Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/006d3764-753b-4c63-84b7-b9d62fe55973.roa
File:                     006d3764-753b-4c63-84b7-b9d62fe55973.roa (raw, json)
Hash identifier:          0iNGnm5X+BD6KaIbURN2dgeLZwi/5XUdEXaOFY2xGBw=
Subject key identifier:   B6:E5:EE:5D:88:04:19:5F:81:89:2C:14:DE:A8:3B:72:96:A5:84:4C
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       61957EDABE992DD4659AE0E7BABAC709821DD437
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/006d3764-753b-4c63-84b7-b9d62fe55973.roa
Signing time:             Tue 07 May 2024 00:00:00 +0000
ROA not before:           Tue 07 May 2024 00:00:00 +0000
ROA not after:            Tue 11 Jun 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 07 May 2024 08:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:95:7e:da:be:99:2d:d4:65:9a:e0:e7:ba:ba:c7:09:82:1d:d4:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: May  7 00:00:00 2024 GMT
            Not After : Jun 11 23:59:59 2024 GMT
        Subject: serialNumber=f9e8ad69658359f30169def69a9de6b474ad608ccef3758acd4bfc3c7750da9b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:1d:ba:ac:9f:83:eb:b6:b5:be:03:f5:6a:
                    6a:a5:b2:df:01:32:37:5c:94:52:08:fe:79:16:61:
                    d1:7d:b9:0c:68:2e:54:64:c8:af:66:cf:ac:3d:26:
                    3e:74:bd:eb:87:d9:8b:6c:d4:aa:c1:77:e7:93:d1:
                    24:6f:8c:b0:af:a9:65:88:35:93:56:31:bf:8b:24:
                    03:ea:ba:37:e9:d0:87:31:bd:fe:89:57:6e:c8:63:
                    51:ed:5f:18:d5:07:0f:e9:14:ab:68:0a:24:ca:b9:
                    b2:fa:d3:53:4a:ce:18:34:4d:2b:fe:77:0a:47:42:
                    c3:99:5c:d5:77:72:c9:7e:f7:7d:a2:ab:0c:05:08:
                    db:c0:80:5f:10:d2:fa:7d:b6:f9:90:09:7b:f0:46:
                    89:78:d7:ca:7f:13:b2:0f:94:14:9b:e5:28:6e:7b:
                    f4:cd:31:1b:54:da:a2:03:5f:7f:00:e4:67:94:f9:
                    db:5f:a0:b8:b5:86:38:44:6e:f9:68:d4:c4:2d:3a:
                    2a:be:9e:0c:9e:f9:42:ac:c6:81:f8:3a:05:21:f2:
                    48:54:dc:8e:10:ab:0e:18:82:7f:2a:be:14:a4:6a:
                    cd:a1:11:2f:02:c2:06:14:d2:db:27:67:fa:81:2f:
                    87:46:53:6f:47:55:0b:e7:9f:4b:44:ef:b6:aa:15:
                    30:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E5:EE:5D:88:04:19:5F:81:89:2C:14:DE:A8:3B:72:96:A5:84:4C
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/006d3764-753b-4c63-84b7-b9d62fe55973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:98:8b:29:26:b8:5b:9a:93:76:31:8d:9c:a5:1f:7e:91:40:
         0e:e8:da:ae:e8:dd:2b:37:c8:04:6d:dd:96:a8:af:5d:fc:d9:
         18:ab:18:ec:55:2f:78:58:63:a2:19:ea:f5:32:6a:c5:93:2f:
         b3:13:b9:7d:98:e5:e6:c2:cf:01:b5:47:87:61:31:50:80:3a:
         0f:5f:67:d3:a9:2e:f0:3e:0e:51:9b:1b:49:ec:bf:56:f7:ca:
         a6:67:53:61:ce:4e:aa:fe:78:b5:0e:bb:0e:42:1d:83:cf:6c:
         96:19:5d:77:e7:67:ce:13:e3:f1:7b:f7:54:1c:39:77:5f:4d:
         4c:ec:fa:b7:b7:9b:90:f7:1f:77:5b:9c:bb:73:45:8a:4b:71:
         5b:b8:a4:e6:5a:b8:9d:36:81:d5:3b:a0:45:e2:10:5e:52:53:
         fa:8f:34:76:ee:06:d1:e6:8b:a8:e8:6d:73:32:a4:5c:99:ff:
         9c:88:91:3c:99:ee:6b:4f:72:0b:44:c8:20:47:80:8b:13:f1:
         2b:95:1f:a2:99:62:ed:d3:f6:22:6d:57:72:50:f7:da:04:25:
         95:f9:87:2f:a1:c7:73:f9:41:de:68:76:a2:04:37:79:36:bf:
         79:a2:86:ba:d3:0a:95:07:55:e2:08:9e:91:d8:6a:a0:49:e9:
         d6:a9:c3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:45 2024 by rpki-client on console-ams.rpki-client.org