Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230352e3233382e3230302e302f32342d3234203d3e2033353933.roa
File:                     3230352e3233382e3230302e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier:          dSfudaHx2MquaJRCstsrJxRZkCoctPS7Ic0tlVyJP14=
Subject key identifier:   BA:00:7E:B2:07:92:96:A2:57:19:67:86:5F:77:80:40:65:8A:A1:5B
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       2ACB92BB21A0C00AE7CB234A3E04FB53E564A425
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230352e3233382e3230302e302f32342d3234203d3e2033353933.roa
Signing time:             Thu 26 Oct 2023 04:56:58 +0000
ROA not before:           Thu 26 Oct 2023 04:51:58 +0000
ROA not after:            Thu 24 Oct 2024 04:56:58 +0000
asID:                     3593
IP address blocks:        205.238.200.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:cb:92:bb:21:a0:c0:0a:e7:cb:23:4a:3e:04:fb:53:e5:64:a4:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Oct 26 04:51:58 2023 GMT
            Not After : Oct 24 04:56:58 2024 GMT
        Subject: CN=BA007EB2079296A2571967865F778040658AA15B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a0:25:9a:62:fb:3b:12:fb:60:f8:8b:13:4d:
                    1f:30:93:4d:72:d6:e3:8b:6d:c1:94:54:33:fb:e3:
                    4b:7d:92:71:f3:5b:1d:17:4f:d1:1c:c6:d7:81:b3:
                    8c:70:a5:cc:dd:04:e6:8c:99:7c:97:84:9c:92:e2:
                    bf:28:f4:1e:76:ce:ec:47:46:46:3d:04:1b:68:4f:
                    15:48:96:ec:e1:f8:01:a6:1c:cf:d6:ac:27:06:d4:
                    60:4d:cc:c4:ff:31:4c:33:41:c1:cc:36:83:b8:37:
                    b3:16:f1:41:91:bd:23:f3:43:39:21:4c:86:4e:eb:
                    cb:91:ea:b5:48:fb:98:cc:fe:6a:b2:01:37:89:df:
                    92:0b:2d:32:54:cc:53:6d:3f:d3:7e:32:12:44:81:
                    82:67:af:d9:5d:9f:18:ea:24:e1:1b:4c:49:c2:76:
                    01:c5:06:43:97:16:ac:ac:45:95:c1:76:f9:1b:6c:
                    8d:42:21:8f:ce:80:2f:a3:f4:63:fd:c0:63:68:18:
                    91:39:9e:94:5d:48:ce:af:c5:e9:8e:74:53:24:7e:
                    f3:4e:82:99:00:76:e0:22:e5:1e:52:6c:1c:2d:54:
                    b5:a2:c6:88:03:9c:85:f3:f0:a6:30:f5:3d:06:26:
                    ae:89:fd:bf:93:8e:e9:a9:4c:6a:20:1a:99:45:fd:
                    35:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:00:7E:B2:07:92:96:A2:57:19:67:86:5F:77:80:40:65:8A:A1:5B
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230352e3233382e3230302e302f32342d3234203d3e2033353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.238.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:71:19:26:a6:e3:35:ac:99:6c:8f:f1:c9:33:3d:15:40:ad:
         b4:30:45:f0:08:ca:39:5f:d8:d4:cb:3b:ef:23:c9:91:34:72:
         ac:bb:62:0d:b8:41:16:fb:e7:6a:f0:0b:6b:7c:67:0d:db:bf:
         d0:5f:cd:a1:f4:c1:70:b6:f5:0e:e9:d2:3c:fa:89:42:4f:23:
         6b:ac:e4:d8:bd:fa:73:cf:e4:92:0f:f6:8b:b8:76:79:d4:a7:
         aa:a2:05:2b:94:4d:1c:63:d5:d8:1a:18:fe:a8:bd:cd:46:f7:
         f7:4b:28:f2:78:ff:a4:4c:55:3e:82:e2:6b:80:09:92:90:5d:
         9f:52:fd:b6:10:c6:4e:07:2a:19:2e:87:d7:c3:1b:11:a3:e7:
         6a:14:b1:4c:54:4b:7c:dc:63:4e:f7:9f:a5:61:46:49:07:2f:
         f0:9e:17:c0:e2:1b:ea:bb:6c:67:47:79:a6:78:58:59:73:a2:
         99:e3:6c:89:1c:01:cc:a4:50:78:ec:b3:ab:8b:3f:33:7a:34:
         fa:23:f8:5f:2f:bd:c0:2c:be:f4:6d:ea:14:5f:97:d1:b4:d9:
         96:ed:43:3e:3c:ae:1d:71:05:28:5a:f5:76:95:3d:2b:17:fe:
         85:b8:fb:dc:5c:6a:c7:a1:35:dc:58:02:5d:ab:2c:a0:0c:f7:
         8a:f8:e1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----