Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/98116252-a872-3199-937d-f4e8b2615aa8.roa
File:                     98116252-a872-3199-937d-f4e8b2615aa8.roa (raw, json)
Hash identifier:          dlCd9uuPHxsUHhZzDCyvER3ljPNrLlo48gM9xc1KX/g=
Subject key identifier:   1E:F6:86:F5:C4:E2:56:0A:66:E4:59:EA:56:73:7B:21:F1:22:08:B7
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847827E8B8133CDF28EB410C580
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/98116252-a872-3199-937d-f4e8b2615aa8.roa
Signing time:             Fri 11 Oct 2024 21:10:00 +0000
ROA not before:           Fri 11 Oct 2024 21:10:00 +0000
ROA not after:            Thu 09 Jan 2025 22:10:00 +0000
asID:                     7385
IP address blocks:        166.88.176.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 18:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:7e:8b:81:33:cd:f2:8e:b4:10:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 11 21:10:00 2024 GMT
            Not After : Jan  9 22:10:00 2025 GMT
        Subject: CN=186ac08f-03ff-4648-a9f5-1c147dcc66e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:07:81:15:43:47:82:67:e8:ad:72:80:ca:4f:
                    f6:f7:61:8f:5d:fe:d7:4a:40:2c:67:38:54:ba:93:
                    31:a6:c6:80:47:89:87:66:bd:db:e9:d0:1e:c2:1d:
                    65:83:1e:e3:33:c2:09:d0:66:e0:0e:14:5b:89:d9:
                    0f:96:bb:78:20:53:aa:79:ef:05:c1:90:1c:1b:4a:
                    52:32:a4:a8:a6:a6:31:31:d9:9c:bd:f7:df:45:50:
                    ac:22:0b:d2:11:6c:ec:e3:a4:5c:1f:67:7e:58:3c:
                    7e:33:92:17:b3:1f:b4:c4:b2:7f:83:d2:7c:21:24:
                    f7:99:36:20:1e:6e:77:b2:68:f4:c1:76:05:0c:d1:
                    a4:e3:2d:19:fe:ae:80:62:55:d9:bf:02:23:f3:4e:
                    d1:d1:81:a4:8b:51:ea:7c:9f:87:51:68:34:96:49:
                    13:bb:67:7a:c0:c3:39:f2:47:42:2a:c7:e3:15:4f:
                    e1:bc:89:6a:1e:f6:db:0e:0a:db:a2:38:a7:70:22:
                    fb:ec:47:ed:3e:7b:53:c3:c7:25:d5:83:5f:13:f7:
                    b7:d5:c5:e1:a5:c7:96:3c:0f:92:10:5a:95:08:84:
                    fc:ea:90:6e:80:76:0f:5c:31:c1:c1:85:c9:ed:1e:
                    b1:33:b1:81:60:66:aa:c6:e8:f2:31:51:e9:77:07:
                    39:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F6:86:F5:C4:E2:56:0A:66:E4:59:EA:56:73:7B:21:F1:22:08:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/98116252-a872-3199-937d-f4e8b2615aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f8:2f:63:77:aa:31:47:6b:df:f5:14:cb:c8:48:83:0b:dd:
         40:41:85:b3:0f:fd:fe:0a:7f:34:67:9d:c4:bc:bd:ce:ab:04:
         0c:92:cd:d9:33:bd:b5:a7:77:a0:83:06:81:e2:99:71:53:f4:
         1a:af:70:9e:c8:e2:43:e5:b8:99:30:95:40:c5:7f:23:cd:7a:
         90:eb:e2:89:00:67:41:1e:33:49:d1:93:f9:27:ac:70:bd:90:
         36:d0:7e:3f:11:33:67:58:be:4f:b7:f9:68:db:a8:8a:0e:7b:
         c0:59:b1:0d:f4:33:bc:cf:f4:ef:f4:5b:d8:40:11:95:2c:d4:
         b2:e9:fb:4d:83:76:9a:de:df:6c:0d:02:8e:65:7e:5b:d2:9c:
         28:18:d8:91:c7:5b:66:f0:6d:bc:10:6e:6a:9e:45:41:a5:10:
         89:06:4a:6e:58:18:83:c2:16:b3:cd:fc:51:31:5f:c7:59:e0:
         a1:a3:7e:5e:2d:dd:04:cc:90:55:d6:9b:d0:1e:31:3c:c6:34:
         d1:ab:f5:7c:00:27:a1:07:d1:17:40:90:24:60:f4:0d:ff:37:
         08:1c:ea:27:31:56:9d:c4:f1:ea:54:01:f8:27:0d:a1:7e:39:
         c6:65:50:b0:3c:7b:9a:97:04:2d:9e:d0:e6:75:31:8b:63:28:
         e1:20:d6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 20:58:22 2024 by rpki-client on console-fra.rpki-client.org