Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130362e302f32342d3234203d3e20323037343539.roa
File:                     3231362e3234372e3130362e302f32342d3234203d3e20323037343539.roa (raw, json)
Hash identifier:          Vp95ydvj7DT62PT/GuN9xF0fyV+35l2Nu8Z7oWOpqQ0=
Subject key identifier:   7D:16:89:ED:75:AD:5C:C1:1F:30:1C:DE:3A:92:72:DE:B4:F2:6D:C6
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       7BE9AFF0E6E6A12814DB0DBB437AB3FA00DB0B59
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130362e302f32342d3234203d3e20323037343539.roa
Signing time:             Thu 12 Jan 2023 07:01:40 +0000
ROA not before:           Thu 12 Jan 2023 06:56:40 +0000
ROA not after:            Thu 11 Jan 2024 07:01:40 +0000
asID:                     207459
IP address blocks:        216.247.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e9:af:f0:e6:e6:a1:28:14:db:0d:bb:43:7a:b3:fa:00:db:0b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jan 12 06:56:40 2023 GMT
            Not After : Jan 11 07:01:40 2024 GMT
        Subject: CN=7D1689ED75AD5CC11F301CDE3A9272DEB4F26DC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5e:c5:8f:5b:f1:80:58:5d:dc:f6:cd:05:73:
                    61:5a:e0:04:b0:a2:63:dd:95:8e:42:ca:77:ae:34:
                    93:7c:fa:7e:ce:13:55:cc:33:07:32:06:cb:22:42:
                    75:cd:83:b3:27:bb:a1:80:f8:8f:c6:f7:5a:d4:c3:
                    9e:41:26:e4:b2:b6:2d:da:9a:2b:7a:e3:77:7d:85:
                    ed:40:e3:37:a4:94:d5:06:f4:9c:5f:18:ef:c0:ab:
                    ba:4e:78:92:58:aa:62:ef:4c:27:ff:12:c7:07:cd:
                    81:3b:eb:cc:c7:1b:c1:a9:23:7f:30:0c:04:4b:60:
                    9f:91:eb:8e:b5:5a:fb:63:4e:08:7c:91:40:57:b4:
                    87:73:22:9a:4c:cb:4f:94:02:d9:22:c4:7b:79:69:
                    e4:7e:03:03:1f:19:33:dd:5a:e4:f0:01:db:d3:4c:
                    3c:8f:2f:b7:bc:c3:d3:40:92:a9:f7:a9:de:72:e2:
                    51:9f:d1:57:8a:89:1b:85:af:d4:e5:2f:ba:c7:27:
                    78:35:24:6e:f2:76:fc:29:57:44:3a:7e:b8:a4:57:
                    55:c9:f1:0d:05:12:24:3f:db:2d:f1:58:d1:a2:70:
                    3c:8c:32:80:04:df:1e:ab:5d:45:fa:8b:36:0f:b9:
                    fb:16:f1:d9:4c:03:e9:6b:5d:3a:2a:8d:2e:19:17:
                    61:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:16:89:ED:75:AD:5C:C1:1F:30:1C:DE:3A:92:72:DE:B4:F2:6D:C6
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130362e302f32342d3234203d3e20323037343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:48:96:3c:fb:97:2c:e4:f1:19:59:f3:b8:ef:c5:75:1e:e1:
         97:45:49:40:6c:67:83:c8:c3:ac:bf:31:30:7e:0e:70:df:c4:
         b2:ac:61:31:ca:bb:24:ce:1d:d9:a2:da:9d:a3:f7:ff:71:f6:
         1f:fc:75:74:9a:1e:d8:b1:2e:09:85:ca:21:ae:46:90:9a:73:
         d2:37:d4:8f:ac:c1:a8:8b:f4:36:34:ee:ad:89:2b:ab:fd:f4:
         ea:e9:92:14:48:d0:81:8d:19:48:ff:89:12:fe:82:0a:60:74:
         d5:7a:98:dd:4d:c6:3a:49:c8:29:4a:95:62:81:c3:4b:f9:a9:
         e2:1f:98:fc:f7:63:00:58:e2:fd:bc:18:1d:ed:a4:04:8b:99:
         5b:cc:ef:f5:83:78:fe:03:f4:28:ec:44:85:b2:ca:8d:39:fd:
         0b:f8:e0:50:34:eb:99:fb:41:02:4c:52:2d:30:17:2f:66:5f:
         ae:eb:65:dc:73:71:24:46:28:10:2b:1b:ad:5d:7b:b6:68:36:
         7d:24:83:e2:d1:5e:d3:de:5a:91:e6:e1:5d:48:bd:9b:a1:74:
         3a:74:c5:96:0b:17:9f:43:95:10:9c:a2:02:6c:15:b2:27:1c:
         a1:4c:b0:e0:4e:ed:bc:d2:cf:67:a4:45:e7:27:f1:3b:a6:6e:
         23:6a:8c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:22 2023 by rpki-client on console-ams.rpki-client.org