Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233302e302f32342d3234203d3e203531373635.roa
File:                     36392e3136362e3233302e302f32342d3234203d3e203531373635.roa (raw, json)
Hash identifier:          59UQ8GkliTWyN1XO2vhhvjobMmT1vuPaRS/wDavAlJE=
Subject key identifier:   9C:02:C7:EE:DF:4C:32:72:01:E7:2E:D5:F8:C7:BB:E1:71:24:8B:22
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       5E26B1DFDFCB570E75AA86958FB159684EB98C28
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233302e302f32342d3234203d3e203531373635.roa
Signing time:             Mon 03 Jul 2023 15:00:48 +0000
ROA not before:           Mon 03 Jul 2023 14:55:48 +0000
ROA not after:            Mon 01 Jul 2024 15:00:48 +0000
asID:                     51765
IP address blocks:        69.166.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 11 Oct 2023 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:26:b1:df:df:cb:57:0e:75:aa:86:95:8f:b1:59:68:4e:b9:8c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Jul  3 14:55:48 2023 GMT
            Not After : Jul  1 15:00:48 2024 GMT
        Subject: CN=9C02C7EEDF4C327201E72ED5F8C7BBE171248B22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:58:16:5f:46:99:43:da:dd:a9:d9:65:26:34:
                    a7:a6:d3:b5:70:3a:db:47:d8:c4:1f:4a:97:cd:c9:
                    d7:bb:be:49:3f:73:9c:a0:fe:ed:41:62:83:d3:61:
                    14:6f:a2:c8:36:c7:00:31:42:71:21:6a:6c:74:5a:
                    ef:df:b0:67:b1:0c:2f:5e:c7:1a:f8:43:ff:09:b1:
                    2c:d1:de:68:28:a6:26:43:71:11:3f:61:74:2e:62:
                    9c:b1:53:cd:32:d9:da:37:20:80:cf:71:b6:ae:50:
                    58:f7:f4:41:2a:41:5b:0b:6f:b6:5d:40:09:87:ad:
                    11:3e:e0:78:bc:72:7b:2f:48:b9:2f:71:8e:5a:e6:
                    c1:45:82:79:26:0c:9c:d0:4c:ef:e5:09:80:9b:13:
                    08:ce:c6:b3:c0:e5:3d:2b:15:6e:ac:e7:2e:d8:df:
                    40:cb:df:75:1e:76:9e:5e:a8:37:98:2e:1e:67:88:
                    44:86:17:2c:bb:2d:e6:17:f7:b7:97:e3:f4:f6:e7:
                    ec:9d:de:9e:9a:f6:19:d0:20:e4:e9:27:c4:71:3a:
                    7e:d6:d3:83:45:fd:40:a3:80:2f:81:83:2f:a6:2e:
                    24:31:df:24:8e:05:9b:fc:b2:68:e6:e7:fb:c4:f4:
                    5e:40:c3:22:20:ef:24:38:cb:6b:e2:f1:dc:35:7d:
                    32:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:02:C7:EE:DF:4C:32:72:01:E7:2E:D5:F8:C7:BB:E1:71:24:8B:22
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233302e302f32342d3234203d3e203531373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:e4:3e:69:8d:17:89:1d:ef:ec:6b:12:98:7f:ab:77:e4:92:
         67:4d:ca:de:f8:37:48:1f:2f:9d:18:f9:ef:b0:5a:3d:da:82:
         fa:51:2a:34:e5:d1:7f:46:37:80:97:ea:a7:a6:e5:74:ff:60:
         94:e8:f3:fd:b2:f7:c6:08:7f:ec:fb:b7:d6:cd:e5:af:25:1a:
         b5:b8:af:79:f9:c8:83:ac:d9:44:f9:28:6b:b4:86:44:95:7e:
         38:78:84:b4:5b:c6:78:9b:4f:ac:b0:18:16:fa:e0:c6:d1:c7:
         47:f1:88:02:6f:61:c2:83:87:ce:e1:25:69:9e:79:06:fb:0f:
         a0:b9:c8:88:f7:5f:04:64:c0:d3:7c:ff:2e:5a:50:33:61:81:
         e6:84:fa:6a:73:ef:16:06:9a:c9:26:f4:c0:15:68:2d:13:30:
         a1:57:70:0f:5e:ec:9d:47:bb:73:4b:45:2d:c4:b5:5b:96:23:
         1d:0c:be:f0:18:0b:a6:42:8a:3e:a6:d0:91:f0:20:79:b1:2b:
         d6:13:98:b0:1b:0b:31:9f:a2:0e:cc:b2:3d:41:0a:24:e6:a6:
         a9:e4:81:6e:ba:ca:dd:42:4c:80:16:a4:34:15:23:2a:a5:5c:
         88:c1:76:b6:bb:26:28:b0:ec:d7:f6:e9:05:93:41:c9:a4:1f:
         7d:9b:b6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:38 2024 by rpki-client on console-ams.rpki-client.org