Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ebb8ca7-ffac-3cfa-8999-511a35ebada3.roa
File:                     1ebb8ca7-ffac-3cfa-8999-511a35ebada3.roa (raw, json)
Hash identifier:          +Fb7UW6I1JuZjeLd/eUaeqFLCSIX2pDV5zj3UgfbyT0=
Subject key identifier:   89:38:B0:B0:53:0E:B9:C7:D0:74:8D:A6:9F:6B:53:58:B0:B3:4E:D9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A39D8
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ebb8ca7-ffac-3cfa-8999-511a35ebada3.roa
Signing time:             Fri 30 Nov 2018 01:09:53 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.88.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 25 Oct 2024 00:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:39:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=c46e5413-301e-4a06-a5b6-4b2867c8a5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9a:91:ff:cd:a2:90:9e:85:a2:db:ee:74:e7:
                    35:12:15:d2:ce:a8:c1:20:4b:0a:65:87:cf:56:c1:
                    ae:4b:84:7e:75:46:61:18:a6:ac:24:ca:af:c2:26:
                    7b:06:86:af:44:24:93:05:d1:4c:ee:30:84:e6:0f:
                    ea:52:fa:dd:ed:c7:27:8a:40:f4:62:44:ec:aa:3e:
                    ba:f0:1d:95:9d:5c:f9:72:2f:9a:c1:53:c3:ba:1f:
                    24:d9:85:f3:52:70:38:20:6f:88:02:96:0e:ff:6e:
                    96:6c:ce:25:94:14:3c:6b:43:a4:92:5e:64:4f:e0:
                    76:4c:24:57:9a:82:5b:24:11:ee:b9:9c:1a:bd:28:
                    c5:a0:bd:c8:e0:36:c4:f0:ec:7c:9c:b8:b2:26:f5:
                    1e:1c:fe:eb:6b:d0:d0:47:c1:49:9c:8b:16:7e:a3:
                    cc:64:ba:65:2d:f6:4f:f5:96:c6:52:06:cf:3a:9e:
                    a0:fa:3a:38:9d:b2:db:d0:e7:7e:99:11:33:13:0f:
                    20:08:8a:18:e0:77:f5:21:79:f4:ac:99:aa:22:a3:
                    79:2b:25:57:ce:15:7a:a7:85:02:56:d3:31:3a:5d:
                    ca:f1:2c:76:d4:6c:a9:f6:aa:b6:fe:41:a0:aa:fc:
                    5c:20:0d:49:1e:69:8d:5c:8a:5f:1d:4f:ab:6d:31:
                    8b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:38:B0:B0:53:0E:B9:C7:D0:74:8D:A6:9F:6B:53:58:B0:B3:4E:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ebb8ca7-ffac-3cfa-8999-511a35ebada3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:46:80:eb:96:65:a4:26:38:b1:0a:ac:85:0d:3f:eb:31:6d:
         03:a3:f7:8b:ca:ff:f9:b0:ce:36:c2:af:71:96:38:f4:16:ac:
         a0:be:35:43:45:71:27:8b:ed:87:2e:50:fb:23:1b:3e:92:56:
         94:b9:43:8e:9e:32:42:67:31:b1:3d:81:66:bd:8e:23:b9:68:
         99:6d:dc:4c:7d:5f:46:dc:26:82:5c:e3:35:c0:96:a7:d8:d6:
         e3:b0:04:c6:1c:fe:25:81:b4:87:07:61:85:ea:38:75:20:33:
         3a:25:8c:76:3c:57:8f:ef:d8:96:4c:b2:a7:d7:61:f2:12:c8:
         5c:f5:f4:86:e9:48:b0:08:4e:94:2d:63:ad:96:9e:42:70:1c:
         f9:f0:54:5f:bc:af:4a:a0:00:8f:28:84:71:4a:28:01:73:b8:
         02:98:cc:01:fa:80:a8:a5:57:1e:0e:5c:91:3d:83:fb:6d:c3:
         79:7b:1a:dd:9f:e2:79:e0:2d:f3:f4:c0:03:ce:40:54:99:84:
         71:02:56:7c:bb:c9:0d:57:9f:ba:51:16:ca:fe:b1:bd:40:06:
         7e:65:61:ef:23:8b:5c:88:0a:cd:ea:fa:87:fc:1f:34:0c:fc:
         62:d2:82:d8:c3:d5:28:5d:fa:b4:c2:10:cd:92:81:8f:c6:5a:
         de:ea:68:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 03:08:45 2024 by rpki-client on console-fra.rpki-client.org