Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32352e302f32342d3234203d3e2037303138.roa
File:                     32332e3134322e32352e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          MpZP2hDwvLGiJgzssgHxpffcOVxWTPZ3usoW/FXPWNo=
Subject key identifier:   B4:1A:12:6E:A2:DA:90:46:14:24:6C:0F:FE:41:FA:44:28:91:C1:65
Certificate issuer:       /CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Certificate serial:       72AE9C9DB5DA07DA1B57E26DE5B79A4DE4D5C288
Authority key identifier: F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32352e302f32342d3234203d3e2037303138.roa
Signing time:             Tue 05 Dec 2023 02:44:20 +0000
ROA not before:           Tue 05 Dec 2023 02:39:20 +0000
ROA not after:            Tue 03 Dec 2024 02:44:20 +0000
asID:                     7018
IP address blocks:        23.142.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 06 Jul 2024 21:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ae:9c:9d:b5:da:07:da:1b:57:e2:6d:e5:b7:9a:4d:e4:d5:c2:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
        Validity
            Not Before: Dec  5 02:39:20 2023 GMT
            Not After : Dec  3 02:44:20 2024 GMT
        Subject: CN=B41A126EA2DA904614246C0FFE41FA442891C165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ab:df:2e:ba:f1:d4:04:6c:6c:d8:fc:33:d3:
                    29:0a:f4:79:b9:d0:aa:85:ab:7d:21:a1:c1:52:8d:
                    3b:d9:e1:ac:a2:5b:8f:8d:f7:cc:3f:a9:17:81:48:
                    af:e5:12:3a:78:4a:ce:34:e1:ed:b6:3b:7d:88:02:
                    f6:8c:21:c2:55:5e:15:a1:d7:0a:a6:6a:2c:43:80:
                    56:70:77:b4:00:72:70:10:5f:fa:14:58:ba:39:55:
                    5d:60:2b:a1:74:e1:d8:5c:dc:93:73:83:10:26:af:
                    d2:aa:7c:9f:b3:2c:b0:2c:c3:da:a2:b5:b5:36:3b:
                    71:c4:08:fa:87:12:cf:85:1e:03:1e:62:75:c9:8d:
                    eb:16:64:fc:6a:a9:f2:89:fe:3a:71:8d:5e:37:d9:
                    6a:ac:ad:a0:85:42:e0:5e:0c:2a:4a:b2:83:39:a4:
                    19:e8:16:4b:f2:3f:54:cd:c8:ec:ed:53:37:64:32:
                    02:44:dd:42:9b:2c:ea:59:03:fc:be:de:5d:a2:a3:
                    90:b6:d2:cb:3d:f4:c0:a0:3f:76:03:29:05:93:09:
                    a8:2e:44:ef:3b:9b:b6:b7:b0:1c:ee:3d:b9:d9:fb:
                    90:34:92:e1:7b:74:fc:63:30:79:0b:87:6e:61:09:
                    8a:61:d7:83:50:22:5b:5a:4b:15:f1:a1:04:9e:ca:
                    d8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1A:12:6E:A2:DA:90:46:14:24:6C:0F:FE:41:FA:44:28:91:C1:65
            X509v3 Authority Key Identifier:
                keyid:F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32352e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:36:75:e4:83:0c:e2:51:59:bb:95:56:ec:f4:58:73:95:79:
