Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231382e302f32342d3234203d3e203631333137.roa
File:                     3135372e3235342e3231382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          NmE67zhfIzrvljUEAsmYhP+KnKILl1fJRz2LPMPyOZY=
Subject key identifier:   FE:19:22:5E:1D:21:F9:BA:13:3E:15:1A:C5:A7:69:66:66:E7:B7:9E
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0E6EB3FD3EC75D28F39B9F39685136C983D08949
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231382e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 06 Feb 2023 07:36:09 +0000
ROA not before:           Mon 06 Feb 2023 07:31:09 +0000
ROA not after:            Mon 05 Feb 2024 07:36:09 +0000
asID:                     61317
IP address blocks:        157.254.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6e:b3:fd:3e:c7:5d:28:f3:9b:9f:39:68:51:36:c9:83:d0:89:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Feb  6 07:31:09 2023 GMT
            Not After : Feb  5 07:36:09 2024 GMT
        Subject: CN=FE19225E1D21F9BA133E151AC5A7696666E7B79E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:58:08:c7:c3:a3:7e:09:39:3a:46:45:ea:63:
                    40:07:e7:33:bd:9d:a2:4a:05:6b:40:5f:cc:23:c4:
                    07:e8:f8:82:a4:bc:5e:f6:1d:9a:30:d4:c0:8a:13:
                    d3:d2:57:7a:49:b7:57:76:71:2b:ef:d5:35:86:ba:
                    60:21:80:6a:6e:05:b3:dd:43:21:c8:d9:fd:31:fa:
                    1e:04:5d:61:32:70:a7:54:1e:af:62:f6:04:98:ad:
                    22:b8:3c:57:b2:ef:65:ce:e8:9e:66:b8:1f:b4:29:
                    4f:3f:9a:55:3a:08:3a:f3:1e:83:e3:5c:22:4d:b4:
                    c2:d1:75:17:03:9f:27:22:62:1f:d1:ce:ee:f2:76:
                    4e:12:26:d8:f9:a9:ee:27:15:fb:f4:f4:40:bd:91:
                    18:9f:67:9f:b8:e7:7a:d1:5e:fa:d0:e9:78:c0:a1:
                    da:b3:a4:1e:ac:04:42:93:81:85:ee:1d:13:fb:38:
                    78:01:e8:bd:99:48:ab:58:33:eb:a7:5c:ac:e6:be:
                    5c:b3:e4:bb:b6:90:8e:55:86:7a:4e:f4:e0:be:13:
                    65:c3:47:cf:bd:08:5a:98:93:58:62:fa:ec:70:cb:
                    3b:87:94:21:b2:82:61:08:5b:e4:2c:6d:02:51:12:
                    90:cc:37:2a:1f:12:6a:e6:f5:8d:22:4e:68:7c:68:
                    42:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:19:22:5E:1D:21:F9:BA:13:3E:15:1A:C5:A7:69:66:66:E7:B7:9E
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:3b:7d:72:82:5f:7a:95:7a:27:12:8c:14:cc:84:0a:6e:e4:
         b7:9f:7c:d9:34:e1:72:a5:85:af:1d:25:f2:c6:fe:5d:36:33:
         99:59:ad:fb:d4:72:6b:b3:10:e9:a9:f4:12:cd:a2:b7:6f:bc:
         a6:64:14:80:8b:53:88:f3:c3:fa:ff:7c:58:9c:19:8f:c9:14:
         d4:28:5e:91:54:66:de:06:3d:64:32:82:d9:b9:ff:f5:a0:94:
         e5:83:3a:a8:64:46:d8:4b:a3:e3:75:9a:2e:23:03:c3:db:87:
         fc:c8:d0:4a:d4:4b:1e:b7:f2:ce:75:ea:2e:5a:b6:bb:aa:fa:
         c5:c0:2b:e4:49:cf:ea:6a:3d:7c:c9:ab:0c:7f:24:bc:9e:fc:
         68:15:52:f0:e7:59:24:5b:42:bb:36:96:c0:da:11:e7:62:69:
         5e:f0:bf:6b:a0:a2:b3:47:8d:0a:4b:bc:bf:ee:11:e8:e2:6d:
         a9:e9:da:64:01:3e:17:3a:90:94:e1:84:84:e5:a2:5f:76:27:
         eb:9c:43:04:c1:81:c8:65:04:63:17:38:4f:04:68:18:9b:80:
         fd:e4:f1:c5:31:ac:4a:11:9e:25:f2:70:71:63:9d:5a:7f:65:
         d5:a7:1a:82:bf:1d:62:2a:d5:e4:a4:56:b4:cf:a9:36:ed:5b:
         84:1e:94:64
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUDm6z/T7HXSjzm585aFE2yYPQiUkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwMjA2MDczMTA5WhcNMjQwMjA1MDczNjA5
WjAzMTEwLwYDVQQDEyhGRTE5MjI1RTFEMjFGOUJBMTMzRTE1MUFDNUE3Njk2NjY2
RTdCNzlFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+VgIx8Ojfgk5
OkZF6mNAB+czvZ2iSgVrQF/MI8QH6PiCpLxe9h2aMNTAihPT0ld6SbdXdnEr79U1
hrpgIYBqbgWz3UMhyNn9MfoeBF1hMnCnVB6vYvYEmK0iuDxXsu9lzuieZrgftClP
P5pVOgg68x6D41wiTbTC0XUXA58nImIf0c7u8nZOEibY+anuJxX79PRAvZEYn2ef
uOd60V760Ol4wKHas6QerARCk4GF7h0T+zh4Aei9mUirWDPrp1ys5r5cs+S7tpCO
VYZ6TvTgvhNlw0fPvQhamJNYYvrscMs7h5QhsoJhCFvkLG0CURKQzDcqHxJq5vWN
Ik5ofGhC4wIDAQABo4ICtDCCArAwHQYDVR0OBBYEFP4ZIl4dIfm6Ez4VGsWnaWZm
57eeMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMjMxMzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf7aMA0GCSqGSIb3DQEB
CwUAA4IBAQA4O31ygl96lXonEowUzIQKbuS3n3zZNOFypYWvHSXyxv5dNjOZWa37
1HJrsxDpqfQSzaK3b7ymZBSAi1OI88P6/3xYnBmPyRTUKF6RVGbeBj1kMoLZuf/1
oJTlgzqoZEbYS6PjdZouIwPD24f8yNBK1Eset/LOdeouWra7qvrFwCvkSc/qaj18
yasMfyS8nvxoFVLw51kkW0K7NpbA2hHnYmle8L9roKKzR40KS7y/7hHo4m2p6dpk
AT4XOpCU4YSE5aJfdifrnEMEwYHIZQRjFzhPBGgYm4D95PHFMaxKEZ4l8nBxY51a
f2XVpxqCvx1iKtXkpFa0z6k27VuEHpRk
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:23 2023 by rpki-client on console-fra.rpki-client.org