Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS59895.roa
File:                     AS59895.roa (raw, json)
Hash identifier:          Z/sa8PixIlplmKhLDa5O7Fnzvp3oCG5b+r0cY5bhi8s=
Subject key identifier:   25:63:69:0A:CC:BF:70:34:3E:80:A4:12:E0:A5:64:2C:C6:D4:6C:3C
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       7C9FA042C32C3E970D1F75EBCE25DB2BE0888A70
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS59895.roa
Signing time:             Tue 30 Apr 2024 10:53:54 +0000
ROA not before:           Tue 30 Apr 2024 10:48:54 +0000
ROA not after:            Tue 29 Apr 2025 10:53:54 +0000
asID:                     59895
IP address blocks:        205.234.176.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 00:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:9f:a0:42:c3:2c:3e:97:0d:1f:75:eb:ce:25:db:2b:e0:88:8a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 30 10:48:54 2024 GMT
            Not After : Apr 29 10:53:54 2025 GMT
        Subject: CN=2563690ACCBF70343E80A412E0A5642CC6D46C3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c2:fa:ba:78:23:50:71:0a:51:17:83:d0:13:
                    6e:48:dc:5b:4d:21:e5:ca:ce:77:9c:a3:c8:8d:2f:
                    d6:8b:05:e4:a5:1e:3e:1a:ff:92:04:df:d7:5a:30:
                    e1:6c:ff:8e:dd:89:2f:1e:f4:ff:6f:3b:64:a6:5d:
                    33:77:25:7e:5e:08:b7:a4:b0:66:d2:21:45:6e:c0:
                    44:6f:26:6c:3e:4e:0f:ba:49:c9:39:e3:da:90:35:
                    1f:40:0f:9a:7d:10:17:af:10:37:cc:3d:03:f8:0f:
                    0d:71:01:42:7b:5a:19:95:37:28:ea:c6:84:09:f5:
                    b7:2d:54:17:50:52:c6:07:27:d0:64:a9:28:cb:82:
                    e4:23:a9:ea:95:68:ff:14:e4:a9:ac:a3:af:a9:28:
                    54:2e:64:d4:bf:37:51:76:ff:76:e4:9d:5a:43:c7:
                    c8:a1:da:58:d6:da:b5:5e:e9:3b:c5:f9:8e:15:2b:
                    9a:99:37:c7:e5:7d:00:39:62:09:58:3d:fe:a6:70:
                    19:c2:d4:52:46:a4:d0:3e:1d:7a:ca:4e:46:73:54:
                    ac:60:23:4d:fd:34:50:01:e1:a2:02:d8:5e:18:24:
                    87:77:e5:32:e4:d3:97:e0:d8:02:73:31:65:aa:1d:
                    b8:2c:38:21:ee:92:67:f1:ad:ea:6c:39:0e:8c:5b:
                    f4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:63:69:0A:CC:BF:70:34:3E:80:A4:12:E0:A5:64:2C:C6:D4:6C:3C
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS59895.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:fd:40:b1:e3:df:38:4c:07:26:39:79:63:d4:9b:3b:57:dd:
         9e:3d:e2:3e:65:12:08:11:d3:1e:ea:61:7e:26:50:fc:04:1c:
         1d:2d:31:51:db:7e:a9:b6:29:42:4b:85:78:40:88:59:b0:49:
         14:44:63:69:ad:7a:d8:27:1f:53:a7:30:18:38:44:30:3e:56:
         41:93:5e:11:f0:fa:fa:78:a3:50:62:b9:ba:c9:44:b5:74:42:
         3b:1a:82:53:1a:a3:7f:c7:6c:70:43:8e:a3:85:fd:a3:cb:c6:
         8b:d9:6b:84:02:da:b4:c6:d6:90:df:0a:ae:e1:3c:7d:3f:6f:
         6c:b6:8e:c3:ca:5e:f0:ea:ce:a8:6d:5c:e1:ff:9c:23:25:6d:
         db:3b:b0:e5:50:81:92:54:40:c3:05:20:d2:e5:e7:b4:b7:ad:
         9e:0b:4c:b5:ed:86:57:4e:80:0b:30:18:10:86:80:c6:2d:4e:
         c8:f3:33:f2:79:df:97:7b:4b:8a:c4:7c:11:13:cd:fa:e2:db:
         d3:17:77:8d:0d:60:ed:83:a4:3a:63:0a:32:95:7b:42:ef:ff:
         36:fa:4a:2d:e1:0b:87:fc:cd:e7:41:37:2f:9b:5d:4c:73:31:
         1b:cd:d4:d5:a3:c9:4d:69:15:7c:1c:23:7a:6e:57:9b:d5:11:
         7f:e5:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----