Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0424ade-4337-4c2d-9dc9-1b524642b9d5.roa
File:                     b0424ade-4337-4c2d-9dc9-1b524642b9d5.roa (raw, json)
Hash identifier:          +xej2XCBTSL3huq/f81ui1peGfJXrBBnmLoGvX3dj6c=
Subject key identifier:   0B:50:EA:B8:0F:68:30:5E:A7:3A:BE:C4:3B:DA:E8:3B:35:C2:B7:C7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4EE855D513893BD4E64093FFA8CF4E108F7B7D09
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0424ade-4337-4c2d-9dc9-1b524642b9d5.roa
Signing time:             Mon 13 Nov 2023 00:00:00 +0000
ROA not before:           Mon 13 Nov 2023 00:00:00 +0000
ROA not after:            Mon 18 Dec 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        216.221.160.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e8:55:d5:13:89:3b:d4:e6:40:93:ff:a8:cf:4e:10:8f:7b:7d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:00:00 2023 GMT
            Not After : Dec 18 23:59:59 2023 GMT
        Subject: serialNumber=4c3b9efa348d30cff342095e5f40c9104ac922d672622f75c5e760eebb2c1e22, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:bf:67:45:47:1d:87:54:c7:02:6e:d8:0d:03:
                    90:c8:cd:19:2d:9d:72:f9:7c:3d:4e:19:92:49:b8:
                    26:37:fe:e8:b5:7a:d1:35:a2:36:29:40:8d:4b:e4:
                    25:3b:1a:eb:6d:cd:fa:66:8e:b5:3e:99:31:86:46:
                    ad:49:ab:0d:59:76:83:1f:f9:65:2b:37:55:21:f4:
                    b3:53:c3:95:4e:52:e8:b2:89:c8:5b:ff:df:4d:e1:
                    36:f9:ad:86:8a:d2:06:86:36:e4:ad:2e:14:50:22:
                    59:90:26:d6:2e:c4:7c:df:bd:79:91:99:88:14:46:
                    7a:10:95:f8:ab:fd:cd:2b:14:6b:c8:ea:0d:02:7c:
                    f8:41:03:ec:30:cc:56:58:21:ae:5a:8b:84:70:97:
                    20:6b:6e:c7:06:2e:38:3c:3f:cc:fc:7a:7b:96:be:
                    d2:30:c2:b3:55:ff:90:93:a4:2a:fb:8e:3c:08:3b:
                    17:7e:11:e0:e3:50:91:ca:e8:7b:19:e3:3a:65:1d:
                    64:80:fa:08:0a:6e:21:b2:d9:81:98:91:b5:bd:91:
                    7b:e4:a5:c0:9d:7c:d9:a1:91:d9:c2:dd:00:60:11:
                    3c:7b:2a:59:71:ac:05:ad:37:4b:71:d3:c9:56:59:
                    36:78:97:cf:c0:e7:f3:d3:5d:3d:78:14:60:e0:a2:
                    69:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:50:EA:B8:0F:68:30:5E:A7:3A:BE:C4:3B:DA:E8:3B:35:C2:B7:C7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0424ade-4337-4c2d-9dc9-1b524642b9d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.221.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cc:3b:7b:e5:df:e9:7b:92:66:f4:a2:46:98:59:32:3b:98:cb:
         41:d0:78:fe:ab:22:5a:a9:64:a6:93:65:b5:85:95:e7:8d:7f:
         cc:8c:4a:e8:06:70:ba:2c:90:f4:d5:72:89:4b:4a:0e:b0:eb:
         ba:75:01:ca:2d:28:c2:02:22:c6:50:2f:bb:82:80:b6:23:22:
         9b:17:55:1e:01:a5:72:7b:1b:91:59:93:e3:3a:4f:51:8f:2d:
         b4:ab:2f:51:89:da:ef:f0:61:88:ce:8c:91:c6:57:a9:dd:c9:
         46:97:7a:7b:bc:1c:6a:8f:7b:86:92:e8:37:73:54:29:55:30:
         65:eb:0c:e6:4b:29:4d:be:0a:a7:27:27:68:3c:4e:a6:9d:33:
         53:d9:1b:6f:13:86:27:b1:5c:89:0f:ee:15:f6:c1:ec:d9:32:
         0f:24:9c:a8:9a:e2:bd:3b:d2:c7:bf:8a:62:bb:0a:ce:73:e6:
         56:20:77:b8:fa:d7:64:68:42:2b:b9:af:a8:c1:8a:d2:d9:cd:
         ac:ed:c1:aa:1a:6d:2d:97:33:6f:c9:5b:af:1b:8b:fa:1b:56:
         28:45:42:c8:46:b8:b6:be:6b:ad:12:78:e1:20:fc:65:b6:5e:
         92:f5:15:f1:af:fb:67:b0:13:4c:85:bb:db:39:db:71:b2:d6:
         06:b2:cb:7c
-----BEGIN CERTIFICATE-----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