Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39382e302f32342d3234203d3e20383334.roa
File:                     3231362e3234372e39382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          tkw2Gnoa0Mhqk+THp+4NmRKENxDP2AvE+6uCeDgoWa0=
Subject key identifier:   D8:D3:CB:0F:F3:D3:9A:EF:78:B1:AF:5D:1B:98:6B:D1:F9:65:19:D5
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       75F77568B1CA04E427EBAF9FD6ECC66F3525C904
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39382e302f32342d3234203d3e20383334.roa
Signing time:             Wed 06 Mar 2024 00:02:03 +0000
ROA not before:           Tue 05 Mar 2024 23:57:03 +0000
ROA not after:            Wed 05 Mar 2025 00:02:03 +0000
asID:                     834
IP address blocks:        216.247.98.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Mar 2024 13:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f7:75:68:b1:ca:04:e4:27:eb:af:9f:d6:ec:c6:6f:35:25:c9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Mar  5 23:57:03 2024 GMT
            Not After : Mar  5 00:02:03 2025 GMT
        Subject: CN=D8D3CB0FF3D39AEF78B1AF5D1B986BD1F96519D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f2:b1:82:6e:69:a3:e3:8f:dc:78:6b:19:cd:
                    a2:0e:80:94:40:dd:43:74:5f:41:02:8e:14:c4:ba:
                    52:3c:9e:9a:6a:03:91:17:56:0e:ca:69:cb:6a:d2:
                    e2:d6:36:86:e7:57:fa:04:11:cb:9a:0b:b5:61:78:
                    11:2c:b6:1a:ca:50:04:fa:18:36:9a:71:ff:0e:5b:
                    a9:4a:28:00:b4:db:06:a3:aa:4a:5d:79:a8:58:bf:
                    ae:c7:f5:72:e1:08:fb:03:72:a6:de:e3:7d:c0:f1:
                    23:77:c9:50:b2:b1:87:f6:c8:4a:28:e3:d4:f8:6e:
                    86:08:ae:2c:d9:16:ef:a5:ae:80:26:20:8e:ce:48:
                    48:85:63:c8:7f:1b:94:34:84:67:01:20:6e:95:f9:
                    1c:d8:05:a8:c3:f3:c3:00:bd:1a:38:82:1b:ff:e1:
                    ce:a6:c9:db:97:2c:b9:9c:e3:13:c7:ae:bd:b0:b7:
                    f5:25:38:a1:ab:92:af:3f:85:9a:e3:38:87:ea:20:
                    3f:5e:d9:e3:9a:1d:a3:14:9e:d6:b3:ea:61:d6:c9:
                    37:d0:9f:0a:ee:cb:eb:4e:fc:c5:ea:15:f0:26:4b:
                    a0:93:c3:cc:0b:77:1e:4b:6f:5e:4b:da:7f:d2:98:
                    18:dd:06:f9:93:93:42:41:70:8c:1d:85:6b:01:51:
                    d2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D3:CB:0F:F3:D3:9A:EF:78:B1:AF:5D:1B:98:6B:D1:F9:65:19:D5
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:bf:1f:31:4a:38:4a:f7:a7:fe:63:49:7a:af:52:99:52:36:
         de:b8:ce:bb:99:e8:97:2e:55:d8:b7:0b:93:0a:5a:d0:ac:e2:
         17:85:58:e0:e1:ae:76:55:00:f9:0f:ad:47:8f:e8:61:07:25:
         53:50:85:48:e3:a5:13:a9:fe:02:f6:bb:a2:f1:4b:81:0a:10:
         e1:e7:3b:24:8c:d4:76:52:e6:06:82:4b:68:07:a7:bb:95:85:
         98:d8:2a:dc:2a:68:cc:c0:2f:84:b5:14:c1:6d:be:bb:1b:da:
         df:a6:5d:6e:9f:ff:70:73:87:9a:92:4c:20:f0:66:4b:3b:fa:
         d0:a9:b1:b4:7b:1d:6a:ea:1f:38:54:13:71:dc:a7:1a:62:38:
         03:ed:21:2e:3c:50:d5:76:b0:89:e3:e5:a2:5a:b8:1b:dd:ec:
         53:18:89:9b:8e:c7:9a:f7:b8:8c:10:5f:b4:21:d5:70:f4:98:
         16:bf:8a:60:a1:10:f8:ea:01:e2:6a:83:26:aa:fb:51:e2:b7:
         5b:b0:1f:9c:14:a5:6e:dd:e7:2a:cb:9e:02:88:e3:b3:1b:21:
         5f:97:c1:a6:d4:e6:e8:b4:be:36:1a:4e:b4:12:d3:08:58:a2:
         2a:35:36:d7:95:4b:42:95:2e:66:14:df:3e:ae:5f:ea:e8:00:
         31:1f:9e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 17:08:26 2024 by rpki-client on console-fra.rpki-client.org