Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135322e302f32342d3234203d3e203130373533.roa
File:                     3135372e3235342e3135322e302f32342d3234203d3e203130373533.roa (raw, json)
Hash identifier:          6TO6+gG9ygA7o8w3WPI4yWZdA6E1IMVwUneUDccKIgg=
Subject key identifier:   EF:5B:11:D0:B2:4E:BE:B6:63:71:AB:B4:C1:AD:19:2C:B7:46:5F:6A
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       584B44AD54EFFCD625FAEC86247D010C7B6CC0EB
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135322e302f32342d3234203d3e203130373533.roa
Signing time:             Mon 03 Apr 2023 10:38:24 +0000
ROA not before:           Mon 03 Apr 2023 10:33:24 +0000
ROA not after:            Mon 01 Apr 2024 10:38:24 +0000
asID:                     10753
IP address blocks:        157.254.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:4b:44:ad:54:ef:fc:d6:25:fa:ec:86:24:7d:01:0c:7b:6c:c0:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr  3 10:33:24 2023 GMT
            Not After : Apr  1 10:38:24 2024 GMT
        Subject: CN=EF5B11D0B24EBEB66371ABB4C1AD192CB7465F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b6:10:77:df:08:e1:0f:06:d1:9d:a6:20:71:
                    02:67:69:f6:00:a9:21:94:ad:bb:c8:ef:8c:f2:2d:
                    ff:47:37:16:a5:dc:a8:a5:6d:66:a4:a0:c3:ca:88:
                    a5:60:72:e2:bf:0d:9e:31:93:31:c2:71:4f:0c:c3:
                    68:79:12:89:fc:1f:ee:83:d7:23:03:d6:cd:da:38:
                    bd:13:80:8a:3d:b6:a0:7c:67:cc:38:04:24:c0:d9:
                    5d:f6:e3:72:72:da:43:ae:ca:23:3e:d2:45:7d:19:
                    ea:f3:a6:90:30:95:40:2d:e4:b0:45:99:8a:1e:48:
                    a1:31:db:1f:50:90:29:bc:6e:d6:e3:9e:e6:32:08:
                    10:33:a4:6d:20:fe:74:88:1d:3d:67:1c:8d:31:46:
                    e1:01:39:42:e9:84:78:1a:dd:63:cd:89:13:e4:2f:
                    96:ae:89:05:14:41:b5:41:71:a3:f1:8b:7c:b5:84:
                    94:9b:54:83:6f:6a:27:b6:e7:99:6c:c9:90:50:70:
                    bd:01:d6:62:0a:84:eb:fb:38:90:71:c2:87:3c:0f:
                    65:b4:ca:36:97:a3:66:18:69:c1:fb:88:aa:bf:e7:
                    94:d4:2e:d8:c5:37:bd:a0:a2:bd:32:69:13:76:86:
                    b6:7e:e7:e4:87:2d:97:c9:97:ff:c3:38:f0:65:09:
                    e8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5B:11:D0:B2:4E:BE:B6:63:71:AB:B4:C1:AD:19:2C:B7:46:5F:6A
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135322e302f32342d3234203d3e203130373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:60:77:9d:43:71:0c:b8:c7:e9:5d:f6:78:a2:71:05:e8:4d:
         de:24:0b:a0:6d:0b:63:44:d9:d2:f5:37:0e:ec:9c:47:aa:16:
         b9:88:82:b6:c6:09:c0:7b:af:21:96:a4:65:bb:38:7a:e6:0a:
         80:b3:52:50:2a:73:d8:3e:45:d8:84:55:3e:37:d7:64:ca:54:
         ca:8f:21:e0:e6:96:91:f1:6c:b2:b2:f1:6e:07:89:d0:bb:65:
         50:2f:df:47:38:07:52:d3:85:47:4e:dc:11:0a:a1:d5:b1:a8:
         13:fd:56:e7:70:f2:41:25:eb:5d:af:76:a8:db:95:f6:40:d4:
         f7:f5:28:71:6a:12:b9:2e:8a:27:4b:71:59:4f:d1:d5:42:b2:
         e9:19:0e:07:22:9c:c6:d1:c7:e8:eb:3b:0a:ad:d1:d1:fb:95:
         e3:63:ca:e9:ca:d6:2d:77:0e:2e:5d:01:ca:1d:95:e0:76:66:
         e4:10:49:9c:5b:6b:1b:b8:a5:24:6a:9f:af:8f:c1:55:ea:9f:
         d1:da:2f:0f:b5:45:de:fb:79:78:f5:bf:de:cd:29:eb:bf:58:
         07:a5:c9:1c:14:e1:63:cd:1c:75:76:c1:8c:7d:fe:18:b0:b4:
         29:72:bb:7f:1f:c0:1e:0b:43:5a:30:6f:1c:6a:ca:5a:ec:a4:
         f4:af:23:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 08:23:25 2023 by rpki-client on console-fra.rpki-client.org