Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/15b65ccc-7d3f-398d-b145-77deab5437ed.roa
File:                     15b65ccc-7d3f-398d-b145-77deab5437ed.roa (raw, json)
Hash identifier:          43duEwTqngdvb7l5cwoiykw2eor3XVQyAgoR5725vdw=
Subject key identifier:   F1:A7:7C:C5:59:22:96:B3:23:8A:FF:C9:CD:BF:1C:16:92:A5:F2:BC
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F43285841E447270E4A8E15BC2F167100
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/15b65ccc-7d3f-398d-b145-77deab5437ed.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Tue 08 Aug 2023 14:38:15 +0000
asID:                     54905
IP address blocks:        23.250.128.0/17 maxlen: 17
                          162.220.16.0/21 maxlen: 21
                          107.166.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:27:0e:4a:8e:15:bc:2f:16:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug  8 14:38:15 2023 GMT
        Subject: CN=bd4826e5-504a-49fa-b59a-3bd68a09a368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:50:3e:c2:bd:23:6e:79:25:85:63:ad:cf:c6:
                    e0:65:a7:2a:dd:a3:9d:e7:7d:72:4e:85:73:56:ea:
                    2a:e9:77:13:77:a5:7c:f3:4a:4c:66:f0:84:d4:f3:
                    4d:f2:b0:84:df:0b:73:3b:46:f5:af:38:49:59:35:
                    91:67:49:00:5a:23:98:22:39:79:07:0a:1b:c2:ea:
                    01:9f:53:e1:98:5c:f9:82:d4:51:bf:a5:8d:68:e3:
                    6c:66:bc:5a:19:a0:7c:42:e8:58:ab:10:cb:d6:35:
                    d5:8e:22:0f:68:3c:43:55:2c:9f:be:03:83:79:ef:
                    14:48:e2:55:4f:6d:62:53:ea:eb:dc:30:3f:02:7b:
                    86:d0:72:c2:34:b6:3a:65:c3:18:3a:9c:d2:38:66:
                    25:4d:e0:aa:4e:fc:44:6d:dd:12:e0:ef:8c:42:0c:
                    8b:69:e9:cd:89:dc:69:bd:bc:d2:bb:a2:a7:51:01:
                    69:b4:63:de:19:0c:ee:90:d3:ba:55:3c:9b:19:2d:
                    4e:b5:26:27:06:54:e6:5a:b0:cb:c7:ba:18:8a:df:
                    19:fc:1f:11:80:d7:aa:0e:24:71:20:fe:60:3b:f4:
                    f0:e0:49:1e:51:62:4d:26:f0:a2:32:cb:95:05:d4:
                    d5:64:d8:5f:e5:3b:15:8b:dc:5b:28:ae:76:21:05:
                    96:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A7:7C:C5:59:22:96:B3:23:8A:FF:C9:CD:BF:1C:16:92:A5:F2:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/15b65ccc-7d3f-398d-b145-77deab5437ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.250.128.0/17
                  107.166.0.0/16
                  162.220.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:d8:7e:b5:db:c7:37:cb:c9:4d:f2:ca:79:b2:a3:ff:1d:fe:
         15:66:a8:27:7e:ad:e9:e4:22:2d:b7:95:bd:fc:dc:67:ec:e9:
         7c:ec:c9:e5:dd:af:2e:fc:57:d4:6d:be:1f:69:1c:c2:df:d7:
         8f:6e:b4:c0:6c:e2:e2:e3:7b:c7:d1:43:9c:b1:65:7d:44:68:
         b8:a8:9c:fd:56:cb:2b:e5:8f:ec:31:dd:5c:73:3c:c1:70:db:
         41:4e:62:dc:27:13:ee:ac:1e:5b:7b:80:36:d2:ce:3e:f7:61:
         60:6f:c6:24:32:b4:8f:6b:a7:69:1d:60:b1:4b:4b:f7:8f:e1:
         56:b7:b7:91:e9:63:6a:0e:df:7d:92:bd:d9:f4:e9:9a:53:94:
         e3:85:86:2a:0a:04:f4:26:b8:5a:da:69:17:69:cd:4a:0c:97:
         3f:c0:31:70:35:3c:cb:9a:0e:0c:ef:34:b8:d9:c8:21:37:f8:
         6f:1a:47:df:6e:86:46:6c:7c:3d:2a:37:c2:75:4e:3b:64:f6:
         63:11:04:44:4c:1d:c4:a1:e7:0b:51:52:4e:52:e3:ae:66:9b:
         9f:70:bf:31:2e:c8:8f:ae:eb:e4:1b:80:46:1d:1a:a4:45:9d:
         e0:1b:3f:1e:67:b3:2b:09:04:2c:d2:65:a9:c4:7b:22:78:65:
         f5:89:f7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 23:14:59 2023 by rpki-client on console-ams.rpki-client.org