Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/79b09615-856c-3fbc-8f18-7a1e9074427d.roa
File:                     79b09615-856c-3fbc-8f18-7a1e9074427d.roa (raw, json)
Hash identifier:          I+Jw9mHyBiWVzGFmUMOsRFDYIUCzxowXSZfRKNylsyE=
Subject key identifier:   71:51:D2:E7:6F:10:09:19:84:0D:49:18:7F:5B:99:9B:F4:88:06:2A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285843BEDE00CCFBC18F1B7BDE68C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/79b09615-856c-3fbc-8f18-7a1e9074427d.roa
Signing time:             Wed 01 Nov 2023 17:03:06 +0000
ROA not before:           Wed 01 Nov 2023 17:03:06 +0000
ROA not after:            Tue 30 Jan 2024 18:03:06 +0000
asID:                     834
IP address blocks:        108.165.204.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:be:de:00:cc:fb:c1:8f:1b:7b:de:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  1 17:03:06 2023 GMT
            Not After : Jan 30 18:03:06 2024 GMT
        Subject: CN=3f417e3e-0a21-44e7-9d7b-1e45f5b257ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:34:f3:0f:82:49:1b:ee:61:10:a6:92:43:
                    e7:c9:94:87:00:65:56:2b:0a:93:27:97:d2:cb:5d:
                    83:8b:52:46:2c:97:8d:b2:16:49:d9:7b:65:13:5c:
                    47:67:f2:b7:3d:9a:0c:c2:58:e8:d2:e4:da:5a:5a:
                    94:7a:08:e0:e5:5e:a5:5b:53:bd:7a:19:44:53:64:
                    f9:12:5e:5d:fc:5e:6a:b2:c5:27:8b:b5:b1:41:bb:
                    94:36:d0:e3:b0:d2:d2:09:af:42:26:d7:bf:dd:a6:
                    5b:0a:93:5b:2a:b0:f7:97:5a:89:52:f6:61:75:55:
                    ed:a9:56:41:5a:f3:db:55:8e:b4:04:7e:b6:2c:16:
                    fa:a9:14:86:64:a8:be:f8:7c:4a:99:ef:5c:c3:ac:
                    eb:8e:59:ad:51:cb:e8:e6:fa:db:3e:af:d2:02:f0:
                    8f:44:4c:38:fb:ff:06:7c:7d:78:37:8e:02:04:8f:
                    69:4c:4d:d6:1a:8f:6b:f9:9c:3a:63:6c:ed:c0:73:
                    fd:71:94:65:dc:91:21:b1:5f:96:e4:27:ca:7e:29:
                    37:3f:83:ef:75:9a:44:27:86:6d:a1:0e:02:3d:df:
                    c7:77:de:78:67:22:e7:fc:e7:30:0d:33:58:9a:be:
                    24:5e:46:12:dd:c6:6d:bc:18:d8:2a:cc:9d:93:21:
                    24:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:51:D2:E7:6F:10:09:19:84:0D:49:18:7F:5B:99:9B:F4:88:06:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/79b09615-856c-3fbc-8f18-7a1e9074427d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:6a:b5:bd:5d:a2:ff:71:0f:d8:f6:21:f9:f0:d4:a1:14:e8:
         5d:ee:36:10:1f:11:06:cd:ed:aa:29:98:9c:d6:5f:a3:fa:91:
         f8:71:44:b0:40:04:30:1c:86:86:cd:17:57:0a:8a:f2:26:13:
         f5:7f:c7:df:c2:f4:7e:b2:34:fb:dc:56:49:b8:f9:5f:f5:ee:
         6e:f6:01:af:6f:a0:84:26:07:f3:ba:b6:d6:e7:4d:34:cf:06:
         09:78:77:01:a6:bf:bd:24:24:8a:3a:b2:32:32:c8:27:61:1a:
         c4:e5:c4:e2:24:7d:b6:e1:da:c8:80:70:10:11:3e:1b:a0:b2:
         f7:86:51:4b:e1:1d:80:84:35:6d:ec:a2:e1:5d:a5:03:1f:d4:
         29:d4:96:71:35:d1:21:44:d5:00:1f:11:21:63:24:2d:aa:fd:
         4a:64:6f:c2:14:00:a6:e4:69:9b:54:d9:57:02:93:75:12:d8:
         71:da:c2:4b:78:7f:e6:b0:e8:c0:5d:2a:30:75:fc:88:c4:18:
         f0:62:6c:7f:c4:a2:81:41:c6:b0:ad:fc:a9:0d:41:cf:99:28:
         32:21:a8:b5:5c:ec:2a:04:33:30:4d:0e:5a:e0:54:d6:8b:82:
         fc:24:33:e6:2d:a0:da:db:b5:03:8f:e3:21:53:da:c1:fe:30:
         4c:05:ee:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 19:55:32 2023 by rpki-client on console-fra.rpki-client.org