Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3138342e31392e3233392e302f32342d3234203d3e203236313237.roa
File:                     3138342e31392e3233392e302f32342d3234203d3e203236313237.roa (raw, json)
Hash identifier:          X8H4fDyMks2JE5m9yblTsONhjTsgTHcJjOzDXDqUGpE=
Subject key identifier:   AD:BB:06:5E:20:7F:EC:53:06:29:BF:84:1D:06:AA:62:24:39:E2:F9
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       54FC8E6B231F814F0B9A515060E2D17B7954CDAE
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3138342e31392e3233392e302f32342d3234203d3e203236313237.roa
Signing time:             Wed 12 Jul 2023 13:14:14 +0000
ROA not before:           Wed 12 Jul 2023 13:09:14 +0000
ROA not after:            Wed 10 Jul 2024 13:14:14 +0000
asID:                     26127
IP address blocks:        184.19.239.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fc:8e:6b:23:1f:81:4f:0b:9a:51:50:60:e2:d1:7b:79:54:cd:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Jul 12 13:09:14 2023 GMT
            Not After : Jul 10 13:14:14 2024 GMT
        Subject: CN=ADBB065E207FEC530629BF841D06AA622439E2F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:01:96:27:f1:6f:57:9e:ac:34:10:24:1d:ce:
                    35:c9:fe:97:d1:04:51:85:e4:75:7c:54:b8:66:eb:
                    69:dd:7b:59:45:2d:db:6b:01:1c:b6:e1:c5:1f:d2:
                    f5:8c:2e:f7:b2:d0:e2:b5:08:be:a8:c5:4a:04:81:
                    10:44:50:b2:03:16:6f:27:84:92:89:f4:1e:83:53:
                    ad:35:99:23:b1:ad:c7:36:c6:54:42:01:20:b5:29:
                    63:d8:77:06:74:a3:4c:34:cf:85:07:f3:82:0e:d3:
                    48:38:12:21:01:bc:1c:aa:5f:81:b7:bc:a9:06:ee:
                    0d:cc:1c:bc:ae:bc:03:1e:d6:d7:50:4f:85:33:f1:
                    74:1a:93:db:66:4e:fc:18:5f:d2:c6:23:fa:6a:23:
                    43:40:36:ee:ef:e8:9f:46:3e:c6:27:e6:2a:47:dc:
                    0f:d6:ca:06:c9:66:b1:7d:76:26:36:4c:dd:58:ad:
                    df:d3:79:2f:38:fb:7f:0c:79:b4:0e:ee:34:ad:bb:
                    d3:70:fa:4e:e9:22:57:43:30:cc:bb:df:83:f5:66:
                    52:ca:69:22:81:b5:24:9b:4e:98:f4:d2:a3:65:ab:
                    de:b2:18:b1:99:ff:86:b2:a8:02:63:fc:1f:fa:81:
                    9a:cd:f6:d9:3d:7a:59:8b:af:03:fb:62:dc:56:fc:
                    3f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BB:06:5E:20:7F:EC:53:06:29:BF:84:1D:06:AA:62:24:39:E2:F9
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3138342e31392e3233392e302f32342d3234203d3e203236313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.19.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:47:1f:68:22:09:89:34:05:be:a6:4f:2b:2a:f8:1c:0b:ce:
         30:f3:26:da:8c:61:8a:35:92:cd:a6:0b:a9:82:23:af:55:48:
         a9:26:9a:b4:5b:da:0e:22:ca:fa:b4:f0:ca:8b:f9:18:24:e9:
         4a:bb:bc:3e:88:00:a3:61:c1:b6:60:bd:04:31:e1:38:e6:8e:
         92:20:96:bd:8f:63:a4:80:e7:6f:bb:e2:46:7f:03:4b:dc:0e:
         e0:fb:b2:34:98:09:f7:7d:64:47:07:8d:37:8b:89:9b:33:ef:
         6a:b6:88:d0:f8:d3:c8:5d:2e:62:36:be:c9:68:74:9e:c0:0b:
         67:21:8a:81:47:3b:f5:4f:2a:e0:7d:b9:8c:55:34:68:8a:2e:
         ce:df:7d:29:1d:48:fe:5a:01:41:36:05:54:e4:cb:70:a0:21:
         a8:93:97:7a:31:ae:55:b9:69:d7:60:2f:c8:b6:f4:52:17:c5:
         e5:18:46:9b:db:36:05:c5:24:96:9f:5b:c6:7a:a6:92:5b:e4:
         4b:be:b8:3f:6e:92:7e:fe:d9:f6:c0:28:3e:ac:12:e5:0e:15:
         b3:fe:29:16:06:7c:06:6b:85:23:52:f4:b9:32:96:d6:66:26:
         1e:a0:67:77:7f:c6:29:b7:26:d3:f1:5c:e5:a3:8d:93:f2:af:
         fd:a3:86:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----