Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232392e302f32342d3234203d3e20383334.roa
File:                     36392e3136362e3232392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          uXVZJ1DvnQ1d31Il+d/aEuplTtj2T0QGJzimvswaOuI=
Subject key identifier:   EF:DC:AE:BE:89:96:93:96:BF:E6:14:FD:60:12:88:D9:65:5F:0F:D1
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       24DDE9BB55163CADF21E50685486DC834B4DDC34
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232392e302f32342d3234203d3e20383334.roa
Signing time:             Tue 02 Jan 2024 00:00:04 +0000
ROA not before:           Mon 01 Jan 2024 23:55:04 +0000
ROA not after:            Tue 31 Dec 2024 00:00:04 +0000
asID:                     834
IP address blocks:        69.166.229.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Jan 2024 12:07:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:dd:e9:bb:55:16:3c:ad:f2:1e:50:68:54:86:dc:83:4b:4d:dc:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Jan  1 23:55:04 2024 GMT
            Not After : Dec 31 00:00:04 2024 GMT
        Subject: CN=EFDCAEBE89969396BFE614FD601288D9655F0FD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:17:57:6a:e5:35:e4:bd:ae:19:ed:41:4a:
                    07:c6:1b:75:7f:8a:06:96:eb:c1:b4:2a:23:8d:63:
                    f7:6f:ec:af:8d:02:13:af:e6:cd:1a:76:07:81:64:
                    fd:66:a3:5f:00:06:7f:e8:49:cc:81:cb:3c:47:55:
                    6f:4b:40:86:a4:16:50:7f:c5:c3:b0:f2:8a:d8:e8:
                    a0:47:c1:ce:89:8e:ea:53:e7:65:a7:9b:67:8c:97:
                    9e:13:a2:b9:4b:f0:29:5c:a9:5f:17:ab:35:12:08:
                    07:4a:98:41:44:8e:e1:5c:41:9e:92:51:11:db:c4:
                    40:43:58:e2:09:90:e2:e3:a3:ab:df:59:e7:bd:f6:
                    a2:a8:95:d4:c0:4c:79:3c:eb:f7:48:be:87:34:03:
                    81:38:a0:a2:72:1b:c6:c4:70:46:0e:cb:a2:52:51:
                    e9:04:4a:60:35:cc:15:e1:ab:a3:b7:69:09:46:44:
                    f3:c9:04:2e:5a:61:68:f2:90:7b:e0:ab:5f:2f:da:
                    c4:65:24:82:19:78:29:27:8b:6d:ae:91:e3:02:b6:
                    f4:fb:66:5b:41:cf:1e:b2:fb:3a:5e:fe:58:2e:9a:
                    d1:06:ee:96:b7:90:45:e3:3d:39:47:b8:3d:50:c1:
                    87:9b:3e:dd:f7:4c:5a:55:6c:d3:ce:9d:f8:5a:14:
                    5e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DC:AE:BE:89:96:93:96:BF:E6:14:FD:60:12:88:D9:65:5F:0F:D1
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:47:3e:b3:21:46:01:50:ae:12:30:c7:09:8f:4d:7e:cf:1a:
         61:fd:e9:5b:68:4a:14:07:fd:42:b7:20:8b:c4:8f:1b:5c:f5:
         0d:49:d8:68:96:f5:aa:39:98:fa:bf:22:68:d6:61:3b:41:f5:
         10:35:9a:b2:06:0b:d6:33:82:73:9f:98:dc:f5:c1:32:79:9c:
         6f:92:0a:74:09:13:1e:d3:6f:82:84:ce:81:58:60:d6:bb:1c:
         75:e3:13:9d:1b:f7:f7:8d:f4:a7:2d:4a:25:02:24:76:e9:e6:
         00:f3:1c:ca:03:85:46:cb:3e:4c:49:dc:11:a7:48:3b:64:d8:
         70:36:8d:f4:57:dc:f5:8a:5f:49:93:c1:78:7c:9f:f3:bc:f4:
         d0:8f:f2:1e:b4:7c:c3:d8:64:75:8c:f1:cd:f4:88:e8:52:0e:
         32:c0:b9:f5:29:fe:1c:99:53:93:68:82:ac:fa:13:35:67:a4:
         57:fb:1d:6b:48:b0:8a:fc:bd:03:76:6a:30:7d:f1:ae:33:75:
         ef:48:8e:6e:a3:f3:13:7d:3a:d9:e2:04:ba:8b:72:bc:49:cf:
         47:c4:c9:7d:d1:98:3e:70:82:5e:b3:39:e9:7e:9d:ef:7e:9a:
         a4:46:4b:c7:a0:c3:81:5e:dc:41:fc:eb:58:82:77:95:4f:f7:
         1e:08:0d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:06 2024 by rpki-client on console-fra.rpki-client.org