Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/33e55831-183f-384a-a874-688ae816131d.roa
File:                     33e55831-183f-384a-a874-688ae816131d.roa (raw, json)
Hash identifier:          x5Z3Bsuof337JoTEFUlPK067mqvP0TVNM6szSjyDF0c=
Subject key identifier:   7C:8E:A5:B7:68:35:64:09:F2:DA:B1:BA:FF:6E:3F:5D:B1:F4:5B:6D
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584324E516F6BD725FBAF04B7D80
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/33e55831-183f-384a-a874-688ae816131d.roa
Signing time:             Thu 07 Sep 2023 13:22:53 +0000
ROA not before:           Thu 07 Sep 2023 13:22:53 +0000
ROA not after:            Wed 06 Dec 2023 14:22:53 +0000
asID:                     7181
IP address blocks:        2607:fc38:12::/48 maxlen: 48
                          2607:fc38:13::/48 maxlen: 48
                          2607:fc38:14::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:24:e5:16:f6:bd:72:5f:ba:f0:4b:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Sep  7 13:22:53 2023 GMT
            Not After : Dec  6 14:22:53 2023 GMT
        Subject: CN=7377767f-6e40-4a4a-9b0d-65527e3bb822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ae:af:7d:cb:10:dd:1c:d2:24:ca:63:52:85:
                    8a:49:a9:c7:73:91:e8:0a:7e:5e:1c:5b:8d:68:bf:
                    9f:48:d9:34:da:5b:73:7c:49:99:f3:37:f1:e4:91:
                    bf:27:ae:7d:b6:ab:6b:4f:d4:2c:a1:a1:00:b1:61:
                    f7:2a:ff:d5:ba:6c:2a:78:00:d5:6d:fe:ec:83:90:
                    00:b6:97:40:a9:c3:18:1a:59:2b:3b:3f:fa:eb:54:
                    e1:cc:45:8a:8c:9c:2f:0c:8a:a4:1d:33:24:37:d0:
                    83:d3:7c:4b:ed:fd:43:bc:82:61:5c:be:6f:e4:c6:
                    87:ce:f1:8d:a3:71:69:93:98:ea:52:88:0c:cf:02:
                    62:c4:ee:8a:55:4e:ee:93:5d:08:9c:73:18:a6:b2:
                    0b:9b:bb:7c:4c:48:6d:28:2b:14:42:a9:71:05:73:
                    c0:5c:8d:49:b3:e6:da:8c:4f:b6:e2:38:0b:87:71:
                    ec:16:96:db:a6:f0:17:a6:a9:66:cc:e8:90:67:47:
                    9d:31:42:7b:2d:b5:07:41:81:bf:c2:98:64:40:4b:
                    a0:17:2e:06:17:b5:c2:b5:9d:33:a0:e3:88:20:8c:
                    58:ec:20:9b:b5:f4:b5:8c:b4:a7:ab:28:4c:a2:5f:
                    3a:1b:63:69:7d:a9:5b:b0:f6:00:31:6c:d7:c8:1e:
                    96:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8E:A5:B7:68:35:64:09:F2:DA:B1:BA:FF:6E:3F:5D:B1:F4:5B:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/33e55831-183f-384a-a874-688ae816131d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fc38:12::-2607:fc38:14:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:8c:b2:81:a1:b3:f9:2a:f0:5d:d8:52:ac:4f:ea:6a:2c:de:
         ef:e8:6e:57:67:0e:16:0f:10:4c:35:18:9d:fb:05:b5:5c:7e:
         67:35:94:ad:d1:ef:60:f6:b3:fe:1f:72:06:7d:54:eb:48:79:
         94:97:12:b6:82:0c:4d:cb:ce:61:7c:83:d6:db:36:ed:f9:54:
         a8:4b:b2:23:ca:66:a2:70:93:a0:aa:17:9e:ac:9a:91:80:4a:
         7a:8c:2e:7f:43:07:88:9c:8e:ee:a7:f4:2c:b6:a4:f2:bd:12:
         b3:98:6e:c8:2a:be:d0:e3:60:c2:0d:42:62:31:d5:01:5f:20:
         d4:fa:a3:8e:cb:f9:0c:7a:b9:94:2f:69:d2:46:bd:03:b9:ef:
         fd:6a:b0:6d:93:8a:ed:d8:8c:5a:76:49:c8:50:eb:3f:a6:78:
         49:30:ce:1e:a7:e7:cb:b4:80:f2:6e:c5:57:c2:20:39:08:d8:
         31:99:c4:dc:a3:60:eb:48:82:7b:32:fc:6a:02:f4:b4:42:b0:
         c8:11:ac:7a:ee:a2:b4:9f:6e:57:e7:a7:7f:8f:3a:01:cd:56:
         56:02:12:56:a2:63:17:5f:d4:82:c0:7d:b5:a6:b7:6f:98:b0:
         04:53:87:1f:1b:e7:fe:09:85:76:71:a1:19:bb:9d:3c:f3:e5:
         bf:e2:79:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 29 14:32:44 2023 by rpki-client on console-fra.rpki-client.org