Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/c987ed1e-5acb-3914-a6d6-c2e1d5bd595e.roa
File:                     c987ed1e-5acb-3914-a6d6-c2e1d5bd595e.roa (raw, json)
Hash identifier:          7vtxZDG8t38Gt710b956xAHsT+3lRRIbMK0wKfM2dds=
Subject key identifier:   59:7B:6F:02:C4:26:E4:7A:2A:33:E0:B5:F1:4F:B0:EB:73:5F:8E:C0
Certificate issuer:       /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial:       010D0C9F432858417736989BE27FF8423AA90900
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/c987ed1e-5acb-3914-a6d6-c2e1d5bd595e.roa
Signing time:             Wed 05 Apr 2023 12:00:00 +0000
ROA not before:           Wed 05 Apr 2023 12:00:00 +0000
ROA not after:            Wed 30 Apr 2025 04:00:00 +0000
asID:                     174
IP address blocks:        207.223.182.0/24 maxlen: 24
                          207.223.183.0/24 maxlen: 24
                          207.223.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:77:36:98:9b:e2:7f:f8:42:3a:a9:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
        Validity
            Not Before: Apr  5 12:00:00 2023 GMT
            Not After : Apr 30 04:00:00 2025 GMT
        Subject: CN=0beee050-b730-4612-a78d-6ef789383dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f2:ec:09:c3:0e:0d:ff:5a:22:11:ef:23:2b:
                    e0:48:67:9f:c8:0f:13:9f:4c:c4:9d:76:7c:5c:90:
                    a0:dd:f5:65:1e:ed:69:5f:20:a2:1c:1b:d9:a9:26:
                    27:54:e4:c0:17:01:3a:42:84:f0:22:a3:0a:65:e0:
                    9a:22:c3:d4:89:0a:02:4f:8b:19:13:d0:78:7e:b2:
                    13:52:e2:cd:04:60:dd:40:14:fa:eb:11:80:88:fd:
                    26:31:47:30:70:36:60:30:0c:c7:71:e7:4e:0b:3c:
                    6f:1a:cd:52:f3:f4:4b:6d:90:ad:93:ea:ea:d2:5d:
                    b7:7d:50:de:41:f9:5a:27:3e:e1:5f:7c:3f:e6:c5:
                    a5:d5:5b:1e:08:c4:87:ac:f4:ec:d0:70:f6:5a:bb:
                    11:4a:8b:64:0b:21:b8:30:4c:91:51:d5:42:01:35:
                    6c:99:44:aa:4e:f5:70:6b:a5:92:6c:ad:2d:50:34:
                    80:44:ca:2b:ce:2d:da:e3:1b:42:b0:06:53:74:2f:
                    fc:18:c4:89:20:9c:3a:c4:e1:51:51:fa:d3:e4:34:
                    71:54:aa:42:7d:d2:99:8c:4e:4a:00:a1:1c:23:ab:
                    ce:d6:c4:87:08:b9:9e:d4:79:4a:bd:b8:8b:99:59:
                    0e:78:df:24:e3:de:b8:6c:46:b4:a3:a4:12:18:34:
                    fa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7B:6F:02:C4:26:E4:7A:2A:33:E0:B5:F1:4F:B0:EB:73:5F:8E:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/c987ed1e-5acb-3914-a6d6-c2e1d5bd595e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl

            X509v3 Authority Key Identifier:
                keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.223.182.0-207.223.184.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:10:bf:ce:48:16:8c:09:68:42:db:30:7d:d6:3e:a0:6c:77:
         89:84:a2:73:68:3d:c4:5a:cb:0f:6b:ed:5a:de:81:38:ef:6a:
         ff:29:57:2d:e2:97:b5:f8:7a:00:ea:9d:ba:84:73:3b:ab:42:
         02:9d:08:98:88:4f:d0:63:91:af:64:f5:62:4a:36:b3:b3:c5:
         c9:b2:2d:c6:53:70:7c:b6:37:b2:ab:30:a4:58:97:5d:3f:67:
         37:3d:e7:19:1a:bc:b9:c5:a5:d5:79:4f:63:96:66:2c:07:c3:
         55:34:09:50:18:6f:e6:77:d5:72:3f:51:5a:10:20:c6:fd:bf:
         8e:25:45:dc:50:20:f4:3a:a3:e2:b9:5f:8a:bf:fa:5e:73:40:
         aa:ea:eb:d8:f3:9d:0c:8d:3b:03:c7:c7:4e:3b:c7:a4:43:14:
         f4:44:d0:6d:ba:c9:4b:01:c8:70:e1:a6:e0:41:a7:e7:74:80:
         1d:06:b0:c8:65:67:5f:e1:10:60:5e:33:0b:70:8a:a3:dc:3e:
         e9:8f:a7:39:bc:b1:ca:a3:7d:5e:ba:07:83:fa:a2:68:e6:e8:
         db:6c:af:42:8c:51:dd:b4:73:0c:53:65:80:00:ac:d0:b3:75:
         71:4c:cb:4d:29:15:72:2f:87:24:91:24:90:a1:46:36:90:36:
         a2:c5:b7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:50 2023 by rpki-client on console-fra.rpki-client.org