Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e203631333137.roa
File:                     3230352e3231312e3135342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          +NN0PPbGblpate6lAlwtnRS7AoqlcT6RwACm9nicHrw=
Subject key identifier:   22:30:80:7E:5F:3D:64:51:83:3E:EE:2C:86:A7:29:C8:BC:80:AB:45
Certificate issuer:       /CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Certificate serial:       37F70C836CE5DCF3D9CFDC5CAEAD4C9D28DA4975
Authority key identifier: B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 08 Dec 2022 17:48:12 +0000
ROA not before:           Thu 08 Dec 2022 17:43:12 +0000
ROA not after:            Thu 07 Dec 2023 17:48:12 +0000
asID:                     61317
IP address blocks:        205.211.154.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f7:0c:83:6c:e5:dc:f3:d9:cf:dc:5c:ae:ad:4c:9d:28:da:49:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
        Validity
            Not Before: Dec  8 17:43:12 2022 GMT
            Not After : Dec  7 17:48:12 2023 GMT
        Subject: CN=2230807E5F3D6451833EEE2C86A729C8BC80AB45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ac:ac:e4:1f:87:93:8f:76:95:ed:5b:3d:f9:
                    16:95:f8:c2:69:d6:12:dc:eb:e9:c0:05:79:7e:07:
                    15:1d:7f:ea:2a:66:c1:5a:6e:7a:d0:eb:d6:d0:78:
                    43:09:e6:b4:ad:5a:4b:3f:a0:69:6f:0e:42:01:09:
                    3d:c3:8d:69:08:24:bf:4e:26:d7:a1:53:d3:a2:50:
                    68:5a:34:b9:73:e7:f5:f0:47:0a:5e:9b:20:0a:27:
                    45:96:17:2e:fe:a2:05:56:94:2e:36:63:57:82:84:
                    7f:ab:fa:40:48:cf:9a:39:ba:85:da:91:cf:c6:bc:
                    36:6a:40:7c:06:35:4f:b1:c0:05:b4:89:d1:37:19:
                    0a:1f:d1:02:ca:60:69:b5:4a:ef:38:68:2a:ba:a8:
                    22:b5:1c:b4:dc:31:4b:b7:e4:a0:a7:42:10:89:c7:
                    16:a9:24:c5:c8:aa:a4:68:c0:75:0e:49:ed:e0:28:
                    22:9c:0f:28:4c:ec:0a:94:f1:8c:bf:50:e6:7f:a2:
                    97:38:dc:78:64:23:0d:af:1b:6f:32:dc:af:5b:62:
                    ab:1b:52:da:2f:4e:47:3d:f6:8c:b1:8a:94:63:18:
                    21:cd:ad:cd:22:b8:95:18:17:ec:a8:89:c2:01:4b:
                    ac:7d:7e:26:07:ea:a5:c2:b4:83:99:d5:d0:fc:25:
                    f3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:30:80:7E:5F:3D:64:51:83:3E:EE:2C:86:A7:29:C8:BC:80:AB:45
            X509v3 Authority Key Identifier:
                keyid:B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:66:b0:61:e9:de:c3:bb:99:ca:56:ed:34:17:d5:18:b9:88:
         5a:59:82:58:a0:34:f7:89:17:23:29:54:61:4c:b6:61:39:0f:
         3e:65:ff:68:d9:a1:59:06:25:5d:32:8a:52:d8:45:31:22:21:
         74:94:b7:3f:02:c5:62:66:7e:37:2f:47:0e:5e:74:43:eb:73:
         a6:26:4b:25:e0:09:f7:29:10:b8:20:c3:40:54:0e:18:47:19:
         28:e7:67:7d:25:78:6e:c7:cb:ce:75:3d:93:78:a1:00:88:c6:
         9f:e6:f6:83:d7:ac:41:c2:a7:dd:02:08:d4:13:f0:79:cc:48:
         62:15:0e:f9:7a:94:e0:03:b0:db:53:02:36:6a:30:83:69:ba:
         d7:6e:3a:36:2d:48:32:d8:f1:e6:ef:92:1e:6b:26:ba:dc:e3:
         c6:74:1b:0e:b8:d0:78:dd:9e:08:73:07:58:4e:48:81:37:06:
         11:e6:20:dc:80:36:21:ba:9b:20:5d:c5:c7:75:9c:f6:40:a9:
         94:1e:10:fc:0c:60:23:45:8c:f7:9d:1d:a4:70:98:5c:74:1e:
         33:07:2a:1a:f9:94:88:7e:e2:0f:ef:a0:53:dd:74:b3:2c:dd:
         a9:89:f3:c8:c6:b0:d9:b8:b3:06:e3:f9:7c:b8:17:96:6e:cb:
         9c:9e:70:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 7 00:26:01 2023 by rpki-client on console-fra.rpki-client.org