Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232372e302f32342d3234203d3e203137313339.roa
File:                     3230352e3133342e3232372e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          CYraq5BStp4jmpnA5PYaimWqf6BQ3cJXI00XxJg0new=
Subject key identifier:   65:39:DF:A1:07:A9:82:95:6A:CA:0C:90:60:E7:F5:48:E6:4C:BC:CF
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       E92273A45B7D1805BE631AB5321E61A3A26AAB
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232372e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 23 May 2024 10:59:12 +0000
ROA not before:           Thu 23 May 2024 10:54:12 +0000
ROA not after:            Thu 22 May 2025 10:59:12 +0000
asID:                     17139
IP address blocks:        205.134.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 13 Jun 2024 11:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e9:22:73:a4:5b:7d:18:05:be:63:1a:b5:32:1e:61:a3:a2:6a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 10:54:12 2024 GMT
            Not After : May 22 10:59:12 2025 GMT
        Subject: CN=6539DFA107A982956ACA0C9060E7F548E64CBCCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:66:54:3b:86:f9:b7:bf:a8:1f:23:a7:da:
                    15:42:b7:0a:d4:69:45:2c:b4:33:62:9a:3e:04:f5:
                    25:64:f9:50:c7:df:a3:11:a4:65:80:58:a5:51:1d:
                    d0:9f:e5:2b:27:03:9c:c5:cf:d2:bd:3b:d7:9d:35:
                    2b:c5:7f:ad:46:38:ab:5d:9b:9e:ef:c8:94:ad:84:
                    ff:b6:d2:c5:2d:d2:4e:65:23:21:f4:6c:28:9c:0c:
                    2c:85:e3:ae:f0:7d:74:d7:ec:a3:6e:b2:e6:ba:fe:
                    90:14:3e:f8:21:50:a6:75:20:33:5b:4e:54:66:a2:
                    ff:2b:21:1b:56:47:f9:0b:4e:54:f8:27:b5:50:2f:
                    67:c5:59:8b:30:7a:3a:aa:cd:f9:e9:08:ec:f5:b7:
                    cc:91:70:3d:87:65:34:69:d3:4b:63:6c:ee:31:08:
                    83:24:d1:6e:03:4f:fe:4b:ce:86:f5:9d:cf:ac:12:
                    e1:59:d4:20:2f:2c:cb:1d:8b:bf:9f:15:c2:d7:c5:
                    5a:8e:55:c0:31:3c:e2:44:d9:3d:a4:cb:1b:6f:44:
                    87:ed:11:6c:c1:7b:91:d0:c1:bc:ea:be:51:5c:51:
                    5d:ac:be:ad:b3:29:03:19:c7:1a:b4:5a:7b:12:b2:
                    04:a9:75:4b:d7:dd:ec:31:ea:d6:c6:d5:5b:d5:67:
                    fb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:39:DF:A1:07:A9:82:95:6A:CA:0C:90:60:E7:F5:48:E6:4C:BC:CF
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232372e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.134.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:70:9b:7a:14:70:ef:dd:51:1d:4c:83:1f:5e:b0:6f:77:a4:
         12:93:d8:f1:52:a0:04:d5:38:86:9e:aa:84:28:2e:5d:d1:c0:
         cf:2b:a8:15:54:43:a1:65:b6:0f:40:3f:e6:0b:44:05:a8:36:
         3a:48:f1:9c:da:db:ad:64:13:9b:c2:a7:4a:5a:1d:0b:1a:28:
         95:2a:68:77:6f:1b:f7:53:83:79:49:60:a0:58:d2:ec:c1:8b:
         41:e6:48:3e:e9:42:ff:d1:d4:4b:c4:4a:3a:6d:22:b9:71:06:
         e8:ce:e8:f9:5a:91:d6:05:81:1a:5a:98:e8:78:c4:d2:d4:d1:
         b3:66:ed:5e:8a:da:2b:92:54:ff:7f:41:f0:62:63:4d:ca:22:
         27:45:47:68:84:da:06:23:20:0f:72:11:38:18:bf:a0:92:37:
         bb:f3:76:27:d0:70:68:29:cd:e1:ca:f6:c6:2f:fe:28:04:b7:
         44:6b:73:e3:0f:8b:1d:b9:cb:d5:29:6c:8e:bc:bd:c0:2e:5e:
         3f:00:d8:e3:d8:9c:b7:7a:cd:13:10:e9:88:95:db:1f:18:ed:
         4b:20:64:88:f3:33:06:5c:87:a6:40:3f:76:07:58:93:ae:24:
         88:87:d6:8d:4d:72:f2:66:7e:38:31:fe:58:7a:ed:13:5a:cc:
         8c:c8:29:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 14:15:30 2024 by rpki-client on console-fra.rpki-client.org