Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/ebe9af1f-6d55-3c2a-84eb-333bb8844b6d.roa
File:                     ebe9af1f-6d55-3c2a-84eb-333bb8844b6d.roa (raw, json)
Hash identifier:          NV/phBUXHvF2er3rtjf1YMXhYA/gBhilO78Lh5aBGoQ=
Subject key identifier:   D9:D9:4E:09:34:57:85:95:5D:EE:BE:48:B7:3D:AC:7B:D5:23:B1:E5
Certificate issuer:       /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial:       010D0C9F432858453FE20A73165901F7ED118DC0
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/ebe9af1f-6d55-3c2a-84eb-333bb8844b6d.roa
Signing time:             Mon 18 Mar 2024 14:57:27 +0000
ROA not before:           Mon 18 Mar 2024 14:57:27 +0000
ROA not after:            Sun 16 Jun 2024 14:57:27 +0000
asID:                     0
IP address blocks:        128.254.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 26 Mar 2024 16:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3f:e2:0a:73:16:59:01:f7:ed:11:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
        Validity
            Not Before: Mar 18 14:57:27 2024 GMT
            Not After : Jun 16 14:57:27 2024 GMT
        Subject: CN=537f170b-a652-4979-bfd3-6030889acd6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4c:ae:08:1d:00:04:6c:58:52:0c:74:6f:62:
                    2e:d1:5d:1f:53:9c:92:df:7d:76:a5:b3:af:df:79:
                    b1:13:6d:2e:ea:a2:4d:a5:89:2a:9b:51:fd:98:2f:
                    a2:ee:cd:3a:16:45:82:5f:df:99:cd:20:56:b5:08:
                    1a:c3:73:2b:34:5e:94:97:fa:cc:6a:ae:2f:71:dd:
                    63:d4:2e:b3:5d:96:a6:6c:4e:d0:e5:2b:d5:d6:15:
                    bf:85:db:9d:4e:28:bd:d7:4a:04:6a:50:d2:93:59:
                    fa:bd:30:c3:b1:76:8d:58:b6:35:ab:4c:85:69:8f:
                    25:87:b8:c9:16:15:02:48:7c:f7:45:21:3e:8b:0e:
                    48:20:61:52:83:36:16:50:7e:7c:25:5c:1f:b0:7c:
                    a4:fb:81:26:d4:73:b3:f1:f6:31:92:60:5c:6d:6c:
                    5e:95:d5:d0:29:75:63:64:1c:3a:7a:fd:69:cc:75:
                    0a:1d:25:5b:61:22:ad:1d:dc:1d:b8:b3:41:4b:90:
                    57:b1:a4:e9:6c:74:15:99:07:a2:72:27:3a:43:65:
                    bb:10:cc:11:5e:02:00:50:03:b0:2f:44:6c:6e:b7:
                    ea:04:81:a3:bf:af:9b:f3:8c:25:64:b2:fa:10:53:
                    75:57:54:cf:3c:24:36:a0:d8:61:ee:63:f1:ef:15:
                    eb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D9:4E:09:34:57:85:95:5D:EE:BE:48:B7:3D:AC:7B:D5:23:B1:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/ebe9af1f-6d55-3c2a-84eb-333bb8844b6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:83:17:59:dc:83:a4:d3:99:61:19:de:6c:5b:34:ec:90:df:
         fa:21:6f:b3:62:13:97:a8:1d:bf:16:6e:d3:f5:28:14:ba:7e:
         8f:68:cd:4b:e2:f2:26:de:90:6d:6e:00:83:ad:b2:e1:ab:5f:
         02:5f:f6:aa:ce:89:a2:04:05:51:31:b3:b6:37:1f:8b:b8:2f:
         e4:10:c9:c6:61:c8:21:e9:98:ae:5f:fa:43:9f:71:75:d9:6f:
         dc:18:5e:4e:2b:e3:d8:80:7a:61:f5:57:6a:3b:35:bb:e3:06:
         9a:c7:0c:ac:dc:27:1f:25:90:42:f8:cb:94:0e:13:00:f6:8b:
         3a:53:42:8a:38:ca:4b:f5:47:26:91:0b:e4:12:fe:50:50:ab:
         cf:f2:f0:39:77:17:8e:9c:49:f5:f6:df:28:65:ed:a3:2e:c8:
         bf:da:47:9b:85:35:ec:69:eb:58:90:b8:22:2c:ce:ac:fd:9f:
         83:54:1d:26:a4:27:c4:2f:eb:2c:25:16:e9:a6:30:d3:bc:04:
         52:4e:e9:d7:82:01:ab:48:bf:57:b3:e9:40:db:24:4d:65:02:
         d6:26:38:24:1c:c7:4c:8c:a3:df:a4:5d:c0:fb:ec:3e:79:71:
         06:61:54:c2:ab:7a:64:ba:90:32:73:39:22:bd:fa:0b:af:ac:
         38:02:3d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 20:24:52 2024 by rpki-client on console-fra.rpki-client.org