Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fce10116-ddff-38bf-8a9c-56f264057668.roa
File:                     fce10116-ddff-38bf-8a9c-56f264057668.roa (raw, json)
Hash identifier:          JC7aWZhX5qAweoBl/Ehzt3FpGfrlPR4iOAafmE9woWI=
Subject key identifier:   D5:70:6D:0E:4F:0C:D6:07:92:E7:A2:0B:CB:74:22:A6:22:48:D2:0E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328583D2F4E68DE731FCCF7396CAA00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fce10116-ddff-38bf-8a9c-56f264057668.roa
Signing time:             Wed 26 Aug 2020 04:00:00 +0000
ROA not before:           Wed 26 Aug 2020 04:00:00 +0000
ROA not after:            Tue 11 Jun 2024 04:00:00 +0000
asID:                     6461
IP address blocks:        172.252.122.0/24 maxlen: 24
                          172.252.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2f:4e:68:de:73:1f:cc:f7:39:6c:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 04:00:00 2020 GMT
            Not After : Jun 11 04:00:00 2024 GMT
        Subject: CN=54252c85-bb11-4179-8c20-03bda3ec6837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:65:05:70:a9:d8:e2:c7:fb:90:f4:c5:3e:74:
                    94:cd:03:cc:c8:b2:82:37:2b:6a:ef:32:ba:52:e1:
                    16:df:df:4e:ff:2a:75:94:8d:16:0e:dc:5c:f2:40:
                    7a:e2:45:c3:46:a3:12:23:9a:86:f9:5c:b0:70:3e:
                    7e:17:77:35:65:ca:cd:ae:dd:c9:74:77:20:a9:4e:
                    3f:e7:68:f1:d8:2e:31:2c:97:fb:b0:01:7d:ad:02:
                    1d:48:e0:22:b1:f9:73:96:2d:9d:b8:44:fe:ba:75:
                    d0:e8:40:48:6c:52:81:b6:17:0b:7f:0a:2c:37:fb:
                    54:e3:2d:fc:16:2e:f7:24:68:48:09:c0:48:31:49:
                    f3:8b:ee:d2:ea:14:6a:d3:54:2e:e3:c1:dc:63:18:
                    50:83:10:08:22:21:0c:3c:7e:d2:ca:da:63:b0:8a:
                    8e:44:5c:86:92:f9:06:a4:29:92:ab:24:99:0f:2c:
                    f4:f4:90:95:61:d1:cd:8b:f6:67:a4:08:77:c1:7f:
                    f5:7c:f7:ff:7d:dc:88:47:1b:60:4e:60:d3:15:2d:
                    72:ac:08:98:6e:c4:16:4d:be:93:c2:ac:d7:97:62:
                    aa:a9:61:5d:01:5c:0c:66:b1:4e:73:46:f6:68:d4:
                    b1:66:33:60:dd:15:0f:5c:88:59:f4:ac:a3:42:88:
                    c0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:70:6D:0E:4F:0C:D6:07:92:E7:A2:0B:CB:74:22:A6:22:48:D2:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fce10116-ddff-38bf-8a9c-56f264057668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.122.0/24
                  172.252.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:38:cb:82:4a:64:fa:d2:cb:37:e0:8c:6b:23:23:09:ed:f1:
         57:56:7d:19:32:3e:60:c6:77:b4:fc:24:bd:90:5e:df:d5:2f:
         89:4e:c0:91:26:b3:64:0c:4e:df:c4:c0:a0:1a:b9:6c:b7:90:
         45:5a:35:62:79:82:3b:1e:6b:5a:96:f0:a9:d8:2b:5a:9b:65:
         f2:02:22:8c:a9:bb:36:cf:86:79:61:40:04:57:f5:76:04:82:
         25:4b:b7:e8:2b:e1:9d:21:39:87:59:ec:ec:0f:94:09:73:d7:
         bf:ce:18:3c:11:68:d7:9d:61:fc:7b:32:5b:9c:49:6e:72:24:
         90:03:7e:f5:a2:43:37:c0:20:d1:ca:0a:93:a7:75:04:74:04:
         c4:2a:2e:28:cb:18:47:3e:60:20:66:99:78:8c:c5:7e:02:f5:
         2e:65:f1:2f:e5:d6:68:11:61:06:65:cf:bd:8e:8d:1e:42:62:
         4c:32:32:04:e4:6e:be:cc:0d:36:d4:06:9e:b2:9b:51:cf:9b:
         01:e4:88:f8:e3:8b:83:ca:58:d7:7f:22:50:aa:31:d6:36:01:
         2e:94:e9:a8:f2:b2:6c:20:ed:09:3e:be:6e:5b:55:7a:d3:b7:
         41:c6:63:d5:3c:b6:64:1f:d8:dc:c3:8d:bd:6a:2c:f6:3c:92:
         46:66:9f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:58 2023 by rpki-client on console-fra.rpki-client.org