Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e20313734.roa
File:                     3230352e3231312e3135352e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          UClMBqSaoh3WNKDEjlC4Sbqj1PZBMF0lAQQctUdFUKI=
Subject key identifier:   76:1F:B0:68:85:F8:31:2A:AD:EC:EB:C6:49:7B:4B:E2:F0:4A:68:D5
Certificate issuer:       /CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Certificate serial:       314C660C42895B45BE07937422E0D89D747A6A7A
Authority key identifier: B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e20313734.roa
Signing time:             Mon 20 May 2024 15:29:48 +0000
ROA not before:           Mon 20 May 2024 15:24:48 +0000
ROA not after:            Mon 19 May 2025 15:29:48 +0000
asID:                     174
IP address blocks:        205.211.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 00:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4c:66:0c:42:89:5b:45:be:07:93:74:22:e0:d8:9d:74:7a:6a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
        Validity
            Not Before: May 20 15:24:48 2024 GMT
            Not After : May 19 15:29:48 2025 GMT
        Subject: CN=761FB06885F8312AADECEBC6497B4BE2F04A68D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:92:4c:38:99:dc:6b:15:76:d0:fe:ea:8b:6d:
                    a2:b0:17:22:16:dd:d0:ae:4f:52:32:45:2f:2b:69:
                    9f:63:6d:09:27:f8:8e:14:77:23:d8:e3:38:83:fd:
                    e9:be:61:f1:b0:2c:de:62:6b:d9:85:cf:1f:de:8b:
                    81:b7:83:44:ec:13:19:b0:82:71:5d:36:ac:4b:b5:
                    22:52:91:b4:91:74:a9:6c:c6:f8:51:cb:20:45:5b:
                    69:c7:20:ce:fe:b8:f5:6b:37:5b:62:d9:d9:e1:a7:
                    47:45:ea:cc:c0:2c:76:b2:b2:99:7b:a8:5b:cf:e1:
                    16:2c:5f:c3:10:e5:64:59:76:c3:3d:74:7c:c7:b8:
                    b9:c0:3d:a6:c8:39:8a:05:15:90:89:e3:a6:64:79:
                    86:a4:36:88:bc:12:0f:26:bf:80:e8:a3:f9:f5:98:
                    84:bf:0b:b6:ba:27:b8:1e:da:86:a5:a3:6a:85:13:
                    83:04:e6:b7:fa:24:5d:0f:5d:31:5d:79:1e:0e:82:
                    82:5e:7b:70:49:ec:4b:96:10:17:02:8c:7d:d6:8b:
                    0b:2f:17:ca:ab:c3:70:21:62:8f:32:c0:32:db:e6:
                    51:7c:32:59:e8:9a:cb:14:0b:7b:1b:b6:2c:60:19:
                    d6:29:f9:d7:bd:44:a9:e3:39:ae:f9:f0:d8:77:2b:
                    d9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1F:B0:68:85:F8:31:2A:AD:EC:EB:C6:49:7B:4B:E2:F0:4A:68:D5
            X509v3 Authority Key Identifier:
                keyid:B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:f3:dd:38:e3:41:49:d4:33:3f:98:7b:7c:9a:da:1a:dc:9d:
