Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS138195.roa
File:                     AS138195.roa (raw, json)
Hash identifier:          +rq3YqQBe5cq6zMrA+lRfWR8OBgWcFZuHbZnW9i9clk=
Subject key identifier:   0B:BE:7A:E1:EB:5E:A1:21:14:4C:21:7C:4B:D3:7E:25:06:DB:0D:94
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       4127D5BED82879CC5C2A0EB8353A9675326E4C8A
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS138195.roa
Signing time:             Mon 04 Sep 2023 13:21:15 +0000
ROA not before:           Mon 04 Sep 2023 13:16:15 +0000
ROA not after:            Mon 02 Sep 2024 13:21:15 +0000
asID:                     138195
IP address blocks:        103.214.68.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:27:d5:be:d8:28:79:cc:5c:2a:0e:b8:35:3a:96:75:32:6e:4c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Sep  4 13:16:15 2023 GMT
            Not After : Sep  2 13:21:15 2024 GMT
        Subject: CN=0BBE7AE1EB5EA121144C217C4BD37E2506DB0D94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8e:2a:5c:65:42:50:97:a3:88:3c:88:60:61:
                    ec:21:ca:a6:5c:3f:cf:cd:2e:23:b6:51:b1:11:ec:
                    1f:f1:cf:2d:27:58:d1:2e:0d:1e:7a:ce:ef:5b:6e:
                    3f:14:49:55:3c:12:9c:28:11:e9:01:48:3f:2c:4d:
                    7b:2b:8b:54:38:6d:4d:38:57:b3:2a:1b:77:9a:89:
                    79:0d:a4:a3:15:e9:3b:01:f1:13:ed:cf:fe:39:39:
                    47:23:f5:3e:f6:b7:0d:a7:c1:c4:77:ca:09:e0:b1:
                    fd:ad:46:72:3c:78:8c:11:e4:d2:ce:ee:7b:8a:2d:
                    3b:57:0d:82:b4:dd:55:9e:dd:2f:cc:7a:6b:bd:37:
                    eb:73:66:28:1d:f8:4d:79:91:92:e6:7c:16:39:82:
                    25:88:a2:c0:48:22:17:64:62:71:17:a8:b2:6c:ca:
                    53:5f:d0:f6:23:a9:4f:ba:3d:52:4a:8b:d0:bd:d6:
                    b6:27:6f:68:23:2f:ec:04:d7:55:2f:ec:84:27:58:
                    1a:ea:d5:bc:6a:66:4b:09:cc:c3:59:4f:3b:18:da:
                    c2:4d:0d:3a:03:94:a1:80:7a:d3:02:49:6b:cb:a8:
                    36:ff:49:53:c0:45:17:15:58:1e:05:58:6a:e3:56:
                    9a:a5:47:87:5c:11:f1:50:1a:ce:8a:50:e9:24:b4:
                    36:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BE:7A:E1:EB:5E:A1:21:14:4C:21:7C:4B:D3:7E:25:06:DB:0D:94
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS138195.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:64:32:47:97:fd:33:30:2e:13:fb:b5:ce:a3:54:2a:21:87:
         ba:c1:1f:c2:e3:43:63:54:93:45:4d:ca:12:86:a8:ab:8e:33:
         16:98:91:04:1c:cc:f5:7a:27:4b:9b:60:09:00:e2:de:bd:98:
         bd:b7:4b:7e:fb:fb:9e:50:e9:45:6a:8b:fc:c5:f8:96:d1:38:
         19:15:d2:47:6b:91:c6:fa:b2:d9:c2:be:f8:0f:61:c0:98:70:
         da:3b:83:2b:4b:aa:14:c5:6f:e3:a3:c7:a1:18:de:a8:16:63:
         6e:b8:58:5b:18:08:5e:2b:b3:27:d1:de:79:b3:68:bb:ff:a9:
         91:54:3f:cd:b7:92:ac:59:78:95:83:26:08:10:96:c2:57:f3:
         dc:8e:5d:36:b6:ad:f6:47:b9:5b:b6:fb:81:08:8c:a6:b6:92:
         c5:14:78:58:e4:4d:fb:66:f2:93:7d:6c:68:05:cc:47:56:72:
         24:a3:02:ed:63:ee:be:ae:27:fe:cb:cf:cc:0f:77:7e:a8:bc:
         96:77:8d:fb:ee:7c:7e:a3:e0:64:65:28:82:34:a8:4a:7f:cc:
         db:d3:8a:2a:a8:d6:62:5f:66:ca:a0:2b:f3:8b:7a:9e:38:1d:
         7e:47:2f:43:db:3f:aa:1e:36:bc:09:a1:40:22:45:38:4e:e3:
         03:13:12:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 16:43:44 2023 by rpki-client on console-ams.rpki-client.org