         cf:a3:02:26:92:59:44:10:fe:37:49:97:02:44:5a:d4:b2:be:
         f6:62:80:c2:67:eb:b9:28:94:3c:28:15:ea:74:44:f2:76:99:
         d3:3c:12:d1:a3:54:1a:bf:63:48:fa:54:67:46:1b:2e:65:27:
         9f:62:3c:34:0f:d4:ff:14:f6:37:26:0d:4b:93:c2:f7:c1:61:
         08:f6:65:3f:cd:a1:d1:cc:49:b2:0a:7e:70:9c:e2:03:3e:d1:
         db:47:f7:c7:88:84:96:99:5b:d4:ba:40:96:45:74:e8:10:78:
         77:33:04:d1:ef:2a:88:14:de:48:eb:e8:6d:bb:57:b8:85:52:
         40:e5:5b:99:8c:0c:a9:35:9a:92:f0:29:6c:c5:6e:31:c2:3f:
         c7:11:57:0e:7f:bd:f7:c5:2b:dc:6d:1c:8c:c5:3c:76:cd:c9:
         d8:bf:79:6c:d0:4c:83:6b:30:e3:5c:e9:03:32:cf:a3:34:01:
         10:fe:6a:b4:2c:ff:3d:6b:8e:a0:35:f1:18:3b:00:3f:d6:ee:
         12:ba:4c:dd:11:6d:92:0a:6d:6c:85:44:55:1a:b4:99:6c:86:
         36:ad:57:eb:67:32:54:09:37:91:1e:54:b1:86:b7:32:c7:17:
         9a:07:b3:7d
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUcq6cnbXaB9obV+Jt5beaTeTVwogwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjkxNmViY2E1ODZhODIyYTU0MjZjOGJhYzhlYTJlNWUy
NWU1ZGVmNmMzMjEwZjI4YzUwHhcNMjMxMjA1MDIzOTIwWhcNMjQxMjAzMDI0NDIw
WjAzMTEwLwYDVQQDEyhCNDFBMTI2RUEyREE5MDQ2MTQyNDZDMEZGRTQxRkE0NDI4
OTFDMTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsavfLrrx1ARs
bNj8M9MpCvR5udCqhat9IaHBUo072eGsoluPjffMP6kXgUiv5RI6eErONOHttjt9
iAL2jCHCVV4VodcKpmosQ4BWcHe0AHJwEF/6FFi6OVVdYCuhdOHYXNyTc4MQJq/S
qnyfsyywLMPaorW1NjtxxAj6hxLPhR4DHmJ1yY3rFmT8aqnyif46cY1eN9lqrK2g
hULgXgwqSrKDOaQZ6BZL8j9Uzcjs7VM3ZDICRN1CmyzqWQP8vt5doqOQttLLPfTA
oD92AykFkwmoLkTvO5u2t7Ac7j252fuQNJLhe3T8YzB5C4duYQmKYdeDUCJbWksV
8aEEnsrYqwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFLQaEm6i2pBGFCRsD/5B+kQo
kcFlMB8GA1UdIwQYMBaAFPfKdpX8eb4vW6y0tF1apWB5ypM2MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzAv
RjdDQTc2OTVGQzc5QkUyRjVCQUNCNEI0NUQ1QUE1NjA3OUNBOTMzNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzMwOThmYzE0LTI5YzktNDkxNi1iMDNhLWFlNGEyYWYxMDFjZC82OTE2
ZWJjYTU4NmE4MjJhNTQyNmM4YmFjOGVhMmU1ZTI1ZTVkZWY2YzMyMTBmMjhjNS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzAvMzIzMzJlMzEzNDMyMmUzMjM1MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzczMDMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAXjhkwDQYJKoZIhvcNAQELBQADggEB
AG42deSDDOJRWbuVVuz0WHOVec+jAiaSWUQQ/jdJlwJEWtSyvvZigMJn67kolDwo
Fep0RPJ2mdM8EtGjVBq/Y0j6VGdGGy5lJ59iPDQP1P8U9jcmDUuTwvfBYQj2ZT/N
odHMSbIKfnCc4gM+0dtH98eIhJaZW9S6QJZFdOgQeHczBNHvKogU3kjr6G27V7iF
UkDlW5mMDKk1mpLwKWzFbjHCP8cRVw5/vffFK9xtHIzFPHbNydi/eWzQTINrMONc
6QMyz6M0ARD+arQs/z1rjqA18Rg7AD/W7hK6TN0RbZIKbWyFRFUatJlshjatV+tn
MlQJN5EeVLGGtzLHF5oHs30=
-----END CERTIFICATE-----
Generated at Sat Jul 6 23:02:41 2024 by rpki-client on console-ams.rpki-client.org