Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af819387-38f1-34f0-a4a7-39948055ac69.roa
File:                     af819387-38f1-34f0-a4a7-39948055ac69.roa (raw, json)
Hash identifier:          jOEFR/H0MMS/HaO6f1t2dVZG45sXsS4eg4gxpkinwu4=
Subject key identifier:   42:57:97:9D:C4:68:3F:6E:68:F3:B7:1E:28:59:50:73:A7:4A:A6:16
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285841CB50D80433F6AFA18A03D6C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af819387-38f1-34f0-a4a7-39948055ac69.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Fri 08 Aug 2025 04:00:00 +0000
asID:                     18530
IP address blocks:        142.252.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 17:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:cb:50:d8:04:33:f6:af:a1:8a:03:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Aug  8 04:00:00 2025 GMT
        Subject: CN=948b7d7a-a7fb-4211-a8a8-655e2bb6d6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f2:a7:35:f8:00:1c:eb:c2:5e:f1:2c:b4:07:
                    c5:a1:9a:34:72:f3:42:38:99:53:d7:9b:0f:83:c4:
                    34:8c:4f:27:f7:dd:75:ca:25:9f:38:82:36:e6:22:
                    a0:35:7d:d2:76:3d:b1:35:63:31:2d:47:6e:29:f2:
                    d6:f2:50:ac:ec:5e:3c:18:0c:55:75:13:8f:43:79:
                    1a:3f:d2:a9:cb:5d:73:c8:61:9f:a3:58:29:73:ad:
                    27:66:ef:70:50:28:77:ac:1a:7e:e2:95:da:56:2b:
                    c1:ea:5a:57:2b:4a:2e:b0:97:64:26:dd:7a:7a:33:
                    6d:c8:6a:76:11:da:ee:b1:24:2a:04:e0:98:14:9b:
                    76:f8:9e:15:08:41:9a:23:67:52:a6:bc:bc:6b:7e:
                    31:19:58:83:36:75:b9:5c:fa:05:98:9e:02:a9:6c:
                    ca:b5:06:de:dc:5d:86:a5:9a:d5:9f:9f:61:1c:e6:
                    ff:ee:b1:8c:08:8c:25:46:fe:cb:b8:2d:48:ee:99:
                    25:b9:d9:83:b3:22:fe:86:65:67:75:88:4e:ff:a8:
                    c4:97:a4:31:94:fa:4b:1f:ca:7a:5f:63:b2:23:dc:
                    99:53:0f:03:15:35:0a:df:49:57:5f:9b:f9:c2:ef:
                    7e:97:36:f8:63:41:01:3e:7b:d2:92:7d:86:bc:b7:
                    97:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:57:97:9D:C4:68:3F:6E:68:F3:B7:1E:28:59:50:73:A7:4A:A6:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af819387-38f1-34f0-a4a7-39948055ac69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:8a:3a:2c:5a:ed:ef:ee:0e:00:ae:74:d1:5b:b7:17:ac:2f:
         00:2c:b9:bf:cf:5f:57:71:99:43:64:c3:4d:f5:11:b7:d7:7f:
         59:9f:f7:dc:13:b2:5f:f9:ec:f9:7e:dd:d9:61:a7:1d:0f:55:
         f4:9a:22:62:de:32:31:22:ae:8a:ac:02:c5:0b:6e:6e:35:42:
         67:32:b6:c9:28:04:2c:53:b2:7f:74:d0:75:d5:9d:0a:8b:f1:
         e8:36:64:2c:e1:76:10:3a:00:40:78:e4:42:fe:77:bd:27:0d:
         12:9b:39:e8:27:53:d8:bf:5a:25:8d:5e:97:0d:60:5d:24:1f:
         8b:9b:6a:70:b4:27:63:90:25:34:78:5e:02:81:5b:f5:be:ec:
         19:93:66:09:5e:1e:48:b6:3c:c1:b3:e0:47:cb:53:49:bc:c9:
         f6:d4:64:95:88:f8:00:7e:ed:02:11:ea:ce:3f:6b:39:83:2c:
         5f:4c:10:df:33:fd:86:49:7b:45:4c:fe:4a:41:c7:a3:fb:02:
         a6:82:13:98:1e:d1:5d:ba:bc:ac:e9:6c:d0:65:87:52:a8:67:
         2e:3f:59:40:b8:74:f6:bf:6c:c9:46:b3:30:0f:51:d0:f6:49:
         2b:4e:1d:09:29:46:f9:d0:dc:f3:e9:d3:65:d7:c8:13:2f:95:
         37:2e:f3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 21:05:16 2024 by rpki-client on console-fra.rpki-client.org