Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232342e302f32302d3230203d3e203137313339.roa
File:                     3137332e3234372e3232342e302f32302d3230203d3e203137313339.roa (raw, json)
Hash identifier:          mR0SUGHfrJ1QohOqYoKHS0kOTBEDlJLjQG74baLxyOI=
Subject key identifier:   07:7C:3C:53:72:87:C0:E7:F7:EF:36:7B:7A:A1:9E:59:DB:B2:B5:83
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       1CA25E46328F0589980F08A4ED1BD16A59D2F268
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232342e302f32302d3230203d3e203137313339.roa
Signing time:             Thu 13 Jun 2024 11:05:21 +0000
ROA not before:           Thu 13 Jun 2024 11:00:21 +0000
ROA not after:            Thu 12 Jun 2025 11:05:21 +0000
asID:                     17139
IP address blocks:        173.247.224.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Tue 02 Jul 2024 08:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a2:5e:46:32:8f:05:89:98:0f:08:a4:ed:1b:d1:6a:59:d2:f2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Jun 13 11:00:21 2024 GMT
            Not After : Jun 12 11:05:21 2025 GMT
        Subject: CN=077C3C537287C0E7F7EF367B7AA19E59DBB2B583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c8:92:ca:b4:cd:72:89:52:67:53:01:1f:a3:
                    e1:52:d3:20:43:fe:c4:91:75:6a:02:f9:76:e0:02:
                    c7:59:23:f4:d0:c8:be:1d:92:b9:6b:8e:f6:4f:d8:
                    83:fd:0f:b5:78:78:26:07:83:0a:ab:bf:a4:82:ee:
                    32:4e:97:30:58:06:a9:87:33:3a:eb:49:ac:ff:fe:
                    3f:2d:be:e0:df:b4:15:09:3a:44:84:66:d8:31:bd:
                    43:55:fe:8e:f8:bd:f2:55:ae:9a:e5:ad:66:a8:f0:
                    6f:68:fc:8e:5c:92:4d:29:fe:44:12:a9:e0:31:a1:
                    e9:23:06:dd:4a:80:7a:9a:b2:01:97:39:a1:e9:77:
                    3e:9f:db:71:19:38:7c:68:b1:09:6d:8c:09:e8:f8:
                    f6:ce:7b:58:0c:36:9c:f8:91:02:e2:bb:11:d0:40:
                    35:50:dd:07:67:95:b8:e0:c4:b2:bb:69:33:81:4d:
                    05:45:be:24:68:45:dc:e2:f7:27:48:21:8e:90:e9:
                    2e:a9:18:e5:5c:29:02:f0:0e:0d:9c:80:44:e6:05:
                    cf:32:23:0e:8b:64:88:7f:4b:be:5d:8d:8f:00:3b:
                    67:80:89:5c:de:e8:4e:45:4d:63:37:fc:a1:37:3e:
                    1f:05:fd:90:b2:de:67:87:77:21:0e:87:9e:4c:39:
                    94:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7C:3C:53:72:87:C0:E7:F7:EF:36:7B:7A:A1:9E:59:DB:B2:B5:83
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232342e302f32302d3230203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:75:90:55:8a:bf:fb:28:bd:65:d8:53:5e:6f:3d:ac:dd:1e:
         e2:21:26:b6:e8:10:19:a5:34:18:9c:43:0c:0c:25:22:a2:29:
         2e:79:29:2f:23:cd:ca:f2:87:2d:9e:5d:cd:56:8a:60:46:61:
         95:b7:1a:05:0d:d1:85:72:7a:9f:5d:67:b1:a7:f9:ed:03:1d:
         7e:86:61:f5:70:90:09:27:cb:f4:c0:39:f2:6b:72:b1:5d:27:
         be:e4:76:e3:db:af:a2:b9:9e:ce:f1:57:16:0d:d1:79:0d:e5:
         bd:e9:5e:16:a7:93:66:d4:77:5f:e8:62:1c:87:b3:6a:1d:56:
         57:99:f3:e9:ce:a1:d8:20:17:08:02:79:80:3e:61:bd:55:f7:
         a5:00:d4:55:7b:48:75:5b:4b:8b:94:85:38:9e:81:d7:cf:46:
         f9:2e:34:6a:e6:38:56:0f:97:8a:42:ad:79:ba:97:0d:32:b0:
         32:0a:66:49:57:9d:c0:81:91:82:64:d1:8a:14:d1:eb:61:c6:
         99:ab:93:3a:2e:d1:54:36:1c:3a:b6:18:59:97:47:e0:80:f8:
         58:56:7d:a7:5b:10:fb:c0:a7:eb:14:97:a7:c6:3c:39:6b:73:
         bb:61:f6:46:c2:d0:96:78:e4:a1:28:e8:f9:75:8a:bc:68:e8:
         c8:9d:23:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 09:19:21 2024 by rpki-client on console-ams.rpki-client.org