Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/0/3134322e3134372e352e302f32342d3234203d3e203633333232.roa
File:                     3134322e3134372e352e302f32342d3234203d3e203633333232.roa (raw, json)
Hash identifier:          O0hNdragXsbvHMz1imZlUukg3t9BmMF0zaIgEUIVsRs=
Subject key identifier:   D0:1C:B9:05:86:EE:37:43:3B:15:90:8E:4D:F6:66:AD:5D:9C:40:0D
Certificate issuer:       /CN=c571b11ca91ed05e60c3c3b481f3b5cf15cd660662e877b347
Certificate serial:       3ECB37B03D43041A433457DC24C859878386019C
Authority key identifier: 21:EF:AC:AF:1A:16:2D:6A:12:C0:F1:0A:28:BE:95:D0:F3:06:93:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b7592484-1960-4d36-b7eb-45faebea987d/c571b11ca91ed05e60c3c3b481f3b5cf15cd660662e877b347.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/0/3134322e3134372e352e302f32342d3234203d3e203633333232.roa
Signing time:             Thu 27 Jun 2024 18:30:22 +0000
ROA not before:           Thu 27 Jun 2024 18:25:22 +0000
ROA not after:            Thu 26 Jun 2025 18:30:22 +0000
asID:                     63322
IP address blocks:        142.147.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 28 Aug 2024 18:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:cb:37:b0:3d:43:04:1a:43:34:57:dc:24:c8:59:87:83:86:01:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c571b11ca91ed05e60c3c3b481f3b5cf15cd660662e877b347
        Validity
            Not Before: Jun 27 18:25:22 2024 GMT
            Not After : Jun 26 18:30:22 2025 GMT
        Subject: CN=D01CB90586EE37433B15908E4DF666AD5D9C400D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:b0:54:52:d9:5c:9f:2d:23:86:d1:a5:e2:
                    c1:c2:11:8e:94:66:39:8a:5d:02:45:43:cb:c3:c0:
                    d4:e8:98:46:a7:8c:4c:c6:d1:fd:1d:5d:a9:c6:1c:
                    d0:3f:f6:d3:af:84:df:3d:26:57:69:eb:fc:42:22:
                    5a:be:1b:78:31:8f:67:8d:5a:f8:e5:5f:5c:89:25:
                    61:02:74:bd:20:c2:0c:ce:d8:cf:0b:75:05:1a:f3:
                    df:a7:dd:f9:b6:36:41:d0:8c:3f:a2:4c:13:ff:71:
                    a7:6f:31:41:a6:cb:e5:57:34:80:d5:88:23:07:85:
                    3e:a7:1e:e8:3f:00:78:70:3d:5f:aa:47:42:51:a8:
                    2b:d4:b0:64:66:84:21:e1:61:f6:c6:83:32:db:37:
                    40:50:4b:9e:a3:df:af:80:7f:c9:23:e7:4b:1d:01:
                    8a:2b:9d:c6:46:db:ef:e3:06:13:27:a7:4f:72:d7:
                    a9:7c:65:62:67:39:a3:40:89:04:65:4f:43:14:ff:
                    1d:ac:7d:47:57:fa:1f:b6:44:2e:3d:e5:27:2c:fc:
                    31:2d:f1:ac:c2:d2:87:8b:b3:e8:96:a0:3d:6a:87:
                    cd:d3:fc:39:3c:02:a9:6f:1b:ce:05:4b:34:2d:0d:
                    2b:c3:55:96:a4:e8:17:6a:66:b5:20:59:4c:9b:bc:
                    3a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1C:B9:05:86:EE:37:43:3B:15:90:8E:4D:F6:66:AD:5D:9C:40:0D
            X509v3 Authority Key Identifier:
