Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS6461.roa
File:                     AS6461.roa (raw, json)
Hash identifier:          IOB6401cGcuXvKmZjzJWtnlAS8bPo0ROpEOfw6xCH6I=
Subject key identifier:   46:BE:25:53:A1:A7:C6:05:29:E9:FE:6A:CA:39:BF:3C:A4:00:0D:82
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2A3FB2F2EAF1634E13F11E6047567EAADF10FADF
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS6461.roa
Signing time:             Fri 09 Dec 2022 11:41:26 +0000
ROA not before:           Fri 09 Dec 2022 11:36:26 +0000
ROA not after:            Fri 08 Dec 2023 11:41:26 +0000
asID:                     6461
IP address blocks:        162.213.0.0/22 maxlen: 24
                          208.76.40.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:3f:b2:f2:ea:f1:63:4e:13:f1:1e:60:47:56:7e:aa:df:10:fa:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  9 11:36:26 2022 GMT
            Not After : Dec  8 11:41:26 2023 GMT
        Subject: CN=46BE2553A1A7C60529E9FE6ACA39BF3CA4000D82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:de:c2:7e:8c:c6:a6:6f:b3:62:dc:1a:4e:
                    76:89:84:a7:79:49:25:42:63:8a:a5:2c:4d:5f:ca:
                    2d:65:ae:c0:a8:17:61:d0:5b:49:36:5b:ff:af:c1:
                    b7:e0:1a:fe:c2:47:6f:f6:50:61:63:3f:78:e9:a4:
                    99:f3:49:35:64:30:6b:ce:51:d1:99:58:8b:1e:48:
                    e5:46:b1:74:3b:4f:b7:57:65:00:62:f4:90:71:f4:
                    ea:a5:ad:f3:01:c1:8b:12:ca:d2:3c:16:0c:77:36:
                    e6:f0:e2:25:b4:a9:86:fa:d7:f9:05:75:76:f3:56:
                    ee:15:2a:6e:fc:4e:9a:6b:b0:50:8a:2c:13:27:9f:
                    ac:35:c2:a3:bb:83:a2:df:0a:17:09:cc:7f:14:e7:
                    e1:e4:a7:31:e8:9c:dd:8b:61:44:35:81:91:b2:6b:
                    f7:69:50:bf:7d:f2:fe:0f:5e:70:67:59:95:0c:b5:
                    88:cb:e3:53:3b:fd:96:81:c4:d7:b2:c6:e8:50:57:
                    c7:a0:2d:a1:17:bb:05:8f:96:d8:06:f1:a6:4d:f7:
                    56:23:3a:d0:1e:fc:0e:2b:3d:e7:b5:8f:3e:62:31:
                    7f:b1:5c:23:89:83:61:1d:8f:33:11:f6:01:19:87:
                    e5:c1:58:d6:cf:30:45:5d:2b:43:f5:a0:08:47:d8:
                    65:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BE:25:53:A1:A7:C6:05:29:E9:FE:6A:CA:39:BF:3C:A4:00:0D:82
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS6461.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.0.0/22
                  208.76.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:09:60:b3:60:22:87:cb:8c:0e:57:1f:5a:1b:5a:f2:d9:a2:
         ca:94:1b:47:d3:b8:06:53:31:cb:85:12:2a:34:22:3a:02:39:
         da:ea:a7:12:05:39:08:13:2d:54:b4:ca:c7:72:15:df:81:b1:
         40:e0:c1:40:97:6d:b0:3f:30:c1:c9:e2:b3:d1:64:36:f0:f2:
         74:0c:f9:28:87:19:33:0e:62:8b:11:97:ec:7c:47:ca:19:ec:
         54:f5:ad:c6:c2:47:74:bd:a3:bb:b2:df:ae:f8:25:6d:e5:b3:
         b7:50:88:61:45:03:f6:dd:c5:b8:d9:14:52:44:8d:66:f9:0a:
         62:11:8c:b3:0f:85:7a:60:62:90:8e:8e:f9:65:a2:41:85:46:
         d2:91:03:50:c2:e6:52:83:57:ae:7c:16:26:e2:a3:59:17:94:
         d3:94:dc:53:ec:be:36:30:96:55:f5:74:aa:5f:f0:36:59:9a:
         e6:1a:26:4e:b3:e4:36:c3:7b:e2:ff:c3:3e:2a:81:9a:3d:6e:
         c6:ea:b8:86:c2:e4:8f:65:2e:a4:82:9e:eb:07:fe:af:e5:01:
         74:b2:68:11:76:97:40:10:d0:85:9d:49:90:43:e8:5a:90:9c:
         71:a2:61:7a:97:ef:c1:47:aa:d5:ab:e0:b6:2d:e2:b1:70:ad:
         4f:a2:e1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:23 2023 by rpki-client on console-fra.rpki-client.org