Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e32221cf-4168-364a-9250-8bb27d412892.roa
File:                     e32221cf-4168-364a-9250-8bb27d412892.roa (raw, json)
Hash identifier:          eYZzydwUccrOE8Pj/zY252dGQxlabwGE8XvzhGrKSng=
Subject key identifier:   A0:1B:79:D8:02:E4:A0:9F:36:0E:DF:46:80:19:14:93:E6:03:83:B8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328576D51CC73C042CFC171C060FEAE
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e32221cf-4168-364a-9250-8bb27d412892.roa
Signing time:             Tue 28 Apr 2020 10:41:54 +0000
ROA not before:           Tue 28 Apr 2020 04:00:00 +0000
ROA not after:            Mon 28 Apr 2025 04:00:00 +0000
asID:                     0
IP address blocks:        23.211.114.0/23 maxlen: 24
                          72.52.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:c0:60:fe:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 28 04:00:00 2020 GMT
            Not After : Apr 28 04:00:00 2025 GMT
        Subject: CN=d0e416ac-0f4c-48c8-874b-7dfdbede27fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:93:c3:b6:d5:e2:5a:f5:62:4c:57:3c:85:56:
                    93:47:73:e5:0c:32:3f:01:1f:93:9b:3c:f0:cc:d8:
                    3e:aa:72:5c:f1:6d:fe:3a:e1:e3:be:2f:88:dd:74:
                    35:de:0f:15:0c:37:08:e8:88:6e:fa:41:4e:27:da:
                    71:32:97:6e:bb:62:f5:8c:fd:2a:58:9b:3e:4c:0c:
                    fe:ce:91:20:17:3c:f1:90:d0:95:5b:05:a4:5c:aa:
                    f6:13:6b:20:65:58:5a:bd:6f:9a:a0:69:d3:d0:19:
                    06:e1:00:b9:ed:6d:da:83:ef:fe:1b:db:72:11:6f:
                    4f:e3:86:1e:45:49:73:ec:48:d4:cf:23:c4:7c:b8:
                    e3:6b:1e:b8:a9:f0:04:4c:38:b1:d1:df:df:1f:13:
                    dc:b5:2f:23:56:b7:75:dc:ce:b6:2a:73:51:6b:f0:
                    6d:7b:e1:7a:bf:ff:23:62:ee:59:a1:d8:4f:a0:56:
                    f1:42:ea:ff:cd:06:ab:79:cb:44:26:33:7e:69:fa:
                    ef:8b:8d:9c:d2:46:dc:55:d9:70:32:ec:6b:26:8c:
                    e5:c0:d2:47:d3:04:42:b9:f1:dd:52:61:ea:13:36:
                    21:95:59:94:28:4c:bb:8f:8a:a2:71:9f:8b:ba:45:
                    84:88:95:b7:9e:d7:bb:64:46:ce:60:56:03:5f:0a:
                    6f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1B:79:D8:02:E4:A0:9F:36:0E:DF:46:80:19:14:93:E6:03:83:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e32221cf-4168-364a-9250-8bb27d412892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.211.114.0/23
                  72.52.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c3:03:e7:56:bb:f2:86:62:39:07:25:26:8d:70:0a:04:70:
         4a:0a:e2:d9:af:22:de:19:31:83:4e:2e:b7:6f:16:26:15:af:
         ba:83:d9:b1:27:e9:aa:d2:24:66:de:97:82:15:65:d8:91:09:
         5a:38:25:95:4c:6d:f5:57:1e:67:05:43:12:dd:64:a6:cc:54:
         36:5e:98:b5:bb:c2:ef:a4:68:d2:c3:d6:07:5b:63:81:b2:62:
         66:df:e2:a9:51:8c:cd:48:78:ba:d5:d7:2e:f9:0d:1b:db:a5:
         87:82:66:48:16:83:d1:e5:24:6d:04:65:30:b4:c7:0c:4a:99:
         dd:c1:0d:ee:d0:20:27:0c:3e:6a:6d:72:a7:e8:17:9a:dd:26:
         22:84:9b:b8:49:24:df:95:13:4a:de:04:ef:84:7b:3a:98:78:
         d3:ae:59:f4:77:06:82:d9:26:0e:4b:cd:0c:34:aa:ac:68:4b:
         6d:15:39:fe:c8:34:a5:e9:e8:fb:eb:fb:9c:66:c7:b2:09:3d:
         8e:1e:6b:bc:73:41:36:ce:4f:b3:ff:58:98:27:26:07:af:b1:
         35:24:9e:cf:02:4f:8e:01:61:7a:71:a5:a9:0e:10:df:e8:49:
         6a:d8:6f:23:4d:2f:35:13:7d:ec:43:96:81:5d:b1:5c:b5:30:
         8c:b2:2b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:27 2023 by rpki-client on console-fra.rpki-client.org