                keyid:21:EF:AC:AF:1A:16:2D:6A:12:C0:F1:0A:28:BE:95:D0:F3:06:93:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/0/21EFACAF1A162D6A12C0F10A28BE95D0F30693B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b7592484-1960-4d36-b7eb-45faebea987d/c571b11ca91ed05e60c3c3b481f3b5cf15cd660662e877b347.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/0/3134322e3134372e352e302f32342d3234203d3e203633333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:15:9c:4a:ef:f1:37:46:48:c9:6f:cd:b5:48:ab:84:bf:2d:
         ca:cf:ed:e3:e6:21:21:2c:5d:a0:8f:4a:bc:28:7b:c1:58:14:
         2e:c6:12:3d:8a:5b:af:61:8e:e3:7e:69:e4:aa:f6:9e:88:b6:
         b5:73:2c:01:e8:c0:2a:c3:4a:0d:43:b1:7e:ba:57:76:39:d9:
         22:e6:a0:ea:85:0a:30:d5:7e:08:fb:94:6d:27:bc:17:bd:a9:
         d8:cf:5b:ff:f5:72:ea:d3:24:4f:47:ca:f8:6f:95:c7:47:a1:
         a2:5e:81:cb:7d:1b:fa:00:2c:78:a2:e6:36:a1:72:60:fc:ea:
         0c:a4:75:d7:c1:00:33:1d:b0:c1:9a:4e:2d:31:e1:c7:63:18:
         35:50:60:a8:72:c1:e5:36:8f:d9:53:28:b0:1c:b9:ac:48:28:
         fc:19:86:f9:5b:e0:2a:4c:cf:9c:96:8a:ab:10:1a:5a:2b:25:
         73:c1:a0:f9:66:b9:56:cc:62:b7:45:d1:02:ff:8a:49:7d:68:
         cd:ec:2d:13:1d:d4:6d:e8:0b:ec:a2:b4:c7:5b:58:88:46:ae:
         57:fd:80:fc:45:78:63:73:ff:89:4c:87:7d:22:a6:22:00:79:
         e0:9e:5b:30:57:4d:85:4d:c0:5b:2f:2d:52:d4:21:cf:0e:57:
         16:87:2a:92
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUPss3sD1DBBpDNFfcJMhZh4OGAZwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzU3MWIxMWNhOTFlZDA1ZTYwYzNjM2I0ODFmM2I1Y2Yx
NWNkNjYwNjYyZTg3N2IzNDcwHhcNMjQwNjI3MTgyNTIyWhcNMjUwNjI2MTgzMDIy
WjAzMTEwLwYDVQQDEyhEMDFDQjkwNTg2RUUzNzQzM0IxNTkwOEU0REY2NjZBRDVE
OUM0MDBEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaewVFLZXJ8t
I4bRpeLBwhGOlGY5il0CRUPLw8DU6JhGp4xMxtH9HV2pxhzQP/bTr4TfPSZXaev8
QiJavht4MY9njVr45V9ciSVhAnS9IMIMztjPC3UFGvPfp935tjZB0Iw/okwT/3Gn
bzFBpsvlVzSA1YgjB4U+px7oPwB4cD1fqkdCUagr1LBkZoQh4WH2xoMy2zdAUEue
o9+vgH/JI+dLHQGKK53GRtvv4wYTJ6dPctepfGViZzmjQIkEZU9DFP8drH1HV/of
tkQuPeUnLPwxLfGswtKHi7PolqA9aofN0/w5PAKpbxvOBUs0LQ0rw1WWpOgXama1
IFlMm7w6gwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFNAcuQWG7jdDOxWQjk32Zq1d
nEANMB8GA1UdIwQYMBaAFCHvrK8aFi1qEsDxCii+ldDzBpO3MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTA0YTk3ZTkwMTkwNWFmMWRlYjkxNDM1LzAv
MjFFRkFDQUYxQTE2MkQ2QTEyQzBGMTBBMjhCRTk1RDBGMzA2OTNCNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1L2I3NTkyNDg0LTE5NjAtNGQzNi1iN2ViLTQ1ZmFlYmVhOTg3ZC9jNTcx
YjExY2E5MWVkMDVlNjBjM2MzYjQ4MWYzYjVjZjE1Y2Q2NjA2NjJlODc3YjM0Ny5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkwNGE5N2U5MDE5MDVh
ZjFkZWI5MTQzNS8wLzMxMzQzMjJlMzEzNDM3MmUzNTJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM2MzMzMzMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACOkwUwDQYJKoZIhvcNAQELBQAD
ggEBAHUVnErv8TdGSMlvzbVIq4S/LcrP7ePmISEsXaCPSrwoe8FYFC7GEj2KW69h
juN+aeSq9p6ItrVzLAHowCrDSg1DsX66V3Y52SLmoOqFCjDVfgj7lG0nvBe9qdjP
W//1curTJE9HyvhvlcdHoaJegct9G/oALHii5jahcmD86gykddfBADMdsMGaTi0x
4cdjGDVQYKhyweU2j9lTKLAcuaxIKPwZhvlb4CpMz5yWiqsQGlorJXPBoPlmuVbM
YrdF0QL/ikl9aM3sLRMd1G3oC+yitMdbWIhGrlf9gPxFeGNz/4lMh30ipiIAeeCe
WzBXTYVNwFsvLVLUIc8OVxaHKpI=
-----END CERTIFICATE-----
Generated at Wed Aug 28 21:06:02 2024 by rpki-client on console-fra.rpki-client.org