Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/b8b273a1-46aa-3c22-9315-fd834f6c9517.roa
File:                     b8b273a1-46aa-3c22-9315-fd834f6c9517.roa (raw, json)
Hash identifier:          Ci5CiEM80EVQfmoC8cW9c6Lc6EXsNfRXZipkIUs3Z6Y=
Subject key identifier:   C4:C3:CB:A1:B7:F8:00:E5:3B:B2:D6:F8:E4:89:78:D1:96:C5:20:A2
Certificate issuer:       /CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882
Certificate serial:       010D0C9F432858436AA51578CB379D639DCD3840
Authority key identifier: 21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/b8b273a1-46aa-3c22-9315-fd834f6c9517.roa
Signing time:             Mon 02 Oct 2023 13:00:25 +0000
ROA not before:           Mon 02 Oct 2023 13:00:25 +0000
ROA not after:            Sun 31 Dec 2023 14:00:25 +0000
asID:                     12212
IP address blocks:        185.216.124.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:6a:a5:15:78:cb:37:9d:63:9d:cd:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882
        Validity
            Not Before: Oct  2 13:00:25 2023 GMT
            Not After : Dec 31 14:00:25 2023 GMT
        Subject: CN=60f1312c-a309-4e00-a44e-ddf9b4a4cb75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:18:e9:78:a4:ba:18:26:9b:d0:fb:b2:71:10:
                    24:18:b2:c4:b2:55:44:b3:cd:30:f3:b8:b9:2c:50:
                    87:67:b8:9a:64:0c:1f:ee:bb:eb:35:eb:cd:01:18:
                    f7:2c:14:52:78:25:9c:b9:e2:65:e7:72:f5:a6:cf:
                    4e:b7:78:18:66:e0:de:ef:22:ec:48:ec:26:01:b5:
                    10:27:a0:08:2e:a0:68:42:bd:df:ce:ff:3e:c8:35:
                    ab:00:2d:cf:b6:43:b7:96:c8:13:59:14:d5:6a:ce:
                    12:cd:96:b4:1d:64:29:d0:45:1b:af:b0:74:e8:d1:
                    fd:06:65:04:b4:8b:6a:76:c3:7e:f0:71:e6:45:76:
                    f9:4b:1e:b6:37:68:d1:12:9d:fa:63:e1:45:8f:fa:
                    8d:c4:4c:39:e4:f4:8c:4a:09:78:71:11:64:8a:60:
                    54:80:84:a8:d5:6d:96:07:65:68:27:cf:fb:bd:8c:
                    7f:b4:d0:3a:d0:f0:b9:9e:7c:e3:51:0a:66:9e:6c:
                    79:15:e2:49:dd:29:40:76:e4:a2:00:73:e8:a2:88:
                    5a:75:10:fd:59:80:3e:cb:50:6d:8a:49:c7:b3:52:
                    d7:a1:25:c7:a8:ed:f7:47:31:17:c7:77:2b:aa:14:
                    ba:23:07:f4:5a:f3:b3:f8:9b:bc:10:fa:16:2b:a3:
                    a2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C3:CB:A1:B7:F8:00:E5:3B:B2:D6:F8:E4:89:78:D1:96:C5:20:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/b8b273a1-46aa-3c22-9315-fd834f6c9517.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl

            X509v3 Authority Key Identifier:
                keyid:21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:38:d4:cc:5d:b5:6c:32:bf:3a:b5:e2:a4:21:6c:0f:9e:56:
         d1:87:8f:5f:c4:78:f9:65:9e:0e:0f:ed:3a:f3:96:9d:a7:44:
         42:0a:1e:d2:49:41:84:e5:db:a4:e3:9f:b1:7e:98:45:03:01:
         21:b8:0a:bb:9c:95:c2:0a:84:62:25:4e:46:30:d6:25:7b:1e:
         d1:1f:54:a3:45:ad:26:b6:5c:12:9b:84:d1:f2:b7:b9:a7:bf:
         85:38:f5:d3:70:b4:eb:7c:ed:f8:f3:1f:f6:db:07:6b:a8:46:
         9a:9f:5e:fa:f0:20:00:7a:14:8c:3b:ef:ae:fd:6a:13:3a:dc:
         86:e8:a6:af:26:3d:93:d5:83:74:de:49:14:2d:4c:eb:41:c2:
         c4:9e:a7:5d:af:d1:79:83:2e:49:d1:ef:d5:09:5f:5c:e5:a5:
         44:b0:98:23:a9:f7:65:e8:98:6c:d5:82:14:33:0b:97:72:e3:
         e4:58:99:f3:92:4c:d3:f6:bf:86:1a:15:5a:1a:3a:d7:e3:0b:
         63:67:53:49:58:5b:3c:c9:4e:0f:df:f4:14:eb:44:a5:28:36:
         c9:24:07:7b:0f:ad:d1:39:2e:8e:a0:9e:e8:bd:d2:d2:4f:e9:
         f9:5a:cc:41:a6:a3:13:9e:e8:43:b8:47:c9:3c:0f:a9:22:3b:
         f2:2a:cb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 14:19:13 2023 by rpki-client on console-fra.rpki-client.org