Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030303a3a2f34302d3430203d3e203539363738.roa
File:                     326130353a646663313a313030303a3a2f34302d3430203d3e203539363738.roa (raw, json)
Hash identifier:          JXUiX3C+j+O0iSaXqjedNQT2505Xk69wROc+Fogsd7U=
Subject key identifier:   02:AB:16:BA:9A:E3:D3:17:B8:B5:B7:87:4A:88:F6:92:B0:F9:F6:40
Certificate issuer:       /CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
Certificate serial:       2F8A674A34784224DFE0D3BE5F68492393F1D74A
Authority key identifier: F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030303a3a2f34302d3430203d3e203539363738.roa
Signing time:             Mon 26 Feb 2024 12:08:50 +0000
ROA not before:           Mon 26 Feb 2024 12:03:50 +0000
ROA not after:            Mon 24 Feb 2025 12:08:50 +0000
asID:                     59678
IP address blocks:        2a05:dfc1:1000::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 28 Mar 2024 19:11:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8a:67:4a:34:78:42:24:df:e0:d3:be:5f:68:49:23:93:f1:d7:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
        Validity
            Not Before: Feb 26 12:03:50 2024 GMT
            Not After : Feb 24 12:08:50 2025 GMT
        Subject: CN=02AB16BA9AE3D317B8B5B7874A88F692B0F9F640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:34:fd:15:5f:73:e8:7d:40:54:17:48:53:
                    b9:4c:6b:27:41:12:4e:f3:4d:44:6b:a3:e9:17:01:
                    45:a2:65:61:d4:7f:89:eb:15:b0:fc:b9:a9:de:50:
                    4c:7d:6d:fe:50:62:28:cf:9b:d5:28:61:bb:0a:fe:
                    d2:4f:b5:f1:be:84:a1:e6:b4:29:77:e6:c9:15:76:
                    51:d1:eb:bb:73:ce:7b:14:b5:37:16:57:9f:64:c9:
                    4e:a2:a7:b3:0f:1e:9e:31:b4:b7:e2:c1:8d:18:3c:
                    6e:ce:f6:48:75:d3:4a:d4:34:04:65:5a:30:eb:44:
                    17:4e:6d:ba:b1:ae:b9:e9:86:44:e7:a7:7e:23:c0:
                    43:51:a6:f1:3d:e9:e5:6d:04:d7:4b:0f:9d:51:29:
                    df:e4:f7:09:70:e7:7a:d4:0d:fa:45:fc:5a:82:45:
                    ec:41:21:ae:6c:43:3d:85:ee:8b:03:be:72:d2:01:
                    fd:df:81:cf:e2:a5:f0:a6:34:33:b8:11:a8:07:82:
                    c6:c5:04:57:42:54:6c:bf:9b:7c:bf:15:d9:50:1a:
                    fe:d7:c7:d9:44:ed:ad:69:99:29:50:94:4d:0b:46:
                    6d:0c:e8:ad:26:02:2f:63:a5:be:db:a9:b9:5e:92:
                    94:10:3d:03:a4:37:54:9f:a9:8f:76:87:58:98:21:
                    21:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AB:16:BA:9A:E3:D3:17:B8:B5:B7:87:4A:88:F6:92:B0:F9:F6:40
            X509v3 Authority Key Identifier:
                keyid:F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030303a3a2f34302d3430203d3e203539363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5b:51:d2:b6:32:c2:a0:75:90:56:d3:a1:83:c3:13:5a:79:44:
         89:0b:c6:f5:16:f7:3d:e6:f9:3c:60:72:a4:d9:9b:f6:c6:6a:
         77:4b:40:e5:da:f4:cb:98:bb:95:8f:72:db:38:a8:a6:8f:dd:
         56:a9:ba:35:d1:d0:9c:01:3c:9a:c9:29:0d:0c:96:31:59:0f:
         19:62:4a:57:35:b3:76:37:53:7b:72:58:81:6a:2d:78:27:41:
         8c:28:f2:97:16:a0:76:50:aa:d3:5b:95:0e:37:fa:4b:93:db:
         de:6f:c5:09:d1:ff:e5:d2:95:7d:e5:1e:f1:fa:a2:ee:09:57:
         a6:61:6c:8d:e2:9b:38:90:71:64:cb:ec:f7:a4:91:b2:19:85:
         3b:7b:b7:83:36:23:8e:85:f2:18:99:6d:6f:7b:67:33:d1:f2:
         7c:f4:78:e2:65:0e:bb:9b:94:26:a3:e6:d5:3d:26:8d:fa:d2:
         54:cb:d8:ef:d3:91:9a:ea:94:6e:3f:cd:46:3c:ee:e9:6a:64:
         8e:ff:f4:ce:02:3c:1d:4f:07:d6:cd:a2:5a:4c:25:8c:ce:3d:
         57:f9:4e:23:20:b2:39:59:14:28:e0:ca:d6:c7:6d:1b:71:8e:
         2c:52:67:3d:b4:80:d4:e7:1a:00:07:af:17:43:56:4f:11:be:
         4f:5b:28:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:38 2024 by rpki-client on console-ams.rpki-client.org