Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3235342e302f32332d3233203d3e20323732373836.roa
File:                     3135372e3235342e3235342e302f32332d3233203d3e20323732373836.roa (raw, json)
Hash identifier:          8QtthnJs84bicQr+UaIA67VaSYmt8kN5+NAyTAwgN74=
Subject key identifier:   76:99:C0:54:4D:75:C0:7E:CC:8C:53:13:B0:89:61:E9:B0:91:4B:1F
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       7ADCBCA95CB483170EA4F3B895A2198369A72BEE
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3235342e302f32332d3233203d3e20323732373836.roa
Signing time:             Wed 03 May 2023 19:22:19 +0000
ROA not before:           Wed 03 May 2023 19:17:19 +0000
ROA not after:            Wed 01 May 2024 19:22:19 +0000
asID:                     272786
IP address blocks:        157.254.254.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:dc:bc:a9:5c:b4:83:17:0e:a4:f3:b8:95:a2:19:83:69:a7:2b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May  3 19:17:19 2023 GMT
            Not After : May  1 19:22:19 2024 GMT
        Subject: CN=7699C0544D75C07ECC8C5313B08961E9B0914B1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:63:c8:69:53:49:18:0b:a0:0b:3c:30:1e:01:
                    22:b6:88:e3:f0:da:71:54:4d:d4:21:2c:f9:0a:18:
                    99:f9:29:ca:c4:32:98:29:d1:66:a8:7c:d3:40:cc:
                    c1:22:e3:62:a9:40:1c:21:c7:3b:fc:e4:d0:c7:d7:
                    d9:18:44:30:80:df:d6:bd:76:94:d1:6f:47:e4:53:
                    e3:b7:8a:73:85:67:6b:99:8f:af:c7:57:9f:67:c3:
                    7d:ef:95:af:24:94:23:10:6a:17:39:e8:9a:93:4d:
                    f6:86:86:dc:f5:8a:de:90:07:aa:18:a7:81:e9:41:
                    be:7c:a4:1e:e6:dd:b1:31:f5:bc:f5:8e:13:ab:5e:
                    57:0e:34:ac:3b:57:c6:7f:79:fc:0b:46:16:61:3c:
                    91:d2:bd:3e:0d:18:4e:d5:cf:2d:06:d4:b3:fa:6c:
                    31:30:45:d2:95:c3:5d:6d:a7:8b:40:54:d4:b4:4b:
                    3d:09:5f:9d:63:b8:54:15:14:95:3b:24:ba:f9:0a:
                    0b:99:a8:83:89:8e:cc:c7:54:8b:96:49:ae:47:2b:
                    ee:0f:9c:6f:2c:e9:c1:04:e7:6d:6e:2b:28:b6:76:
                    27:45:63:2e:e3:fd:61:0d:47:35:4b:3b:df:27:18:
                    1e:a5:d8:28:6e:c4:c2:2d:8e:c8:08:ef:15:a1:ec:
                    65:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:99:C0:54:4D:75:C0:7E:CC:8C:53:13:B0:89:61:E9:B0:91:4B:1F
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3235342e302f32332d3233203d3e20323732373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:42:60:d3:1c:79:1c:c9:c4:84:c9:ba:0d:23:1b:49:02:b0:
         c0:5a:21:16:47:c4:5c:e8:69:90:58:e9:b0:a7:45:3f:07:c9:
         88:65:a5:f2:49:87:a5:15:90:8b:f8:dc:ed:12:a4:00:96:a1:
         79:6c:27:f4:24:14:79:ba:94:a2:16:74:7a:7c:f8:85:95:4e:
         bf:82:12:40:c6:58:c9:5c:5d:ee:b9:e8:3c:61:14:45:47:fe:
         2a:ea:fb:4e:4c:e7:8a:3d:0f:2e:7e:c2:37:d3:91:0b:65:c8:
         28:be:75:f2:3b:69:f0:5b:04:9b:b0:64:0b:b7:f4:ad:94:ef:
         67:7b:0e:03:1c:16:8d:47:50:9a:4c:92:8c:6e:e2:89:5a:c0:
         d2:2f:6b:74:24:73:79:99:22:59:5a:74:ac:d1:ad:2d:69:47:
         fa:93:60:74:f7:79:24:64:09:ce:d1:be:8c:5b:64:a2:f2:7a:
         91:78:20:b4:dc:cf:d9:8a:46:1f:39:cf:d8:38:b0:3c:5d:40:
         e9:6c:79:b9:4d:cc:a1:ba:4e:ae:7a:7d:f0:c9:b1:e3:ad:17:
         4a:87:0b:df:f1:8e:cf:78:75:8e:2a:fa:6a:02:1d:53:43:0c:
         b1:92:c0:c1:8d:67:2c:2c:28:f6:52:ea:b7:49:68:5a:07:af:
         93:fb:17:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 08:23:25 2023 by rpki-client on console-fra.rpki-client.org