Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e20383334.roa
File:                     3230352e3231312e3135352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          ZtqyjnEe7NR2HtcTi8z3wCEwXMK2J1HjOCVePuhGPGY=
Subject key identifier:   C2:9C:5D:A5:45:6D:4F:E0:EB:81:D2:27:25:1E:F4:ED:81:27:72:DC
Certificate issuer:       /CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Certificate serial:       3CFEA5549B4708E2A0F14D9D9DE73A4D1430CFF7
Authority key identifier: B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e20383334.roa
Signing time:             Thu 02 May 2024 00:02:19 +0000
ROA not before:           Wed 01 May 2024 23:57:19 +0000
ROA not after:            Thu 01 May 2025 00:02:19 +0000
asID:                     834
IP address blocks:        205.211.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 20 May 2024 15:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:fe:a5:54:9b:47:08:e2:a0:f1:4d:9d:9d:e7:3a:4d:14:30:cf:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
        Validity
            Not Before: May  1 23:57:19 2024 GMT
            Not After : May  1 00:02:19 2025 GMT
        Subject: CN=C29C5DA5456D4FE0EB81D227251EF4ED812772DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:54:7e:43:4d:a1:ad:fd:b5:dc:cf:af:34:f2:
                    19:ff:ce:6e:34:34:82:f7:ee:27:a2:0e:f2:8b:c1:
                    19:33:64:ae:1d:37:a1:ba:5b:9a:68:b3:c7:8f:57:
                    ef:6e:45:0c:34:48:be:04:29:0c:19:1e:ba:4a:ac:
                    df:6a:9f:5d:46:37:a3:18:1e:38:ff:bb:73:83:90:
                    4d:2d:ac:61:07:1d:df:6b:9e:d5:fc:ee:03:0c:46:
                    8d:0e:e4:19:72:4f:0c:10:d7:d8:37:66:c0:55:f7:
                    c9:5f:10:b3:58:15:ff:e3:e6:7d:88:c8:b7:c0:59:
                    85:b6:d1:72:13:cc:61:95:c4:f9:5c:d5:3b:88:ee:
                    4d:91:d2:9b:f9:1e:d2:21:8e:c2:52:a2:6e:c3:71:
                    63:ee:a4:10:64:4e:19:73:79:3f:8d:17:2f:3d:21:
                    1c:f9:56:9f:2d:b9:bd:d2:a8:68:23:c4:3e:d1:bc:
                    09:d9:74:72:4e:ac:93:42:cf:b5:25:af:43:b1:28:
                    ec:24:8b:55:a2:64:14:67:83:06:7a:37:94:1d:5c:
                    fb:44:49:08:c0:0a:75:87:1d:12:bc:49:ff:91:44:
                    75:30:8b:32:e8:8f:e6:1e:33:5b:98:18:08:81:79:
                    e3:32:78:aa:d7:fe:37:d9:67:fd:92:3b:eb:00:72:
                    42:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9C:5D:A5:45:6D:4F:E0:EB:81:D2:27:25:1E:F4:ED:81:27:72:DC
            X509v3 Authority Key Identifier:
                keyid:B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:c4:ad:30:c4:69:81:09:2d:25:86:88:d2:fb:69:85:3c:b2:
         95:b6:77:17:4e:60:6f:bd:78:3e:04:b0:c1:1b:3a:f5:37:24:
         be:5d:a4:53:9c:34:a3:7b:2f:b5:1c:5f:5b:ac:46:79:84:51:
         89:7f:a1:54:bd:f2:cc:3d:0d:b8:14:8b:4d:87:66:10:82:a9:
         df:0e:c3:34:32:5a:ee:cd:5a:b6:fd:09:2e:62:ea:da:1c:99:
         b7:1d:de:16:4b:9f:1c:2a:0c:17:b0:13:c0:b8:57:08:97:bb:
         c8:a9:42:d0:c5:52:cd:d7:a7:e7:22:52:50:5b:90:e1:36:00:
         05:b0:a8:14:65:08:72:49:ff:8f:9d:34:eb:04:d7:54:c0:a1:
         e1:86:91:a0:62:9c:e1:8e:f8:1b:84:7c:54:a4:c4:29:56:12:
         70:f0:ea:69:b2:f5:eb:ce:56:fa:43:01:00:7e:91:c7:54:75:
         e1:56:a9:8e:6e:4f:4b:d6:85:0b:ec:fa:8f:e6:86:85:e2:e6:
         86:b6:bc:dc:dd:f5:ab:ed:4d:f5:c9:0c:9d:5b:cf:7f:7e:8e:
         68:ba:80:0e:a3:0c:9c:ed:d0:d2:8a:60:84:eb:d5:ce:88:bb:
         d8:55:90:43:bc:4d:d1:a1:0c:99:a4:95:21:f4:0e:92:26:cd:
         6d:23:e7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:03 2024 by rpki-client on console-fra.rpki-client.org