Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/deaafeb7-f1f6-35aa-a4ac-2def61d027f5.roa
File:                     deaafeb7-f1f6-35aa-a4ac-2def61d027f5.roa (raw, json)
Hash identifier:          Mxqfgg+EvkJXntDgRLa+pcCQuA0mR7EeVr+1F+NAi9k=
Subject key identifier:   61:41:D5:C2:5C:46:69:14:EB:00:61:28:5A:65:93:73:8F:4E:47:84
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285843E2C082532F8C9D693A580F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/deaafeb7-f1f6-35aa-a4ac-2def61d027f5.roa
Signing time:             Tue 14 Nov 2023 13:32:46 +0000
ROA not before:           Tue 14 Nov 2023 13:32:46 +0000
ROA not after:            Mon 12 Feb 2024 13:32:46 +0000
asID:                     64267
IP address blocks:        23.230.39.0/24 maxlen: 24
                          23.230.42.0/24 maxlen: 24
                          23.230.70.0/24 maxlen: 24
                          23.230.111.0/24 maxlen: 24
                          23.230.144.0/24 maxlen: 24
                          23.230.145.0/24 maxlen: 24
                          23.230.167.0/24 maxlen: 24
                          23.230.217.0/24 maxlen: 24
                          23.230.252.0/24 maxlen: 24
                          45.38.58.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e2:c0:82:53:2f:8c:9d:69:3a:58:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 14 13:32:46 2023 GMT
            Not After : Feb 12 13:32:46 2024 GMT
        Subject: CN=95cd9ed7-9301-4302-8cbf-7b4ca2504702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:69:1a:c6:eb:5a:17:8d:1e:1f:67:ff:2b:bd:
                    ca:a9:34:9c:47:c5:1b:b5:61:ff:02:30:38:8a:0d:
                    0d:e1:03:c2:6b:6d:bf:63:55:b1:d8:4e:b2:5c:de:
                    08:75:40:da:77:9b:d6:cc:ab:4d:a0:af:eb:d9:b4:
                    a7:74:31:8b:d6:e8:73:81:3a:0d:fd:56:f3:63:95:
                    da:e5:79:b9:4e:4d:30:7e:b2:66:b6:92:6e:b8:53:
                    49:64:a9:b6:4b:58:a8:d6:e8:08:be:13:fc:49:21:
                    c1:e8:cb:59:e3:8c:77:cb:fe:58:66:ed:af:fc:17:
                    3c:4e:60:1d:57:1b:1c:c8:c0:60:9f:06:7d:45:b7:
                    11:58:44:65:61:a6:2b:30:fe:1a:72:7d:0b:7b:a6:
                    bd:fd:ac:d9:68:e7:5b:9b:04:e4:74:65:2b:0e:4a:
                    f3:93:6a:f8:96:13:3e:2b:9c:89:00:71:f5:e5:fe:
                    71:60:06:0a:32:c6:8a:9e:0b:d9:ed:35:a2:9c:e7:
                    de:c2:9e:dc:51:e6:3e:8b:43:db:57:bf:77:97:87:
                    25:38:9c:9c:cb:24:14:59:35:97:30:ae:d7:a4:bc:
                    60:92:02:d1:4a:f7:6e:a5:e7:e0:e4:0b:88:c0:c8:
                    74:02:6e:fd:75:1e:1d:1c:15:d6:7f:ae:6a:74:e6:
                    ac:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:41:D5:C2:5C:46:69:14:EB:00:61:28:5A:65:93:73:8F:4E:47:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/deaafeb7-f1f6-35aa-a4ac-2def61d027f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.39.0/24
                  23.230.42.0/24
                  23.230.70.0/24
                  23.230.111.0/24
                  23.230.144.0/23
                  23.230.167.0/24
                  23.230.217.0/24
                  23.230.252.0/24
                  45.38.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:62:5f:d5:b2:dd:33:8e:2a:0f:1a:a6:cc:cd:2b:ff:51:a4:
         a1:88:6d:46:79:38:49:f3:be:65:dd:89:4e:fe:2a:40:e1:8f:
         ca:a5:ef:0a:4d:c8:0e:34:3c:08:b1:2a:ca:e4:89:27:b0:ea:
         e6:e7:cf:47:b8:af:85:b1:af:6c:ac:f3:27:6b:aa:8e:05:09:
         1e:83:78:92:3a:93:30:4d:c0:c9:8a:d9:66:38:bd:a1:2d:85:
         e1:07:98:ff:e2:90:c8:3a:1b:7c:67:b1:7e:d8:2e:6f:87:b6:
         80:0f:04:f0:c7:9a:50:ac:46:bb:64:3c:5f:ec:7b:cf:06:e2:
         36:b2:13:03:f8:4f:aa:a4:76:0b:64:1a:15:40:2a:6c:44:46:
         0b:8d:f2:93:f5:96:79:91:31:67:95:7c:f9:e0:1e:bb:54:54:
         d6:56:5a:56:7e:e8:7e:f7:b5:d0:95:4c:1e:df:fa:63:6f:83:
         86:76:5c:e0:13:22:a3:c8:2b:59:62:ab:8b:41:cf:40:8b:d7:
         26:93:e2:12:81:90:24:b0:e5:d3:e9:69:16:3e:9d:e4:15:83:
         3a:66:ce:7e:1f:ac:1c:0e:c3:53:bb:a7:49:36:a5:d3:6e:dc:
         7a:6a:ca:c3:02:5c:4b:d8:78:a9:64:62:0f:09:d9:37:f5:6f:
         f9:75:9e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 06:12:13 2023 by rpki-client on console-ams.rpki-client.org