Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e897d308-07c1-335d-9580-328bd01520e1.roa
File:                     e897d308-07c1-335d-9580-328bd01520e1.roa (raw, json)
Hash identifier:          pFYCC61Q8jGOFH9T05uD7O+DcimB7CRRGNc7RW6HbpI=
Subject key identifier:   94:48:4F:BC:9F:59:4D:FA:93:02:E8:69:20:C3:1B:29:A1:53:48:EE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F6316BB9B5FDF37C9F1580
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e897d308-07c1-335d-9580-328bd01520e1.roa
Signing time:             Fri 12 Apr 2024 17:24:38 +0000
ROA not before:           Fri 12 Apr 2024 17:24:38 +0000
ROA not after:            Thu 11 Jul 2024 17:24:38 +0000
asID:                     3257
IP address blocks:        23.27.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 30 May 2024 21:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:31:6b:b9:b5:fd:f3:7c:9f:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:38 2024 GMT
            Not After : Jul 11 17:24:38 2024 GMT
        Subject: CN=a1ab04a6-3ff8-4e35-bd9f-2da912d24a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:85:d0:db:bd:6e:f5:13:ea:11:76:1a:ca:
                    46:f4:90:72:79:83:c2:0c:fd:9a:86:a5:0a:5d:85:
                    f9:0b:92:2a:9c:e7:d0:87:9c:64:a4:05:bb:15:da:
                    be:67:1b:66:6f:79:ba:0e:a6:b7:5b:f3:bb:4a:ab:
                    57:28:eb:eb:1d:17:e5:fc:89:d2:7e:6f:47:8d:d8:
                    d5:6d:9f:4a:64:6f:66:c5:94:01:20:e8:e9:44:ed:
                    ed:7c:a5:c8:28:7a:d7:be:a3:53:c5:7d:4a:97:3f:
                    7f:0c:0a:90:55:e7:eb:3f:b3:c4:15:e6:4c:9e:c2:
                    32:b2:7e:3f:b0:04:11:78:0a:8a:e5:07:71:53:99:
                    1b:d8:64:57:fe:44:f6:2b:66:1f:3c:d5:c2:8f:6b:
                    bc:36:b2:95:18:3b:da:82:e4:b8:ed:bf:f9:c9:07:
                    1b:47:c1:86:7d:78:c3:b1:1c:7d:8d:7e:75:39:11:
                    93:22:c4:ad:2b:08:32:f7:9c:5a:08:8e:9d:69:cc:
                    00:5e:0e:2b:b9:35:af:64:1d:ef:45:1b:e2:fd:89:
                    2b:f7:6e:f0:c3:8c:44:03:7c:10:eb:f1:fb:e0:b4:
                    24:0e:c7:18:28:eb:97:5f:47:84:f7:9e:2c:38:c7:
                    c0:7c:28:1d:8c:9b:53:f2:f1:1e:55:2e:11:3c:8d:
                    c9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:48:4F:BC:9F:59:4D:FA:93:02:E8:69:20:C3:1B:29:A1:53:48:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e897d308-07c1-335d-9580-328bd01520e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:74:ee:9a:11:70:de:4f:cc:de:55:f5:9c:69:a8:88:48:68:
         78:0e:c1:c7:6b:ad:4d:57:43:fe:66:8d:b2:f1:e8:2d:17:06:
         d1:00:b9:21:b4:b2:64:eb:e9:ff:5a:7b:32:f9:20:ce:46:63:
         b7:fb:d7:bd:24:50:fc:0c:78:f2:54:08:98:07:aa:0c:fd:51:
         21:6b:8f:8b:ca:a9:15:52:46:6b:69:58:3b:e9:03:fc:b9:02:
         57:86:3f:ef:fc:a5:aa:c6:6a:d0:ec:bb:a7:3c:94:a1:60:63:
         32:32:4e:76:fb:f0:30:f7:ca:9a:1d:0f:7a:4a:ac:81:d7:8a:
         4e:4b:6b:99:fb:e6:d9:0a:bf:d5:5d:c1:1b:bc:80:dd:92:2a:
         7a:68:07:aa:9d:4b:7a:de:ee:1f:db:a2:e1:e5:c6:c7:82:fb:
         b0:4a:1f:50:73:dd:fe:42:e9:22:0d:c3:6f:9b:25:78:12:4e:
         fc:98:f7:9f:e8:f3:79:ab:a8:d3:81:e9:16:73:04:36:71:73:
         55:a6:08:6f:99:cf:73:6f:3e:be:99:5a:f2:97:26:2f:a9:24:
         b4:69:4a:09:79:dd:b1:db:bc:d1:4e:5d:d3:c3:17:77:34:35:
         a2:b7:60:f8:28:20:33:e5:61:08:8a:86:8d:16:b7:46:56:76:
         a6:a6:44:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:06 2024 by rpki-client on console-ams.rpki-client.org