Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ad5fae88-645e-369c-8cec-17af593cc601.roa
File:                     ad5fae88-645e-369c-8cec-17af593cc601.roa (raw, json)
Hash identifier:          ZielaTo7JjwkZQHHGweyizzCwer35ARxTi/KKmBLek4=
Subject key identifier:   80:00:F2:AC:AD:60:F6:2A:C6:BF:A5:7D:B8:14:80:B6:2D:77:B8:C7
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A158E47B3B5B998908B71C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ad5fae88-645e-369c-8cec-17af593cc601.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.206.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:15:8e:47:b3:b5:b9:98:90:8b:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=66776d3c-9e4c-4df1-93c6-70e125eb65c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:62:9b:45:19:32:00:60:84:0f:e0:10:08:
                    8f:56:53:b1:4b:31:ec:c0:1a:c7:f7:8f:f9:81:5f:
                    08:60:4d:af:14:52:fb:a5:1c:1d:81:7c:eb:83:b8:
                    c1:40:bb:8e:b0:67:a2:6b:0b:25:cc:5c:74:03:7a:
                    fd:9c:5f:f0:98:85:fe:96:bc:e7:32:74:83:6f:72:
                    d6:83:f6:f4:b6:0a:55:1c:ad:39:27:ae:9d:a5:0d:
                    a5:bf:f5:a2:54:27:c6:52:60:30:c0:68:8d:ce:69:
                    dd:44:50:5b:93:e7:3b:12:a8:7d:cc:d9:db:38:e7:
                    5b:b3:06:7f:0e:f1:77:8c:ff:97:03:04:ae:c1:df:
                    2f:8f:bd:e7:3d:10:02:db:01:81:87:7d:92:11:df:
                    51:be:82:68:76:09:b4:48:c6:2d:cc:a5:41:7a:af:
                    d3:9c:de:16:15:e7:32:a7:2c:b4:8e:70:3a:a5:6f:
                    5e:d0:28:b0:be:21:f3:48:b2:01:84:f0:a4:5b:f4:
                    3f:dd:83:7f:d8:cf:3f:d8:ef:1f:de:c7:b6:f7:c1:
                    49:a1:81:92:49:8c:f4:6a:1e:8b:6f:45:d2:b3:6f:
                    d7:ac:c7:6b:56:41:4e:b9:f1:9e:99:bd:45:14:1b:
                    5e:db:47:ee:ac:08:b0:c2:ca:90:39:9e:49:9b:89:
                    0b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:00:F2:AC:AD:60:F6:2A:C6:BF:A5:7D:B8:14:80:B6:2D:77:B8:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ad5fae88-645e-369c-8cec-17af593cc601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:fb:e1:c2:06:60:9e:33:b0:bf:91:44:93:3a:ae:78:ea:bd:
         0e:c2:f3:2a:e1:b8:2b:c3:e1:18:7b:ba:6c:7b:ce:24:aa:50:
         7d:5d:37:8f:34:d4:0c:02:ae:d6:ab:b0:eb:99:f6:8d:4b:a0:
         e6:be:89:45:7c:4f:63:43:21:5f:f8:d1:02:33:53:9c:4a:75:
         dd:0d:76:e4:03:7a:18:fb:0d:d5:30:c3:0b:59:28:ff:00:f6:
         1d:14:d2:47:83:1d:0a:5a:04:f5:d8:db:9c:f9:7c:d0:00:57:
         08:ad:66:c2:78:82:ff:51:65:d8:73:26:20:75:16:96:f3:4b:
         3a:7d:42:3f:08:89:f7:da:53:fe:0e:41:38:6d:4b:dc:58:60:
         d5:00:54:36:1f:e7:98:32:df:c5:0d:05:c2:b9:51:6c:db:13:
         a6:70:40:dd:5b:b3:6f:1a:06:0c:68:e9:45:56:2a:36:2c:ac:
         e0:76:e3:b0:e7:03:a1:e4:16:f5:60:74:9e:9c:bf:1e:ee:13:
         ec:3b:53:bf:ef:fa:c5:df:3c:69:92:90:94:e1:19:f8:0e:a8:
         76:4f:cd:9b:89:8f:fc:a9:cb:82:24:f9:e6:91:a2:24:0e:8f:
         32:04:86:e8:4e:23:9f:fc:0c:19:72:88:07:ef:74:7e:39:bd:
         bb:9b:1d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:02:44 2024 by rpki-client on console-ams.rpki-client.org