Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c3e4001e-e419-3ca5-b15a-6a1d23ad89c2.roa
File:                     c3e4001e-e419-3ca5-b15a-6a1d23ad89c2.roa (raw, json)
Hash identifier:          1YGe3Wg6LIhNQX2RhfnxYZRHvzJ04yH4qjnJ+e1HchA=
Subject key identifier:   67:39:44:10:03:E5:EB:61:D7:7E:45:D0:6C:A7:AB:BA:9D:FE:66:F4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858471E0E22041DC0DBC6107DAA00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c3e4001e-e419-3ca5-b15a-6a1d23ad89c2.roa
Signing time:             Thu 05 Sep 2024 21:42:41 +0000
ROA not before:           Thu 05 Sep 2024 21:42:41 +0000
ROA not after:            Wed 04 Dec 2024 22:42:41 +0000
asID:                     397373
IP address blocks:        45.38.41.0/24 maxlen: 24
                          104.165.201.0/24 maxlen: 24
                          104.165.226.0/24 maxlen: 24
                          104.252.5.0/24 maxlen: 24
                          104.252.110.0/24 maxlen: 24
                          104.252.155.0/24 maxlen: 24
                          104.252.175.0/24 maxlen: 24
                          104.253.38.0/24 maxlen: 24
                          104.253.51.0/24 maxlen: 24
                          104.253.60.0/24 maxlen: 24
                          104.253.62.0/24 maxlen: 24
                          104.253.97.0/24 maxlen: 24
                          104.253.104.0/24 maxlen: 24
                          104.253.138.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 17:24:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:0e:22:04:1d:c0:db:c6:10:7d:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  5 21:42:41 2024 GMT
            Not After : Dec  4 22:42:41 2024 GMT
        Subject: CN=a0574181-a2df-4bb1-b659-e379d0516ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fd:32:64:5e:2d:e8:28:80:dd:29:15:11:37:
                    eb:14:1c:eb:96:d9:59:9b:4e:49:0f:6d:39:6c:aa:
                    2a:14:fe:50:ec:7a:11:64:a0:46:35:b2:9b:37:40:
                    15:83:f9:52:5f:0b:ca:50:1a:b4:02:c0:80:f3:15:
                    a8:88:e6:ad:3c:95:73:31:b4:3b:03:ba:3e:44:21:
                    a7:b9:9a:99:44:16:2b:4a:e5:4d:e4:37:58:21:68:
                    0d:b1:95:ad:d9:4b:9e:75:7a:d5:15:cd:9e:25:da:
                    06:2e:14:b5:a2:2b:15:d8:46:31:ca:2d:c7:09:5e:
                    2d:a2:43:96:dc:25:9c:d4:6d:ea:19:b2:bf:7f:09:
                    13:68:38:e1:4f:bb:d1:0d:8a:71:74:0a:ca:cd:02:
                    31:69:fc:08:b3:06:8f:94:85:32:85:b2:6a:1c:fc:
                    be:ee:05:24:b8:d5:60:1e:83:4d:af:21:2a:bc:8f:
                    23:02:03:ec:66:a8:a7:e8:94:01:de:e0:ed:f6:34:
                    96:a2:6d:c1:c5:87:0a:c5:e8:eb:0f:d2:4e:c2:d2:
                    79:dc:0c:49:ee:77:e2:0f:b1:63:f1:e0:46:1d:95:
                    8a:4d:1c:81:ff:e2:a2:b2:a4:67:c5:16:db:1c:9e:
                    ad:0f:84:16:1f:97:5a:20:54:77:4b:e9:cc:cd:dd:
                    ad:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:39:44:10:03:E5:EB:61:D7:7E:45:D0:6C:A7:AB:BA:9D:FE:66:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c3e4001e-e419-3ca5-b15a-6a1d23ad89c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.41.0/24
                  104.165.201.0/24
                  104.165.226.0/24
                  104.252.5.0/24
                  104.252.110.0/24
                  104.252.155.0/24
                  104.252.175.0/24
                  104.253.38.0/24
                  104.253.51.0/24
                  104.253.60.0/24
                  104.253.62.0/24
                  104.253.97.0/24
                  104.253.104.0/24
                  104.253.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:16:9a:f2:60:23:a7:dc:ae:f4:59:3e:a8:3c:52:48:3b:56:
         de:23:27:59:17:51:73:f4:70:d6:32:7e:02:7c:77:23:b5:b1:
         3a:2a:7b:b5:a1:8a:c5:87:96:41:81:db:fd:d1:97:16:50:8e:
         99:f0:f2:ca:f9:94:39:4c:63:8e:33:35:57:92:0f:ea:a5:9d:
         a6:f7:50:09:db:72:67:5d:59:ef:c6:48:2a:fc:f3:13:78:4f:
         1b:bd:a8:28:65:f2:ce:8e:85:bc:00:40:dd:fe:66:cd:81:db:
         5d:ac:d0:7b:18:09:91:c3:c6:aa:0a:1e:7a:9b:6f:bf:e7:b4:
         2f:71:14:19:f6:b0:19:a9:35:7e:2b:b9:5f:09:a3:9e:6e:c2:
         9d:66:3f:f9:b1:6a:0d:35:f0:d4:03:df:7d:83:b0:f0:24:2b:
         87:f4:5a:a9:98:a3:7d:02:c4:6d:36:91:11:92:d6:4e:69:89:
         df:81:49:12:6e:af:d1:8e:10:d8:e4:ab:98:1d:ce:8b:93:59:
         5c:f8:ab:c9:8d:c6:28:f2:6e:b8:18:ee:74:8a:dc:28:e5:98:
         08:4e:c0:16:44:ac:69:6a:a4:43:2f:d9:ea:53:6b:3f:e2:39:
         b7:51:6a:12:08:c7:06:71:91:2f:7a:1a:9c:f3:55:a6:08:38:
         a5:22:3f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 18:33:31 2024 by rpki-client on console-fra.rpki-client.org