Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf305073-56fa-3b86-8c8d-5d57efcde039.roa
File:                     bf305073-56fa-3b86-8c8d-5d57efcde039.roa (raw, json)
Hash identifier:          AmLkopiCntHbsQ79vYy+jIEBRMHrQGU9yZmpBaMdvaI=
Subject key identifier:   57:42:73:E4:49:2B:24:12:21:31:01:E3:5E:6D:A7:79:94:6B:95:E2
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309F82750828D4825B8FF59E0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf305073-56fa-3b86-8c8d-5d57efcde039.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        173.194.67.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f8:27:50:82:8d:48:25:b8:ff:59:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=33abcd56-f7ec-4b93-a2cc-4ee786daf9d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:14:b6:70:05:98:3d:ff:cd:8a:f1:ce:e7:3a:
                    35:79:91:cc:ee:67:92:88:fb:57:1a:c3:bb:e5:98:
                    3f:4f:1f:cc:c0:c9:d0:a5:4c:92:d9:f0:d0:f1:4e:
                    bb:dd:7d:42:1e:b2:87:14:d9:9a:8b:b4:43:65:40:
                    e6:1f:80:45:b0:33:ee:f6:05:3b:07:37:56:be:13:
                    ef:e2:dc:cb:59:6e:69:f8:5a:15:a7:3b:e4:0a:ca:
                    06:7b:0a:c8:e3:1a:66:03:0c:62:26:81:08:ab:34:
                    43:57:82:eb:08:87:66:4f:8e:bc:f3:f8:9a:32:d7:
                    13:c9:2a:d1:15:65:68:75:bf:88:aa:a7:d9:12:5e:
                    f6:e1:0e:c0:f2:85:24:a5:ec:ea:d8:9b:5e:38:db:
                    16:ae:a4:aa:6d:a1:c3:08:1f:ac:d9:0d:b7:5a:16:
                    8e:4c:4d:c5:8f:49:d4:a4:c9:e2:7f:90:15:13:51:
                    c2:bb:6f:2e:56:51:7b:f2:5b:83:a8:81:3f:f2:6a:
                    b6:d9:c5:c8:48:dc:da:99:10:89:b8:3c:9e:d4:55:
                    86:70:84:e2:5b:91:d9:19:58:fc:38:2a:b2:20:d7:
                    bc:32:6b:2f:39:a8:3c:6b:b7:77:f1:8b:dc:98:45:
                    47:18:2e:09:85:50:d4:22:5e:f1:12:e1:ac:da:73:
                    2e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:42:73:E4:49:2B:24:12:21:31:01:E3:5E:6D:A7:79:94:6B:95:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf305073-56fa-3b86-8c8d-5d57efcde039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:ef:4d:5d:98:b5:e6:b9:45:68:4e:93:be:3d:9a:6a:46:17:
         81:36:5d:c1:69:86:79:76:0a:12:c1:4f:df:e8:46:6f:dd:bf:
         d8:77:cd:84:39:67:34:6b:de:0c:e5:c8:e4:d6:93:bc:7f:6d:
         80:a7:ec:75:4b:1e:49:35:f5:33:07:be:67:de:b0:fd:11:cb:
         e2:87:70:d7:3d:1f:b6:8b:78:e7:78:97:8e:91:5f:1f:02:eb:
         60:93:e1:f4:26:b0:52:39:96:63:b7:fb:64:ef:0c:8d:5b:97:
         28:83:f8:db:3f:4f:7e:7b:80:5d:11:bd:d9:db:64:3e:c2:ff:
         3f:62:7c:b3:3a:1f:71:7c:6c:9c:76:13:94:a4:8e:bc:8a:dd:
         49:02:1d:da:7d:1e:b0:a5:35:45:01:cd:5b:28:fe:57:c9:07:
         e7:fa:e1:d0:13:04:4c:7e:e8:c2:70:99:55:5c:fe:cd:50:c7:
         52:47:92:b2:28:9f:a4:59:33:3a:e4:2a:ab:fb:b6:4f:e1:8a:
         00:17:0f:06:87:61:15:d9:f8:fc:77:75:cc:b4:d2:6a:e2:65:
         2b:51:ac:58:f6:1c:da:93:4a:fc:01:c1:24:94:56:a0:ab:f3:
         8b:77:f0:bf:05:dc:9e:e0:db:c2:d2:ce:5f:1e:7a:91:4d:11:
         c8:ad:e6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:48 2024 by rpki-client on console-fra.rpki-client.org