         be:6c:3b:3e:64:5c:69:9c:e2:8d:f9:2e:06:cc:1c:10:f9:96:
         3e:0f:56:f7:33:1a:7c:48:e9:32:cd:31:34:e3:35:36:5f:0f:
         6c:0c:fb:70:e8:ff:06:39:fd:cf:a1:77:dc:7f:56:a3:70:51:
         53:5b:fe:05:66:b1:6c:d8:3e:66:dc:aa:fe:4f:19:3c:6b:37:
         f9:43:07:57:1e:36:f3:44:55:55:c7:41:de:44:ff:5e:43:95:
         0d:eb:e3:8b:a0:3e:42:6c:68:a6:ee:05:b6:7b:18:5f:1c:a5:
         bc:87:38:c7:5b:43:45:a4:03:e5:dd:54:d1:8a:e6:ed:8a:43:
         13:a0:89:a8:b5:d2:56:d2:2a:bb:8e:b0:ae:c0:36:9b:fb:0b:
         bf:64:ee:a1:c4:1d:97:5f:d9:70:be:d4:e4:e5:dc:1f:7c:08:
         28:33:69:57:42:29:d4:2b:6c:8e:e3:e1:e2:8f:71:5e:ba:52:
         99:e8:2d:9e:d8:0c:20:c6:94:25:a1:c0:c3:b9:d3:20:5b:a8:
         14:58:e3:cb:74:1d:c3:f5:7b:9d:4a:10:83:64:91:da:f9:cf:
         23:ed:ad:cd:ba:36:d4:23:31:a0:cc:63:dd:2a:76:e7:82:54:
         87:5d:15:93
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUMUxmDEKJW0W+B5N0IuDYnXR6anowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzc2MDEzOTNmNzhlZTEyZmU3ZjczYWU3OWJiZmI3NGI0
MzFkYTc3MDBjZWYyY2Y4Y2YwHhcNMjQwNTIwMTUyNDQ4WhcNMjUwNTE5MTUyOTQ4
WjAzMTEwLwYDVQQDEyg3NjFGQjA2ODg1RjgzMTJBQURFQ0VCQzY0OTdCNEJFMkYw
NEE2OEQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJJMOJncaxV2
0P7qi22isBciFt3Qrk9SMkUvK2mfY20JJ/iOFHcj2OM4g/3pvmHxsCzeYmvZhc8f
3ouBt4NE7BMZsIJxXTasS7UiUpG0kXSpbMb4UcsgRVtpxyDO/rj1azdbYtnZ4adH
RerMwCx2srKZe6hbz+EWLF/DEOVkWXbDPXR8x7i5wD2myDmKBRWQieOmZHmGpDaI
vBIPJr+A6KP59ZiEvwu2uie4HtqGpaNqhRODBOa3+iRdD10xXXkeDoKCXntwSexL
lhAXAox91osLLxfKq8NwIWKPMsAy2+ZRfDJZ6JrLFAt7G7YsYBnWKfnXvUSp4zmu
+fDYdyvZjwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHYfsGiF+DEqrezrxkl7S+Lw
SmjVMB8GA1UdIwQYMBaAFLIb0XcaltefcHlgkVEvJ4ERFI7wMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0ZjI0NzdmYzQwYWFiLzAv
QjIxQkQxNzcxQTk2RDc5RjcwNzk2MDkxNTEyRjI3ODExMTE0OEVGMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzhjYWJjMWI0LTliZGYtNDBhNi1iYmJiLTY2YWU5ZDVhNjg1YS8zNzYw
MTM5M2Y3OGVlMTJmZTdmNzNhZTc5YmJmYjc0YjQzMWRhNzcwMGNlZjJjZjhjZi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4NGYy
NDc3ZmM0MGFhYi8wLzMyMzAzNTJlMzIzMTMxMmUzMTM1MzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADN05swDQYJKoZIhvcNAQELBQAD
ggEBAJPz3TjjQUnUMz+Ye3ya2hrcnb5sOz5kXGmc4o35LgbMHBD5lj4PVvczGnxI
6TLNMTTjNTZfD2wM+3Do/wY5/c+hd9x/VqNwUVNb/gVmsWzYPmbcqv5PGTxrN/lD
B1ceNvNEVVXHQd5E/15DlQ3r44ugPkJsaKbuBbZ7GF8cpbyHOMdbQ0WkA+XdVNGK
5u2KQxOgiai10lbSKruOsK7ANpv7C79k7qHEHZdf2XC+1OTl3B98CCgzaVdCKdQr
bI7j4eKPcV66UpnoLZ7YDCDGlCWhwMO50yBbqBRY48t0HcP1e51KEINkkdr5zyPt
rc26NtQjMaDMY90qdueCVIddFZM=
-----END CERTIFICATE-----
Generated at Wed Nov 20 01:59:58 2024 by rpki-client on console-ams.rpki-client.org