Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS272910.roa
File:                     AS272910.roa (raw, json)
Hash identifier:          hKo/3Az45hLXFlhq04ZcIe3xWuuLlu9R09Y62VSrZFQ=
Subject key identifier:   76:87:56:2E:B4:00:67:8D:BF:68:F5:15:8D:D3:2E:6A:02:88:78:A6
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       367AC4C378AF96DB81F85450F3595E5114626C19
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS272910.roa
Signing time:             Mon 19 Aug 2024 03:15:52 +0000
ROA not before:           Mon 19 Aug 2024 03:10:52 +0000
ROA not after:            Mon 18 Aug 2025 03:15:52 +0000
asID:                     272910
IP address blocks:        23.95.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 16 Oct 2024 18:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7a:c4:c3:78:af:96:db:81:f8:54:50:f3:59:5e:51:14:62:6c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug 19 03:10:52 2024 GMT
            Not After : Aug 18 03:15:52 2025 GMT
        Subject: CN=7687562EB400678DBF68F5158DD32E6A028878A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:83:0b:ce:b1:14:77:bf:3a:ae:98:28:54:cc:
                    c9:21:20:31:40:04:77:56:62:65:11:c3:18:d7:fa:
                    53:cb:95:05:f4:de:be:a4:b6:6c:38:ee:20:e6:fc:
                    b3:ec:72:3d:0b:c8:63:e3:1e:3a:cd:14:9b:89:f9:
                    1d:fe:d2:a5:c2:38:67:76:55:be:88:88:9a:bb:b7:
                    b3:ae:be:96:3b:01:d8:84:0a:1c:bf:83:43:37:16:
                    08:3e:54:21:a7:c9:26:17:9c:45:76:69:a1:85:49:
                    ad:ae:27:ca:2a:29:5a:1f:8b:54:f7:b0:15:30:36:
                    f0:e5:3c:5f:b8:14:56:f6:78:99:ac:d8:a8:40:fd:
                    2b:d0:51:1d:c9:5b:8a:fd:20:90:ac:f1:2d:ca:7f:
                    9b:21:61:0c:41:5f:3b:86:16:ad:15:1a:d6:09:8e:
                    9c:f3:5d:fd:85:b8:f4:af:72:01:18:98:ba:ec:ee:
                    54:2f:9e:25:fd:42:02:45:9d:5b:de:2b:98:85:58:
                    07:07:f1:fc:6d:f7:d2:2c:9e:81:f2:87:0b:92:9f:
                    dd:ec:29:90:20:68:01:b7:4f:b7:5b:e6:76:e5:06:
                    3f:19:4a:65:68:b6:18:d4:2f:ef:6e:2a:91:31:3e:
                    02:25:31:ad:af:54:d6:dd:7c:1f:86:aa:44:74:77:
                    3c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:87:56:2E:B4:00:67:8D:BF:68:F5:15:8D:D3:2E:6A:02:88:78:A6
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS272910.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:1b:5a:21:af:ae:37:51:c4:69:8f:54:5b:f8:4f:39:00:51:
         a9:3f:28:5e:3b:a5:d2:e5:e6:35:7a:1c:be:01:a1:57:15:1b:
         85:b0:63:b4:eb:1d:53:bc:f4:8d:1f:7b:42:92:0a:17:71:7a:
         e8:fb:79:d8:f9:f3:bc:d2:0f:ff:a7:85:95:1d:86:9f:a9:50:
         dc:bd:4a:8c:cd:33:aa:72:20:e1:b7:8a:df:da:8b:b0:8b:79:
         01:16:63:76:b5:58:0c:ac:7c:26:e7:d1:18:df:8f:39:26:4c:
         a4:bf:84:75:ca:ba:36:8a:92:60:fe:5e:85:ef:cf:41:ff:83:
         46:f3:da:90:88:ea:49:9a:60:d8:ba:b1:7e:d8:c6:12:8c:9d:
         39:7a:49:bb:8a:c5:b0:54:a1:9c:93:93:e6:f5:9f:84:8a:e6:
         0d:b8:14:5a:f1:b5:d3:de:1d:cc:ae:9d:d5:54:e5:8c:b9:31:
         12:18:56:c9:97:fa:c6:fd:8a:9d:86:1e:27:5c:e3:f5:2c:83:
         7a:f2:ed:b4:f4:8b:7a:0d:7a:a0:c4:ff:37:99:9f:ce:73:71:
         5b:ea:84:0e:d3:ca:d9:d8:af:10:96:5f:b2:a3:43:c8:16:73:
         89:b2:c2:6e:46:2d:6f:7e:09:56:a0:1b:dc:f9:ea:1e:ec:b6:
         69:20:92:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----