Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34372e302f32342d3234203d3e203432303535.roa
File:                     34352e34322e34372e302f32342d3234203d3e203432303535.roa (raw, json)
Hash identifier:          XTMhnNeS8EnyQDGYQ+g+tHIB+qx+9vMPwtaAcnfVyWI=
Subject key identifier:   D8:53:FB:31:63:F0:FE:BF:53:86:81:A9:40:12:45:A1:D8:3C:C5:25
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       7DA6CE9C2CE563AA08D7974A0552541542130A3E
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34372e302f32342d3234203d3e203432303535.roa
Signing time:             Thu 12 Oct 2023 13:17:08 +0000
ROA not before:           Thu 12 Oct 2023 13:12:08 +0000
ROA not after:            Thu 10 Oct 2024 13:17:08 +0000
asID:                     42055
IP address blocks:        45.42.47.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a6:ce:9c:2c:e5:63:aa:08:d7:97:4a:05:52:54:15:42:13:0a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Oct 12 13:12:08 2023 GMT
            Not After : Oct 10 13:17:08 2024 GMT
        Subject: CN=D853FB3163F0FEBF538681A9401245A1D83CC525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:08:eb:b8:c3:36:44:de:ef:8a:d2:41:c4:10:
                    b4:1c:73:4e:dc:29:2f:d6:6a:65:84:36:a4:e9:15:
                    a6:24:cb:77:8c:fc:81:1a:1c:89:57:f1:9e:e0:6a:
                    bb:53:51:c3:b6:4a:f8:1b:91:fe:3a:dc:89:52:6d:
                    14:0e:13:a8:83:b4:9f:9e:58:df:d3:06:b5:2f:eb:
                    72:04:51:47:a2:1e:04:57:f6:9e:8e:21:71:ef:67:
                    3b:4c:86:55:f1:54:21:f6:6e:db:dd:42:a5:c2:2c:
                    75:49:9b:fa:c4:1d:5a:a6:a3:72:62:72:f0:93:79:
                    a7:0c:b6:b8:f8:c6:02:2c:69:98:a9:47:95:5e:8c:
                    cd:5c:ff:f3:ae:71:08:56:58:06:54:1a:a1:fe:bd:
                    86:20:33:39:aa:1f:81:9f:c8:c1:1b:e7:cc:ae:27:
                    75:7f:3b:04:62:2e:c2:34:84:61:e6:97:e7:bb:dd:
                    68:79:f3:45:02:26:d0:9b:67:9b:97:d6:c0:d4:d8:
                    3e:a7:70:07:71:56:93:88:b7:58:df:b0:9b:93:52:
                    56:d2:2b:20:ff:dd:f4:32:f0:21:ac:2d:b9:16:78:
                    64:41:c2:cf:02:53:38:d5:71:85:33:37:fb:67:45:
                    fc:90:d2:2f:4d:c4:e2:c9:c0:47:84:45:b3:45:c9:
                    3a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:53:FB:31:63:F0:FE:BF:53:86:81:A9:40:12:45:A1:D8:3C:C5:25
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34372e302f32342d3234203d3e203432303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:b7:9c:2f:52:79:ba:f5:86:9f:25:62:64:f1:7a:3d:45:d3:
         b8:94:70:a5:ab:a8:c8:f8:7d:38:a6:a0:7b:39:d5:01:82:65:
         8e:bd:2b:69:46:a9:93:4b:82:f1:76:0d:54:b6:ff:87:a4:08:
         ee:b8:6c:72:bc:92:95:4e:f4:90:0b:5f:2d:bc:31:a4:70:18:
         5c:ee:f8:bd:31:64:6a:f5:20:b2:b4:9a:c5:25:53:ea:f9:6b:
         6e:9b:b1:d6:62:17:97:a2:30:0a:86:cf:e1:ff:be:c8:24:37:
         f4:8d:32:fd:cb:c9:76:68:f2:b6:fe:5c:bc:6e:4e:7e:f2:46:
         cb:02:fd:41:09:62:a6:e2:5b:eb:a7:77:9f:54:ae:aa:29:d0:
         0a:53:7a:a9:6b:43:9c:c1:99:1f:6b:7d:50:8e:9c:df:8a:a4:
         13:ae:d2:ea:77:16:3f:c0:6f:9d:ed:25:9f:c1:8a:dd:b6:be:
         38:2c:cc:f8:ed:08:9e:6a:a2:0e:00:69:01:03:71:98:a3:4a:
         86:fc:e0:d7:71:98:a4:31:9e:f8:46:fd:b2:06:92:e2:30:e7:
         be:68:ac:26:3d:0a:c4:c4:f8:5c:04:a1:0a:36:9b:b6:6e:4b:
         e9:c8:81:2a:04:56:69:b8:bd:e5:81:ac:46:8b:24:b6:09:3a:
         f8:84:28:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----