Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230392e37342e35332e302f32342d3234203d3e2033353933.roa
File:                     3230392e37342e35332e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier:          01TmoiudN9N3ONCPxu8PfDD5Ns2Y/s1eSAoRmqC4ISA=
Subject key identifier:   C6:2E:6B:CD:8F:9F:E7:B4:5C:82:A3:40:A3:AB:6F:DE:8E:2F:DF:E0
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       33E7D3CB39F67F12973A5CBC7584F09477D20F87
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230392e37342e35332e302f32342d3234203d3e2033353933.roa
Signing time:             Thu 26 Oct 2023 05:01:12 +0000
ROA not before:           Thu 26 Oct 2023 04:56:12 +0000
ROA not after:            Thu 24 Oct 2024 05:01:12 +0000
asID:                     3593
IP address blocks:        209.74.53.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e7:d3:cb:39:f6:7f:12:97:3a:5c:bc:75:84:f0:94:77:d2:0f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Oct 26 04:56:12 2023 GMT
            Not After : Oct 24 05:01:12 2024 GMT
        Subject: CN=C62E6BCD8F9FE7B45C82A340A3AB6FDE8E2FDFE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a5:39:f1:1f:06:4f:e3:e5:f8:8c:a1:c6:6d:
                    17:46:77:2b:b2:d4:ae:74:ad:70:f3:b1:35:27:6a:
                    7e:c7:60:bc:6f:83:ca:ff:0a:0b:0f:b3:80:29:0e:
                    3f:de:0a:2a:bf:ee:ca:1f:1d:79:5f:26:13:0d:6e:
                    42:7a:bd:bb:ed:43:0a:4d:b2:31:86:ff:b8:ea:47:
                    14:b2:fe:7d:8d:93:d9:30:1d:7b:ed:db:94:7e:42:
                    3b:bc:d3:07:a2:ac:91:4d:f2:9b:bc:23:24:0b:bf:
                    d9:de:4b:9a:f7:f2:90:71:04:64:4d:94:bd:6c:45:
                    60:53:03:60:6e:43:6a:9c:b6:d1:0b:a0:69:ad:7a:
                    65:98:f7:6a:7f:cc:db:d5:16:4c:23:1e:50:72:9a:
                    98:1d:e4:a5:9d:a8:da:27:b8:ed:24:9b:16:5f:4f:
                    0d:c7:76:60:93:05:02:23:f5:f7:9c:dc:a9:26:e3:
                    98:96:4a:04:ca:75:92:d9:dc:ba:d1:4d:02:c1:e9:
                    a6:d2:27:9e:4f:4f:36:ab:c4:3e:7d:d0:69:6e:19:
                    61:78:ea:21:07:d2:3e:b8:9a:46:1d:36:e0:77:4a:
                    b8:12:37:0e:11:fe:17:b0:b8:60:28:73:4a:b2:e3:
                    db:f1:c7:ff:39:96:03:95:b2:b1:29:d0:bc:20:e1:
                    4f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2E:6B:CD:8F:9F:E7:B4:5C:82:A3:40:A3:AB:6F:DE:8E:2F:DF:E0
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230392e37342e35332e302f32342d3234203d3e2033353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.74.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:ea:4f:b2:be:cd:f3:42:62:4c:fc:8c:27:f5:d6:a9:87:ff:
         70:74:e0:c9:5b:42:28:cf:d4:c2:cd:1c:f8:c0:b7:55:26:9a:
         a3:77:5f:1c:99:b6:7b:9f:40:70:e4:3d:45:16:33:77:5e:08:
         c2:2c:ac:20:d1:7c:f6:5f:bb:75:82:b6:85:06:f8:e3:34:3c:
         cd:c0:38:69:00:62:49:39:11:6d:95:5d:fe:d8:37:12:db:76:
         93:04:0d:d5:65:32:5f:ed:21:0a:de:ed:b1:d2:d8:ef:4c:69:
         6b:a3:5d:9a:37:8f:11:6b:cd:b2:58:2b:87:f7:23:6e:4b:b6:
         32:bd:58:2f:3b:63:c6:0d:d2:11:c9:7f:d7:f3:0f:c8:c8:37:
         e1:da:35:e3:c8:30:06:29:35:56:4f:b0:21:0c:84:08:64:f5:
         36:63:35:59:f8:36:70:6e:07:0f:09:dd:af:c1:c6:6e:bd:71:
         7b:9b:6b:8a:6f:91:7c:9b:d1:ef:7f:60:1a:17:0b:bf:e4:9b:
         60:20:56:fb:48:86:5c:2b:b3:7a:4e:d6:55:75:9f:a7:e5:ef:
         d0:3e:fc:2e:b8:69:f3:03:21:b0:2e:a5:47:85:12:0a:1e:39:
         49:cf:a6:8c:e7:2b:4b:46:11:9e:e6:f2:77:a2:ee:07:50:cc:
         11:8b:8a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----