Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3134342e34382e38312e302f32342d3234203d3e20323133313232.roa
File:                     3134342e34382e38312e302f32342d3234203d3e20323133313232.roa (raw, json)
Hash identifier:          hNiNnSxTnRilgFeafqGwRRqHkH8qbnxdXCBlA1uzZmM=
Subject key identifier:   AF:B7:1B:E6:5D:8B:25:08:23:FF:9F:3C:77:16:C3:75:53:7D:84:65
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       379878C8A11380B250CC3FE87975EF0BD4D6600A
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3134342e34382e38312e302f32342d3234203d3e20323133313232.roa
Signing time:             Tue 03 Jan 2023 02:07:01 +0000
ROA not before:           Tue 03 Jan 2023 02:02:01 +0000
ROA not after:            Tue 02 Jan 2024 02:07:01 +0000
asID:                     213122
IP address blocks:        144.48.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:98:78:c8:a1:13:80:b2:50:cc:3f:e8:79:75:ef:0b:d4:d6:60:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Jan  3 02:02:01 2023 GMT
            Not After : Jan  2 02:07:01 2024 GMT
        Subject: CN=AFB71BE65D8B250823FF9F3C7716C375537D8465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:15:12:1a:6e:23:55:b4:70:4e:db:42:74:
                    ce:5a:e5:e0:5c:77:61:ab:1a:9f:ca:c1:ec:2c:24:
                    4d:42:dd:44:0f:1d:63:09:cb:dc:72:fa:e0:69:2a:
                    fe:c8:86:7b:b9:23:6d:52:87:2c:ba:8c:82:bd:fc:
                    de:3d:8d:2c:3f:39:87:f7:a5:26:b5:4d:00:47:38:
                    b1:b6:3e:e2:5c:5c:5f:e7:ce:5d:54:95:6b:a5:a1:
                    57:2e:1a:93:4c:14:33:d1:33:4b:6b:82:ce:4e:4b:
                    ea:58:bf:cb:fc:42:c6:b0:00:38:c9:4f:df:6b:eb:
                    9d:86:ae:79:80:d5:26:5e:b4:c0:67:f9:67:6d:9e:
                    f1:3d:7f:d1:20:8d:e0:d9:8a:89:60:d3:d8:5d:de:
                    42:4a:1c:c6:80:a0:5a:23:26:2f:ff:09:d1:89:9a:
                    bf:24:fa:84:e3:d5:fd:37:f1:5a:33:bb:5e:ba:f4:
                    79:67:b6:8e:9d:14:10:69:62:7a:eb:46:08:74:1f:
                    9c:b9:62:5c:6b:51:ee:90:31:38:ae:72:e2:d5:f5:
                    07:81:4d:28:95:f5:d8:74:03:4c:b0:2c:01:cc:b5:
                    44:16:4f:93:52:22:c9:48:c5:8b:30:bc:af:5f:79:
                    4a:e6:bf:da:e7:90:0f:67:61:2d:55:19:33:58:bf:
                    94:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B7:1B:E6:5D:8B:25:08:23:FF:9F:3C:77:16:C3:75:53:7D:84:65
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3134342e34382e38312e302f32342d3234203d3e20323133313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.48.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:73:12:c3:18:60:e8:40:2d:0b:05:c5:30:35:b4:31:b3:9f:
         9c:89:0a:fb:03:e8:f6:4e:94:4c:f6:ba:72:38:90:5f:bb:59:
         14:38:6a:64:04:b4:b3:00:67:6f:c0:53:af:93:1e:fa:db:57:
         a6:06:a0:82:ad:96:9b:c7:39:4c:24:64:8f:ca:08:b1:f1:4f:
         7f:6f:f7:0a:aa:1d:50:0b:ba:ba:ac:44:70:15:a3:63:1a:1b:
         7c:6e:10:e1:05:37:33:22:6b:3e:ba:5a:55:64:2b:14:b6:24:
         9b:2a:10:f0:6b:8a:1c:28:a1:d5:11:51:83:6e:a6:45:f0:59:
         84:4a:c4:67:81:0f:58:da:7c:c0:c1:ff:ac:8a:9e:3a:f4:4b:
         8b:f1:e9:7c:56:3d:7a:a9:f0:9d:04:d9:b9:44:f6:30:e4:a4:
         6f:1f:a8:1f:88:30:f7:7d:74:f1:ef:92:53:35:6f:2f:80:94:
         2f:c7:ee:08:e3:aa:63:ee:64:0f:69:fa:30:a4:9c:d3:37:14:
         a4:d3:f5:9d:33:3f:11:3b:4e:c9:bb:b1:82:a3:da:ad:aa:e9:
         8a:2d:2a:7c:28:3e:f4:af:54:5f:87:64:69:ae:8b:3f:9b:a7:
         dc:a2:eb:12:27:6b:3c:e5:11:26:50:77:e3:f7:88:de:36:c8:
         47:82:d5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:24 2023 by rpki-client on console-fra.rpki-client.org