Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030303a3a2f34302d3430203d3e203438363036.roa
File:                     326130353a646663313a313030303a3a2f34302d3430203d3e203438363036.roa (raw, json)
Hash identifier:          Tw/V6uitoNWGxUxp8J8VoQ57BzbrrLAba5AJWtmrEIs=
Subject key identifier:   5E:F6:52:B4:F4:D8:7F:B3:E1:0C:F4:50:4F:C3:E0:E1:EB:E2:2D:67
Certificate issuer:       /CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
Certificate serial:       4FDD0A0EC9A76F74DABE5DC4CB8CA839F7A40BEF
Authority key identifier: F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030303a3a2f34302d3430203d3e203438363036.roa
Signing time:             Mon 26 Feb 2024 12:08:50 +0000
ROA not before:           Mon 26 Feb 2024 12:03:50 +0000
ROA not after:            Mon 24 Feb 2025 12:08:50 +0000
asID:                     48606
IP address blocks:        2a05:dfc1:1000::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 28 Mar 2024 19:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:dd:0a:0e:c9:a7:6f:74:da:be:5d:c4:cb:8c:a8:39:f7:a4:0b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
        Validity
            Not Before: Feb 26 12:03:50 2024 GMT
            Not After : Feb 24 12:08:50 2025 GMT
        Subject: CN=5EF652B4F4D87FB3E10CF4504FC3E0E1EBE22D67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:77:61:26:ee:c6:2e:f1:89:af:52:c8:1e:13:
                    ca:07:86:24:7a:15:d8:94:61:6e:3f:0f:fc:5f:e0:
                    6c:85:58:fa:be:71:c6:75:c9:a0:b9:33:1d:21:fa:
                    a7:34:55:3a:0d:7a:67:b1:3d:55:6c:92:97:a6:52:
                    59:cb:54:83:c6:85:d7:5c:84:a7:b3:86:17:f8:7f:
                    95:56:3e:b6:aa:00:82:af:88:05:a2:3d:14:8b:54:
                    12:6f:24:3f:b0:83:ee:c6:4f:f9:e1:c9:e3:52:10:
                    dc:a0:36:c4:1c:d4:fb:8e:e6:86:22:0d:6d:9e:e5:
                    49:8f:7d:38:5a:ff:bb:1d:c1:c7:06:03:bb:94:c0:
                    ba:d9:d9:3a:45:16:2f:e1:d2:ab:84:eb:a0:9e:61:
                    1a:98:f4:6b:10:1d:a5:b3:1d:b0:53:64:d2:72:66:
                    85:bd:79:c7:d9:6c:e4:b6:61:4f:60:e6:38:db:7b:
                    64:cd:33:89:f6:b1:3b:0b:fe:ac:3c:d5:40:09:d4:
                    3e:ec:02:81:f9:e7:a5:04:be:e1:b9:9d:ff:d3:85:
                    17:a7:ef:75:42:67:a4:dc:4b:68:21:d8:4d:9d:9a:
                    12:17:40:7f:7a:d5:d2:db:d1:a1:ba:45:c8:23:d0:
                    42:a7:e0:db:bf:a0:60:2f:3c:32:41:ec:29:01:a6:
                    3f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F6:52:B4:F4:D8:7F:B3:E1:0C:F4:50:4F:C3:E0:E1:EB:E2:2D:67
            X509v3 Authority Key Identifier:
                keyid:F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030303a3a2f34302d3430203d3e203438363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:8f:13:ca:14:a7:36:f5:a2:79:52:f5:b9:8c:6b:c9:fe:2f:
         2a:d2:fb:eb:2d:08:66:eb:ff:7d:6d:44:be:0d:29:45:36:42:
         62:b7:0f:1a:19:ca:2c:de:04:d1:f3:ae:cb:ff:ef:8d:2f:b3:
         bb:c1:fe:be:ff:b7:1e:9b:5e:ba:00:0e:04:aa:ee:44:d3:bc:
         63:8a:b1:02:b9:ff:ef:f6:51:f8:b1:4b:00:ab:91:4e:bf:80:
         63:ca:71:bf:ed:7c:1e:da:dd:9c:16:06:d3:08:32:ec:a1:7e:
         4a:7f:e4:c2:d8:d3:22:ed:87:85:bc:c7:b9:2a:63:a7:32:02:
         18:54:da:14:b3:b5:21:c5:24:ec:d7:41:8b:90:8e:60:0b:8d:
         ea:fe:f7:ba:d7:ac:fb:5b:5b:9f:99:b4:1b:4d:ae:10:00:f9:
         33:b1:f9:9b:52:8d:74:a1:af:8d:88:97:09:ab:67:2b:64:21:
         38:88:d8:2a:28:2f:70:92:41:79:4a:ff:0b:f2:88:5e:79:75:
         d9:da:41:5e:2c:c4:25:1c:b1:93:c5:55:7c:95:dc:33:d2:3e:
         d7:0a:d2:2d:17:ff:23:c9:43:aa:ee:82:c9:03:6f:b6:27:bd:
         18:b4:db:4d:ed:5c:1c:03:c8:1e:cc:13:31:11:5a:df:33:fe:
         0d:5b:31:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:38 2024 by rpki-client on console-ams.rpki-client.org