 2023 06:11:14 +0000
ROA not before:           Fri 20 Jan 2023 06:06:14 +0000
ROA not after:            Fri 19 Jan 2024 06:11:14 +0000
asID:                     19437
IP address blocks:        45.42.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:54:52:26:2f:19:a6:13:4c:00:05:3a:c3:a5:7b:5b:8b:68:de:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Jan 20 06:06:14 2023 GMT
            Not After : Jan 19 06:11:14 2024 GMT
        Subject: CN=ADF61252A61562E1F8A56DA6B7669DA4FFAEC494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:21:b7:72:3b:52:26:96:8e:b8:ea:53:e1:da:
                    6c:7c:f3:c1:e7:94:a6:53:38:6f:ae:79:fc:f9:23:
                    cf:58:e9:22:fc:f0:8a:25:52:52:44:81:8c:f3:ab:
                    69:c8:11:9a:11:bb:57:87:f9:c3:08:eb:5f:de:1a:
                    e8:90:32:38:75:dd:2f:a3:5e:61:7d:88:96:4f:3b:
                    cc:da:6a:ba:63:92:5b:7f:3b:4d:f1:fe:97:92:28:
                    e4:c9:c8:08:29:35:f0:01:97:d8:66:99:61:48:c2:
                    c1:84:2b:ac:02:ae:ea:56:86:83:ba:f5:7d:fd:12:
                    95:cd:38:1c:da:59:2b:07:e9:14:30:0d:87:65:ad:
                    c7:53:ce:79:07:19:02:4b:dd:ea:bc:f1:6b:ea:7a:
                    96:0b:5f:c6:f7:92:0a:41:7b:2c:f7:9d:f3:fa:08:
                    4a:9d:de:d0:ea:a4:93:e8:0d:74:4e:ac:21:f4:93:
                    07:91:45:91:11:25:ca:a7:9e:23:18:0d:b0:f7:2a:
                    0d:d3:27:67:8a:2e:4e:95:a9:2c:cf:56:72:0c:d6:
                    65:e9:dc:89:76:c9:07:07:c2:1c:ad:0f:e9:3e:f8:
                    4a:48:dd:a9:d6:8a:9a:d6:99:51:ef:e9:2a:a0:28:
                    06:b4:21:ba:b9:47:d6:29:0d:8e:cf:16:fa:d4:77:
                    4e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F6:12:52:A6:15:62:E1:F8:A5:6D:A6:B7:66:9D:A4:FF:AE:C4:94
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:fd:0a:ad:76:69:eb:b0:34:3a:30:01:19:50:6a:96:54:9c:
         cb:c3:46:53:cf:69:35:04:ca:b5:55:84:e8:04:ec:d6:cd:7c:
         c9:f4:5e:07:de:44:e5:09:00:71:db:3c:e1:21:d4:01:75:4e:
         80:b9:08:12:3e:88:37:19:bd:fe:17:2c:22:20:4c:cb:74:f1:
         1a:8f:1e:b7:b3:8c:17:7d:34:60:18:13:23:db:9a:43:69:19:
         7f:97:4c:88:7e:71:e4:37:37:87:71:fb:e0:c6:9e:62:8d:4e:
         9e:23:b9:92:57:36:25:37:68:f3:4d:55:ad:2c:12:22:66:5f:
         01:a3:9c:c7:6a:a1:80:df:78:40:53:0e:f3:a5:b6:86:d0:79:
         b6:00:68:43:66:36:39:50:cb:41:72:f7:d7:9a:ee:ee:0d:b2:
         42:98:5a:27:8e:ef:e6:f3:14:66:46:34:86:13:01:fc:71:85:
         55:76:36:fe:db:e9:4f:ab:c3:da:66:fb:15:b3:76:59:21:2f:
         07:19:f0:de:81:e5:87:99:aa:eb:61:05:65:d5:53:e1:e3:70:
         2f:ec:17:55:77:3e:06:03:90:ad:5d:74:1e:9f:9f:f0:9d:b7:
         c7:a5:85:3c:50:81:98:58:21:65:d2:96:7b:1e:9c:fb:3f:7c:
         8d:5f:6e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----