Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207633.roa
File:                     AS207633.roa (raw, json)
Hash identifier:          bD6pSxUmLPm3ugMfbdmG7zmkMlEafKot30F6JSmZPws=
Subject key identifier:   A9:A0:F6:30:D8:FA:24:E0:26:F8:3F:21:7F:DA:72:33:AF:C6:B5:63
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       51FB9EB111F916B3408C0689992B1970B325A3FF
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207633.roa
Signing time:             Fri 21 Apr 2023 15:30:05 +0000
ROA not before:           Fri 21 Apr 2023 15:25:05 +0000
ROA not after:            Fri 19 Apr 2024 15:30:05 +0000
asID:                     207633
IP address blocks:        104.234.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:fb:9e:b1:11:f9:16:b3:40:8c:06:89:99:2b:19:70:b3:25:a3:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr 21 15:25:05 2023 GMT
            Not After : Apr 19 15:30:05 2024 GMT
        Subject: CN=A9A0F630D8FA24E026F83F217FDA7233AFC6B563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:da:ea:12:5c:b1:6a:9e:92:07:81:9a:2f:cd:
                    ba:70:77:f3:d8:a6:c0:4e:e4:45:9e:10:7c:06:87:
                    5a:3f:94:f2:cf:bb:38:60:5a:4e:c7:17:84:a5:85:
                    3c:f8:00:6a:bd:09:d9:f0:b6:13:1f:cf:4c:04:b6:
                    c5:9d:15:5f:5b:39:73:a2:cf:94:52:71:00:7d:86:
                    48:c8:54:42:c7:f3:b0:08:84:ba:7f:6b:65:75:17:
                    b3:24:8f:56:82:61:15:83:03:a7:fc:ac:de:91:1b:
                    4c:0e:17:b0:ea:99:47:46:af:f5:09:f0:3d:a2:2a:
                    4d:f6:6f:4e:68:f0:66:b3:f1:cd:ca:b8:8c:de:a8:
                    f0:d7:6e:36:02:e2:75:d4:18:b3:c9:6d:fc:a8:61:
                    4b:81:ad:7e:b2:c1:2e:12:b7:fc:91:11:47:82:e4:
                    27:6b:18:83:75:37:a9:d6:7b:2b:03:f0:3c:2d:67:
                    14:f6:a8:6d:b0:8c:c9:83:d4:aa:e1:fc:91:94:f1:
                    a1:8f:dc:9a:a3:6b:ce:23:8a:3a:74:4d:0f:17:7c:
                    06:c2:fd:ad:f4:af:14:a2:1f:4e:46:c7:55:b0:ed:
                    6e:22:c5:65:7b:be:a2:b4:a7:1b:fa:3c:16:7b:6a:
                    2f:79:74:1a:38:6c:fd:70:63:ee:a2:ea:ed:d4:62:
                    bb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A0:F6:30:D8:FA:24:E0:26:F8:3F:21:7F:DA:72:33:AF:C6:B5:63
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:d9:9d:92:2c:37:26:78:08:5e:c3:bf:2e:a0:19:44:52:6a:
         b8:31:59:77:b8:d8:02:1d:21:0d:cd:76:e5:51:6a:03:78:dc:
         c8:9f:32:a3:8f:cf:72:50:a2:14:19:67:cd:6e:be:da:22:84:
         00:db:01:38:43:25:74:b0:a2:52:25:95:c0:c4:09:38:e4:15:
         91:1e:fc:3d:14:cf:82:ad:0b:36:15:31:4d:6f:b4:02:72:be:
         90:03:2e:26:41:9d:12:da:2a:f1:3e:36:71:b6:08:d8:25:6c:
         10:bb:cd:73:88:20:02:bf:a8:29:53:e3:28:8b:ca:50:58:e7:
         9f:6b:65:e6:91:b7:ca:e8:17:eb:31:d4:5b:ae:d2:a6:1c:4c:
         ce:e1:a9:80:fa:dd:5f:54:35:56:fa:b6:86:a7:64:87:cb:27:
         66:ed:87:e4:6f:4f:66:91:db:34:70:92:59:0d:9f:f7:75:ab:
         73:3a:b6:43:74:65:55:09:4a:59:35:d3:44:2b:7d:9e:2e:ad:
         e2:46:e3:ac:ff:65:d1:99:08:c8:4a:53:68:48:45:06:db:8c:
         eb:a6:2d:e4:30:1e:95:5d:98:89:0e:18:32:ec:79:53:72:b5:
         e6:c4:3f:a9:5f:9c:17:04:a2:6b:8c:66:6a:6f:cb:fc:d4:22:
         ff:b0:74:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:23 2023 by rpki-client on console-ams.rpki-client.org