Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/00e2d84c-e259-3cc1-bbb8-68e683c8cf3b.roa
File:                     00e2d84c-e259-3cc1-bbb8-68e683c8cf3b.roa (raw, json)
Hash identifier:          rQFT/CQ5lg4mG+btH7u/i51Xe9OHUMisWjbDGZAz+NU=
Subject key identifier:   E4:24:88:0E:13:DF:2A:FE:43:7A:DC:BF:A7:AD:98:5C:23:4F:99:EB
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328576D51CC73C042CFC173353C3B7E
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/00e2d84c-e259-3cc1-bbb8-68e683c8cf3b.roa
Signing time:             Thu 09 Jul 2020 20:20:06 +0000
ROA not before:           Thu 09 Jul 2020 04:00:00 +0000
ROA not after:            Wed 09 Jul 2025 04:00:00 +0000
asID:                     6128
IP address blocks:        24.157.32.0/19 maxlen: 19
                          24.38.0.0/17 maxlen: 17
                          24.246.96.0/19 maxlen: 19
                          63.247.160.0/19 maxlen: 19
                          65.51.0.0/16 maxlen: 16
                          69.27.224.0/19 maxlen: 19
                          69.74.0.0/16 maxlen: 16
                          108.179.0.0/18 maxlen: 18
                          173.251.0.0/17 maxlen: 17
                          198.46.96.0/19 maxlen: 19
                          216.255.96.0/19 maxlen: 19
                          2602:230::/32 maxlen: 32
                          2607:fda8::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 25 Jan 2023 14:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:35:3c:3b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Jul  9 04:00:00 2020 GMT
            Not After : Jul  9 04:00:00 2025 GMT
        Subject: CN=065cc267-95c8-4e85-a418-199b95fbde9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:a1:bd:35:48:a6:fe:f3:d6:01:52:6d:fe:
                    33:b1:44:45:5c:ef:63:72:65:3e:92:9a:6e:c1:09:
                    1d:2a:9e:7b:a7:8c:c3:98:79:a5:93:e2:7b:27:d5:
                    bb:17:3f:e7:13:fa:13:92:1c:b8:08:82:03:9c:54:
                    aa:81:f8:8a:fd:d5:80:70:86:e4:24:62:9b:1f:06:
                    44:35:83:34:cc:2d:10:a9:c8:63:e6:d2:85:66:b4:
                    0b:08:f2:fa:ad:9f:fd:f2:88:f7:62:03:07:41:ad:
                    28:f4:8e:81:d3:7e:a6:35:89:dd:93:c6:03:71:bd:
                    83:03:22:e8:4b:5a:03:93:e3:5e:fe:52:63:ab:46:
                    6d:28:02:c6:93:cc:eb:18:df:c1:bd:04:f3:fc:ed:
                    78:c8:1a:12:a2:3f:df:f0:05:b8:5d:f4:d6:6e:2a:
                    9c:e5:6a:ce:8b:72:b5:4f:e9:6a:36:1f:8d:b9:13:
                    03:9c:4e:1a:fe:3a:db:fc:5f:3f:61:92:48:2d:55:
                    88:83:63:c3:70:18:29:d9:b5:90:0e:81:7c:0c:fc:
                    0c:c9:e7:71:42:d5:af:cf:17:4d:15:43:8c:3a:a6:
                    b9:b4:16:b3:d5:45:01:96:8b:9f:67:36:9f:24:bd:
                    53:ec:ae:14:1f:b0:d1:1a:8b:d9:b4:59:b5:69:4c:
                    ca:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:24:88:0E:13:DF:2A:FE:43:7A:DC:BF:A7:AD:98:5C:23:4F:99:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/00e2d84c-e259-3cc1-bbb8-68e683c8cf3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.0.0/17
                  24.157.32.0/19
                  24.246.96.0/19
                  63.247.160.0/19
                  65.51.0.0/16
                  69.27.224.0/19
                  69.74.0.0/16
                  108.179.0.0/18
                  173.251.0.0/17
                  198.46.96.0/19
                  216.255.96.0/19
                IPv6:
                  2602:230::/32
                  2607:fda8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:af:b4:3d:30:ad:9c:49:81:ed:cd:fc:9b:dc:a1:1c:9b:1a:
         7d:c4:f1:b6:7a:ed:41:a4:94:f2:e1:27:12:06:c7:98:05:7f:
         80:e7:b4:7a:05:91:aa:1a:ec:10:bc:3a:19:b4:45:83:2e:df:
         1a:f7:d0:51:3b:e5:34:56:93:a3:95:0b:cf:2c:9a:a3:59:21:
         5c:d9:fe:fe:f0:1f:91:1e:b1:0e:18:87:62:72:2e:96:2c:9b:
         12:57:70:cb:aa:18:e1:05:5f:1e:06:d3:e7:9e:12:05:54:f2:
         81:c6:01:0b:33:2f:34:a6:b6:e4:ac:08:74:51:30:c8:10:c8:
         23:0a:d4:11:1c:15:55:7e:2f:d3:b7:33:1f:3c:97:9f:37:34:
         a1:60:6a:43:33:b1:0d:d4:f6:bc:42:6e:31:0b:3e:15:5d:09:
         99:a4:d7:7c:df:29:71:3f:0f:fa:fd:c4:64:11:cd:42:cd:40:
         26:64:1b:e1:72:dd:ef:68:d9:50:5f:58:ed:92:a7:4b:16:f0:
         bb:5b:61:a1:c0:da:b3:77:ac:0f:46:e3:22:35:1a:e4:df:a3:
         10:48:53:e2:5c:c4:73:b4:5b:c4:4c:e4:21:51:a9:42:e0:e0:
         40:b4:cd:25:d4:c6:2d:71:89:e6:bd:2a:50:0e:bc:7c:f8:13:
         38:e6:88:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:02 2024 by rpki-client on console-fra.rpki-client.org