Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211061.roa
File:                     AS211061.roa (raw, json)
Hash identifier:          eMdg8WggkZPZYTFyKFbBYvNoAZ2HbtHVTHOgH5+5844=
Subject key identifier:   06:5A:CC:05:39:87:5C:4B:08:2F:E7:B4:21:38:F2:FE:A5:5D:52:B7
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1C03D6FFA710275B8146BAD74EB9ED5402EECF4E
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211061.roa
Signing time:             Tue 10 Jan 2023 00:00:09 +0000
ROA not before:           Mon 09 Jan 2023 23:55:09 +0000
ROA not after:            Tue 09 Jan 2024 00:00:09 +0000
asID:                     211061
IP address blocks:        74.50.31.0/24 maxlen: 24
                          89.35.94.0/24 maxlen: 24
                          209.200.226.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:03:d6:ff:a7:10:27:5b:81:46:ba:d7:4e:b9:ed:54:02:ee:cf:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jan  9 23:55:09 2023 GMT
            Not After : Jan  9 00:00:09 2024 GMT
        Subject: CN=065ACC0539875C4B082FE7B42138F2FEA55D52B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:78:ee:fd:50:2a:21:c7:d7:62:55:1b:33:ee:
                    94:20:47:7e:af:cc:bd:7c:09:c2:56:d8:92:24:6b:
                    61:57:89:fe:3a:df:51:6e:2f:58:a0:0e:56:ca:35:
                    17:26:8c:d5:a5:9c:a7:c0:ba:90:b2:6b:bd:5b:17:
                    b9:15:f8:1d:2a:df:e8:16:48:d8:8f:8e:31:2c:1b:
                    59:7c:d0:c6:04:d3:e4:22:29:9d:87:84:ad:89:71:
                    22:5e:47:05:52:74:ac:ce:4c:4c:dc:dc:fa:e6:44:
                    06:fb:1c:ca:56:8d:09:0c:d8:a0:25:09:5a:31:6d:
                    ed:6d:d4:cc:b3:0d:e9:4d:97:11:cc:8d:b0:e9:07:
                    63:90:e7:db:3d:4d:c9:33:10:0e:26:65:84:7c:1a:
                    bf:5d:16:8c:61:3c:af:34:76:cd:71:b8:1c:b3:f0:
                    62:fb:1d:b4:94:98:31:a4:eb:6a:07:6b:63:d8:2e:
                    23:1d:d8:8c:be:be:87:52:68:54:dc:8b:20:34:29:
                    cf:2e:5f:b3:0d:34:d6:6d:76:39:d3:9e:cb:7c:13:
                    1f:85:33:b0:93:21:1f:6a:e0:15:9e:c0:9f:31:51:
                    36:02:37:8e:31:b8:7f:af:12:47:97:7e:78:07:0e:
                    32:58:25:67:47:76:bb:c6:5a:13:fc:68:7e:e5:b4:
                    37:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5A:CC:05:39:87:5C:4B:08:2F:E7:B4:21:38:F2:FE:A5:5D:52:B7
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211061.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.31.0/24
                  89.35.94.0/24
                  209.200.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:32:7e:a2:94:6d:f0:d9:1e:a8:dd:67:91:1a:ff:9d:41:15:
         91:78:f0:04:90:0f:bc:57:e8:b5:0c:d0:b9:d2:ca:66:13:54:
         51:a8:9e:83:e1:3d:eb:e4:db:5c:85:42:03:94:3a:57:4f:6c:
         4b:87:b7:9c:22:f1:a0:1f:08:06:8e:21:2a:11:7d:24:ff:bf:
         24:cf:9d:04:15:99:67:3f:15:9f:e3:cf:2d:e5:25:d6:c9:e4:
         f7:f0:18:a0:99:fd:97:9e:a6:a9:b8:d1:3d:c8:bf:a7:41:84:
         9a:f8:1a:af:20:a2:29:c9:39:4c:d8:1b:62:e9:51:0d:18:f0:
         94:b6:8b:fa:0d:ff:8d:69:5c:c8:47:b4:ca:09:49:6b:92:05:
         30:cf:8f:37:80:b5:25:29:b8:08:c8:d7:a8:02:5e:d2:78:bf:
         2e:bd:1f:6c:03:8f:7d:c1:69:e5:e2:3e:72:71:7c:c2:98:db:
         b4:ac:0b:c4:22:77:99:ea:40:c5:0b:39:3b:bd:69:8c:b4:2e:
         02:59:b7:1a:1c:c4:81:6d:a1:dd:61:7f:ac:eb:a8:de:76:1e:
         b5:db:0c:e2:5b:f8:64:07:61:f9:ec:07:ba:e3:37:ed:04:40:
         5e:18:a0:68:26:5b:e8:a9:29:0c:2b:b7:49:51:90:d8:e4:78:
         81:91:ba:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:26 2023 by rpki-client on console-ams.rpki-client.org