Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8657da05-ef8f-3952-8e45-bbe1f5d675c1.roa
File:                     8657da05-ef8f-3952-8e45-bbe1f5d675c1.roa (raw, json)
Hash identifier:          CGnPCSSN5njGLCI1QvucUjmzcqlfQmbQ/WRScjyXul0=
Subject key identifier:   9D:CF:E7:7F:5F:4F:24:54:55:CC:22:30:7C:2A:E6:03:DD:F6:CA:17
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC166420F2D49
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8657da05-ef8f-3952-8e45-bbe1f5d675c1.roa
Signing time:             Fri 05 Oct 2018 02:29:42 +0000
ROA not before:           Thu 04 Oct 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     3949
IP address blocks:        204.2.192.64/26 maxlen: 26

Validation:               Failed, certificate revoked on Mon 12 Feb 2024 19:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:0f:2d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  4 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=2198c031-caeb-4c1a-b044-4731f0f3122b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2d:e1:be:c3:0d:c7:c0:3c:35:51:29:08:18:
                    60:9e:ee:08:09:f4:27:b6:8e:12:32:06:18:d6:9a:
                    b0:1f:4c:58:31:f9:17:cb:a6:2b:78:b3:95:ab:54:
                    b5:b4:9a:e3:46:6b:25:7f:70:86:88:94:ea:ff:31:
                    67:66:a0:f5:bb:c0:5d:d6:d8:61:5d:fb:84:df:25:
                    53:f7:a4:56:c4:4c:10:fa:7c:20:fa:41:70:c6:01:
                    26:8b:44:0c:15:0b:df:87:09:4d:3a:9e:56:10:7a:
                    4b:c2:c2:d5:2a:5e:a2:5a:81:fd:0b:c4:ba:13:7b:
                    53:94:2a:06:ad:1d:50:1c:15:47:40:6e:e4:d2:eb:
                    4b:ad:c8:e5:68:fc:0a:1c:48:f7:a0:61:fb:c8:cf:
                    0f:0c:aa:d4:0b:2f:25:63:88:ff:14:27:98:53:1e:
                    4a:a5:36:10:88:e4:f3:7f:c0:61:dc:9e:fd:46:3a:
                    33:09:94:13:a0:27:29:d9:9b:9a:76:b0:cc:18:da:
                    38:95:34:98:7e:33:21:ac:c0:b9:b4:d8:0b:15:20:
                    e6:e4:e6:a2:f3:7e:ca:b8:d6:93:cf:17:ee:5b:2e:
                    b7:32:30:8e:e8:cb:c9:eb:bb:e0:06:07:83:71:2c:
                    c6:46:63:9a:29:1e:4f:33:2a:65:58:0a:0b:e8:bc:
                    a6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CF:E7:7F:5F:4F:24:54:55:CC:22:30:7C:2A:E6:03:DD:F6:CA:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8657da05-ef8f-3952-8e45-bbe1f5d675c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.192.64/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:34:50:39:d5:7d:b5:85:51:53:28:5f:05:25:a9:4f:d2:4f:
         47:36:05:27:54:3a:8f:52:75:ba:54:0c:dd:96:bb:f6:81:6f:
         76:b3:b7:19:32:4f:57:2c:b0:4c:f4:b7:6e:d3:97:5a:04:1b:
         ab:75:dd:da:55:5c:02:16:24:a0:6b:f6:39:2b:16:b2:a1:67:
         b0:e3:f5:39:bd:86:79:21:14:ac:19:60:8b:1a:38:2c:a2:ad:
         41:7f:da:c7:5d:64:65:0b:e3:72:f6:65:9d:2d:3e:cd:60:c9:
         91:7b:f0:82:08:b5:4f:c9:6c:ea:1a:f1:69:dd:5c:38:19:34:
         56:d9:49:77:d8:f0:da:62:4f:e0:a0:16:9e:70:b6:97:32:03:
         53:fe:b9:7a:09:c2:3e:f8:8f:7e:0e:b8:95:79:f8:70:52:75:
         ee:ec:25:d0:21:7a:c1:d8:62:13:78:d5:9a:5d:00:6b:93:73:
         01:af:e9:0c:0a:5d:76:9f:e1:81:bf:af:e5:78:1b:2f:0a:01:
         53:39:6d:a1:f2:b6:64:af:bb:c2:78:26:22:56:68:28:28:e7:
         6a:0f:f1:50:97:2a:11:bc:b3:e2:c1:e1:a6:04:bd:d5:dd:4e:
         b8:b1:52:2c:88:0f:db:35:e2:a3:d8:dd:3a:13:5c:e5:8e:36:
         fe:c3:4c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 23:46:04 2024 by rpki-client on console-fra.rpki-client.org