Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231372e302f32342d3234203d3e20383334.roa
File:                     3135372e3235342e3231372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          GG7eSZ9/7hpYMzHEAevGOQCD+TKJcDiB2/OHLanpX84=
Subject key identifier:   80:D8:03:FD:65:39:39:00:31:57:33:65:07:28:6D:0E:74:93:52:B4
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       36C7CBCBDE6B88BA3FBDD605A21332DAAA5C868D
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231372e302f32342d3234203d3e20383334.roa
Signing time:             Wed 26 Jul 2023 20:30:04 +0000
ROA not before:           Wed 26 Jul 2023 20:25:04 +0000
ROA not after:            Wed 24 Jul 2024 20:30:04 +0000
asID:                     834
IP address blocks:        157.254.217.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c7:cb:cb:de:6b:88:ba:3f:bd:d6:05:a2:13:32:da:aa:5c:86:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul 26 20:25:04 2023 GMT
            Not After : Jul 24 20:30:04 2024 GMT
        Subject: CN=80D803FD653939003157336507286D0E749352B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:a3:4c:9c:78:20:cc:e1:0c:c8:dd:fc:fa:
                    fb:f6:4f:75:d9:76:66:4e:de:32:ff:34:ca:8c:be:
                    81:5d:d4:c0:53:33:16:e1:2a:9b:22:a2:de:9c:31:
                    be:3c:94:86:bd:ac:14:e6:5d:c3:03:24:3b:d1:42:
                    99:34:b5:ba:7c:05:b0:97:81:14:db:3e:a3:92:0a:
                    1c:7b:08:08:05:bc:b3:96:80:fa:13:9f:a2:2e:0f:
                    12:08:24:3b:44:4f:50:e1:94:93:e9:cd:a0:61:34:
                    72:1f:49:52:12:97:25:5b:09:b3:22:30:1f:fe:1f:
                    4d:3d:23:a2:67:d2:55:17:c6:3f:49:9d:5c:5f:d0:
                    c4:56:07:71:fb:92:25:e8:e3:cf:4c:3d:95:dc:40:
                    86:52:51:20:90:c4:66:8a:35:c6:b3:49:73:c4:0e:
                    12:8a:99:fb:2c:f7:1e:ee:c6:95:f8:23:58:c5:fc:
                    24:ef:f8:ba:23:db:a2:2e:a8:3a:85:84:19:e6:00:
                    bd:b5:1b:aa:37:bc:a1:3f:64:53:99:bf:70:a4:63:
                    70:16:57:67:85:4d:c0:cb:97:07:8b:79:ef:17:7c:
                    6e:27:18:f5:58:f6:06:7d:fb:3f:46:59:b0:36:5c:
                    9b:dd:f9:ee:e3:e9:36:b1:7b:a9:94:a9:7e:00:77:
                    f0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D8:03:FD:65:39:39:00:31:57:33:65:07:28:6D:0E:74:93:52:B4
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:b4:f8:13:e0:1c:e2:ad:95:37:63:f0:f8:f3:85:e5:05:41:
         63:ef:d9:e8:e2:70:1f:07:ef:5a:3e:c9:95:62:3a:ab:b3:b5:
         7c:e0:21:fa:6c:80:a3:a9:17:eb:03:63:d8:f4:8e:10:3c:fd:
         75:8f:5d:e9:2d:55:7c:27:e7:a8:b0:fc:b6:9f:63:b6:1f:f3:
         3b:9d:ea:e0:e8:58:a0:0f:6c:4c:72:47:2a:cf:79:bd:b6:b9:
         58:56:8a:a5:05:df:4d:bd:ff:64:a5:af:6c:c8:63:02:48:80:
         d4:a3:c3:eb:37:93:82:56:cc:9e:3c:fe:5f:83:38:58:df:64:
         80:b5:2e:8a:a8:0b:9b:09:08:e3:f7:64:6d:3c:a6:db:20:92:
         d3:97:19:94:ac:5f:13:54:33:cb:bf:e2:cc:d0:11:f0:e3:d7:
         b1:a8:cf:64:8e:42:a8:e2:8b:6c:24:db:b4:f3:4a:1e:78:01:
         03:e8:e6:1e:32:65:ba:9f:1b:7c:3a:da:99:10:63:63:c9:92:
         91:60:7a:3a:38:cc:16:74:25:0d:8a:8c:54:f3:1d:4b:7c:5f:
         c7:f9:c4:ce:a7:42:41:3f:77:75:60:4b:6d:19:c1:34:14:00:
         1b:49:25:56:84:43:25:7c:40:9d:1e:f3:1b:dc:42:9d:21:f9:
         83:77:03:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 5 16:04:54 2023 by rpki-client on console-fra.rpki-client.org