Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS142018.roa
File:                     AS142018.roa (raw, json)
Hash identifier:          Pt3RwjcwboZPoZ4gUIfLl3hEWZHrcqTJUaBj4xSDBgA=
Subject key identifier:   93:67:71:A2:68:8A:57:8B:90:4F:94:24:A6:F3:F0:74:86:CA:F6:39
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       7FAED0389ACCD618C81C88EBC2E96FC985346B20
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS142018.roa
Signing time:             Tue 26 Sep 2023 12:07:13 +0000
ROA not before:           Tue 26 Sep 2023 12:02:13 +0000
ROA not after:            Tue 24 Sep 2024 12:07:13 +0000
asID:                     142018
IP address blocks:        205.234.146.0/24 maxlen: 24
                          205.234.170.0/24 maxlen: 24
                          205.234.171.0/24 maxlen: 24
                          205.234.239.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 26 Sep 2023 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ae:d0:38:9a:cc:d6:18:c8:1c:88:eb:c2:e9:6f:c9:85:34:6b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Sep 26 12:02:13 2023 GMT
            Not After : Sep 24 12:07:13 2024 GMT
        Subject: CN=936771A2688A578B904F9424A6F3F07486CAF639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:a3:53:15:25:05:dd:da:cb:de:7d:1e:25:
                    93:82:0a:4f:ff:46:19:f4:b6:99:f6:f9:15:ef:21:
                    8d:dc:85:9f:21:12:2c:c0:f4:a5:6b:fa:39:77:8b:
                    e2:cf:9b:de:b6:6c:21:f0:44:fe:c4:1d:a6:c3:13:
                    00:d5:aa:33:82:8f:ce:9d:f1:92:da:cc:ae:dd:82:
                    ac:df:35:cb:9e:05:44:ae:79:5b:4a:18:33:34:9b:
                    c8:82:05:72:7d:ad:95:be:27:fd:8a:3d:ca:76:62:
                    8e:06:45:68:fb:37:23:69:8d:08:65:a0:01:de:13:
                    25:4e:90:33:df:a3:0a:c3:ae:20:ba:13:dc:1f:79:
                    9b:c5:14:65:8c:2b:00:ec:57:0b:19:cb:92:e3:98:
                    5a:73:f5:81:1d:6b:74:4f:b8:65:b9:74:27:ec:b9:
                    54:24:29:94:81:65:5e:47:6d:c0:ea:e6:38:ff:5a:
                    47:00:28:ef:23:ba:9d:02:07:da:cc:0f:99:81:1c:
                    a8:0f:61:ba:d2:40:5c:21:4e:2a:47:48:d8:96:60:
                    a3:10:af:16:ed:5d:5a:e4:38:b4:39:ff:ef:2b:e5:
                    19:60:79:3f:37:4a:e2:ca:d9:48:43:7f:dd:e8:5c:
                    3f:5e:7e:87:ad:38:c8:88:82:34:28:d7:67:58:6f:
                    3d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:67:71:A2:68:8A:57:8B:90:4F:94:24:A6:F3:F0:74:86:CA:F6:39
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS142018.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.146.0/24
                  205.234.170.0/23
                  205.234.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:10:f4:0b:12:74:ae:02:d7:78:25:f7:c2:b9:fc:0b:83:42:
         a7:6a:61:ea:e4:a8:23:a2:eb:84:c6:1c:1a:24:da:97:b7:7a:
         6b:b2:35:6a:2f:65:a8:8d:7c:a2:ea:75:74:a2:a2:71:7b:d4:
         34:d9:98:72:a1:80:f8:30:04:5a:b1:c7:8d:e7:7a:55:d6:a5:
         cc:c4:da:16:4f:44:97:fc:e1:21:9e:f8:97:04:2d:a8:ab:24:
         ab:49:38:fa:0b:ab:57:1b:25:f0:a3:96:5c:48:e9:cb:2e:52:
         8e:40:0e:0b:99:0a:94:76:85:d7:90:6e:54:a9:e1:1c:07:ce:
         01:f4:71:76:c0:b8:ca:51:8f:bc:b5:7e:74:2f:6f:6c:5b:b0:
         2c:1e:f3:12:83:37:d6:29:5c:59:63:e3:2d:0e:54:1d:3c:c4:
         8b:4b:5b:50:3e:25:fa:f4:17:39:36:24:f7:67:ed:de:12:08:
         80:ca:b5:14:fa:21:ac:37:6b:60:b4:5c:53:7d:c2:91:71:0e:
         ce:74:7d:cc:ef:58:37:5e:46:de:9a:cc:ad:27:9a:79:10:65:
         5c:a7:c7:3f:32:ac:e8:75:dd:9e:b4:e7:50:f9:4d:d5:95:b8:
         2f:e5:8b:31:bd:17:69:fc:e7:bc:b8:33:41:2c:5f:d4:78:75:
         b3:20:44:ce
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgIUf67QOJrM1hjIHIjrwulvyYU0ayAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwOTI2MTIwMjEzWhcNMjQwOTI0MTIwNzEz
WjAzMTEwLwYDVQQDEyg5MzY3NzFBMjY4OEE1NzhCOTA0Rjk0MjRBNkYzRjA3NDg2
Q0FGNjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllijUxUlBd3a
y959HiWTggpP/0YZ9LaZ9vkV7yGN3IWfIRIswPSla/o5d4viz5vetmwh8ET+xB2m
wxMA1aozgo/OnfGS2syu3YKs3zXLngVErnlbShgzNJvIggVyfa2Vvif9ij3KdmKO
BkVo+zcjaY0IZaAB3hMlTpAz36MKw64guhPcH3mbxRRljCsA7FcLGcuS45hac/WB
HWt0T7hluXQn7LlUJCmUgWVeR23A6uY4/1pHACjvI7qdAgfazA+ZgRyoD2G60kBc
IU4qR0jYlmCjEK8W7V1a5Di0Of/vK+UZYHk/N0riytlIQ3/d6Fw/Xn6HrTjIiII0
KNdnWG89lQIDAQABo4ICizCCAocwHQYDVR0OBBYEFJNncaJoileLkE+UJKbz8HSG
yvY5MB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NjkzZjA2MDAxODZjNmU3ZmQ4
ZDM2NjAvMC9BUzE0MjAxOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAM3qkgMEAc3qqgMEAM3q7zANBgkq
hkiG9w0BAQsFAAOCAQEAmBD0CxJ0rgLXeCX3wrn8C4NCp2ph6uSoI6LrhMYcGiTa
l7d6a7I1ai9lqI18oup1dKKicXvUNNmYcqGA+DAEWrHHjed6VdalzMTaFk9El/zh
IZ74lwQtqKskq0k4+gurVxsl8KOWXEjpyy5SjkAOC5kKlHaF15BuVKnhHAfOAfRx
dsC4ylGPvLV+dC9vbFuwLB7zEoM31ilcWWPjLQ5UHTzEi0tbUD4l+vQXOTYk92ft
3hIIgMq1FPohrDdrYLRcU33CkXEOznR9zO9YN15G3prMrSeaeRBlXKfHPzKs6HXd
nrTnUPlN1ZW4L+WLMb0XafznvLgzQSxf1Hh1syBEzg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org