Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231382e302f32342d3234203d3e20323036353035.roa
File:                     3135372e3235342e3231382e302f32342d3234203d3e20323036353035.roa (raw, json)
Hash identifier:          NdvVYAjdk0WGaB8seqKDEXmSc6/EVp/FKJKvZAUiOPw=
Subject key identifier:   4C:D0:1C:F9:D4:8A:C7:57:00:1A:FC:6A:32:25:B4:7E:07:72:1D:C3
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       398E9DDA2B0A7B603322DAC8E8A62C5B7164C9F3
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231382e302f32342d3234203d3e20323036353035.roa
Signing time:             Sat 08 Jul 2023 08:50:31 +0000
ROA not before:           Sat 08 Jul 2023 08:45:31 +0000
ROA not after:            Sat 06 Jul 2024 08:50:31 +0000
asID:                     206505
IP address blocks:        157.254.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 31 Aug 2023 07:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:8e:9d:da:2b:0a:7b:60:33:22:da:c8:e8:a6:2c:5b:71:64:c9:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul  8 08:45:31 2023 GMT
            Not After : Jul  6 08:50:31 2024 GMT
        Subject: CN=4CD01CF9D48AC757001AFC6A3225B47E07721DC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e6:1c:3f:29:51:0e:fa:eb:02:53:80:c9:b6:
                    18:b4:1f:f1:80:30:84:e5:73:ab:46:0d:b2:8f:60:
                    77:bf:9b:cc:ed:54:23:ce:2d:60:5d:cd:f9:9b:0a:
                    e6:73:cf:84:4a:e8:97:4f:80:a5:9c:45:fa:5b:23:
                    9e:6a:00:b5:13:eb:ff:d5:46:39:f2:8e:af:71:de:
                    7b:ac:e8:d2:1e:ce:fb:0b:2a:3d:b1:74:b3:e7:b4:
                    13:0c:8f:f8:d3:0f:a9:d5:5d:4a:d6:c9:9a:c8:b1:
                    04:31:7c:cd:a0:38:44:aa:42:f2:af:aa:b9:ef:f2:
                    a1:a0:75:c0:36:3d:45:a2:76:4f:de:1f:24:c6:c7:
                    9d:ef:50:c5:78:fc:77:eb:2a:ba:d1:f4:b2:a4:db:
                    b0:13:ae:45:5e:1e:4e:de:e5:2e:a4:f2:8e:f0:c3:
                    34:49:80:57:e8:63:46:41:73:3c:83:33:df:6e:43:
                    d0:2d:20:a6:6c:dd:d7:23:76:7a:b1:b5:79:ab:c6:
                    ae:c1:01:6e:c4:6a:56:25:30:fb:23:df:04:3a:16:
                    07:ef:5e:46:e2:6d:32:13:2e:f9:08:c4:0a:45:9b:
                    b9:28:e7:56:12:02:ce:1d:4c:1e:28:5b:48:45:5f:
                    ab:90:68:02:7b:e7:97:1f:f6:ba:a4:41:13:4d:10:
                    e2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D0:1C:F9:D4:8A:C7:57:00:1A:FC:6A:32:25:B4:7E:07:72:1D:C3
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231382e302f32342d3234203d3e20323036353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:0e:04:a7:4a:86:c8:70:86:ad:45:05:97:92:2b:6e:9e:fe:
         56:5c:ec:85:94:2b:38:25:6a:fe:6d:78:0e:54:f1:26:71:e0:
         0c:26:00:c3:3f:16:0f:df:f8:a9:e0:98:8d:d3:a1:fd:af:e9:
         50:eb:91:9c:5c:c7:9a:8f:dd:7b:91:5c:a2:5c:6d:19:b1:15:
         76:d6:a2:22:25:c1:3a:bb:d7:07:8c:d7:ee:1d:0e:23:7d:06:
         86:44:08:83:3f:e7:fb:ba:6a:43:0a:31:f0:6f:4d:b8:f4:be:
         9c:ba:e8:0b:ee:64:8c:6e:61:2b:0a:a7:19:5c:3a:97:23:69:
         6f:8f:15:d1:39:9b:c1:70:ab:da:1a:00:bf:ab:28:73:7e:3d:
         d2:60:06:53:d3:17:c3:38:9d:e4:8e:18:77:7e:66:e5:db:4e:
         55:ed:88:f5:a1:b2:dc:d9:71:e0:6f:de:9e:b8:d4:33:70:f2:
         d0:80:aa:6b:0b:d6:cc:ec:d3:54:1e:56:d4:ea:2a:82:bf:83:
         4c:b5:48:14:d3:f6:9b:12:2f:03:02:f6:09:a8:49:12:a0:0a:
         0a:96:83:c1:af:4a:cc:42:5b:b5:96:5c:57:ec:24:0b:90:4d:
         ff:50:3e:db:13:69:cf:8b:6f:08:98:e6:22:c2:34:86:00:ac:
         62:fe:d7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org