Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207429.roa
File:                     AS207429.roa (raw, json)
Hash identifier:          xg3wUXGgQsCzKVry1/FHIuNOyP+IoNlGKVeqIe3IC4w=
Subject key identifier:   97:DB:01:B4:62:15:3D:99:A7:20:89:67:13:FA:FF:E4:67:C8:D3:88
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       399F15D2B9772CC3921E7EFF26C3A6ED4AE668BF
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207429.roa
Signing time:             Tue 17 Jan 2023 02:00:09 +0000
ROA not before:           Tue 17 Jan 2023 01:55:09 +0000
ROA not after:            Tue 16 Jan 2024 02:00:09 +0000
asID:                     207429
IP address blocks:        64.50.172.0/24 maxlen: 24
                          64.50.176.0/24 maxlen: 24
                          64.50.179.0/24 maxlen: 24
                          64.50.180.0/24 maxlen: 24
                          64.50.190.0/24 maxlen: 24
                          67.210.103.0/24 maxlen: 24
                          67.210.104.0/24 maxlen: 24
                          67.210.108.0/24 maxlen: 24
                          67.210.111.0/24 maxlen: 24
                          67.210.112.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9f:15:d2:b9:77:2c:c3:92:1e:7e:ff:26:c3:a6:ed:4a:e6:68:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jan 17 01:55:09 2023 GMT
            Not After : Jan 16 02:00:09 2024 GMT
        Subject: CN=97DB01B462153D99A720896713FAFFE467C8D388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:eb:5f:b9:e4:00:83:7f:3d:a6:fc:14:c3:12:
                    87:f9:7b:2a:e1:bc:89:0d:3d:78:a2:9b:42:6b:a9:
                    92:df:f9:d4:a2:ad:a2:2b:e0:ac:d2:0a:39:45:42:
                    66:02:78:23:bb:3c:37:29:9c:1c:a2:71:b6:54:e2:
                    d0:c5:10:0f:88:f4:15:6b:f5:68:88:30:b6:a9:40:
                    0f:47:58:d1:58:da:bb:b3:4b:e8:95:91:42:70:de:
                    3e:7d:32:4d:39:31:70:b0:c4:1e:6c:5d:0d:67:19:
                    f1:73:f4:b0:22:92:c4:0f:fd:95:ff:62:e3:c6:05:
                    14:8d:eb:d5:7f:41:2a:90:36:f9:c8:4d:18:4a:32:
                    df:ef:a3:2e:5a:c8:0f:9f:0c:c0:b5:b0:21:19:c9:
                    1f:2f:b4:c0:c8:99:72:97:ac:f7:00:b0:a9:dc:dd:
                    cc:cb:c6:18:31:f4:11:07:c6:b6:a7:8d:3b:94:ff:
                    d9:e1:ed:82:62:0d:db:7a:cf:e1:03:35:e0:66:f8:
                    cc:9c:57:7f:fd:8a:78:f5:f3:55:c8:95:ea:ce:68:
                    fc:08:2f:8e:67:7b:01:72:bc:30:65:d4:7e:4e:07:
                    ae:7f:cc:89:dc:ee:60:40:db:b3:aa:42:df:cb:69:
                    51:4d:77:ac:91:7e:f2:31:bd:77:2d:c7:fa:c8:e8:
                    55:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DB:01:B4:62:15:3D:99:A7:20:89:67:13:FA:FF:E4:67:C8:D3:88
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207429.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.172.0/24
                  64.50.176.0/24
                  64.50.179.0-64.50.180.255
                  64.50.190.0/24
                  67.210.103.0-67.210.104.255
                  67.210.108.0/24
                  67.210.111.0-67.210.112.255

    Signature Algorithm: sha256WithRSAEncryption
         62:ab:4e:2f:65:43:89:37:c4:72:99:63:d2:8a:b2:3d:66:5f:
         fe:71:60:e4:6e:31:98:56:ec:8f:a2:1b:60:76:a9:d7:6e:2e:
         09:12:c1:bd:48:a0:04:2d:ff:d1:4b:59:86:4e:89:9e:d6:5d:
         81:2a:f0:65:26:b7:47:6f:5a:0f:29:da:1f:05:97:1e:f0:5f:
         12:cf:70:4b:1b:89:f7:7b:1c:db:94:27:45:c9:59:c8:24:c0:
         51:c1:b8:34:29:39:76:7e:8a:3a:ed:7a:2b:36:98:f5:11:df:
         d5:1b:90:63:36:c5:b5:36:3c:ad:1d:9c:5b:e9:86:4c:69:53:
         44:97:b4:39:97:7a:06:29:e4:5b:75:f4:71:4c:e6:bf:6c:86:
         46:6d:70:51:e0:2c:20:5b:14:44:df:0f:9a:f0:8a:1f:c4:a1:
         ef:f6:e5:49:a3:cd:79:28:e4:49:ff:7d:c4:c1:38:d7:1f:2d:
         6f:c1:5e:0a:29:41:d9:7e:de:3c:8f:c9:d9:12:e3:d0:71:8d:
         f1:fc:0d:79:66:51:c7:a1:b7:5c:ec:63:38:b3:10:0d:90:5c:
         1e:5c:34:16:ee:a7:9b:c5:2b:9a:53:96:ff:5f:3a:54:ed:43:
         15:16:06:52:f0:8b:1a:f6:b1:89:e5:4b:7f:c5:36:08:bd:d1:
         7e:69:e2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:25 2023 by rpki-client on console-ams.rpki-client.org