Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/fe46b044-a9fe-369c-b9a1-82d7465b1f96.roa
File:                     fe46b044-a9fe-369c-b9a1-82d7465b1f96.roa (raw, json)
Hash identifier:          9EPGmZJbEp/0NBAjL+GAZpk8mXRNxdTVO+YfBzHPfOc=
Subject key identifier:   7C:99:16:59:3F:E8:1D:C8:14:DD:2F:71:47:E7:84:00:96:AE:ED:8C
Certificate issuer:       /CN=0675db59-b7a3-47ed-ae85-edcfb590155e
Certificate serial:       010D0C9F4328584716BC66082E268DC813A2D400
Authority key identifier: D6:DD:50:92:34:CF:D1:3B:C7:4B:47:40:06:68:71:C3:2A:DE:A6:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/fe46b044-a9fe-369c-b9a1-82d7465b1f96.roa
Signing time:             Tue 03 Sep 2024 06:47:20 +0000
ROA not before:           Tue 03 Sep 2024 06:47:20 +0000
ROA not after:            Mon 02 Dec 2024 07:47:20 +0000
asID:                     216425
IP address blocks:        165.140.20.0/22 maxlen: 22
                          2602:fc5d:fe0::/44 maxlen: 44

Validation:               Failed, certificate revoked on Tue 03 Sep 2024 15:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:16:bc:66:08:2e:26:8d:c8:13:a2:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0675db59-b7a3-47ed-ae85-edcfb590155e
        Validity
            Not Before: Sep  3 06:47:20 2024 GMT
            Not After : Dec  2 07:47:20 2024 GMT
        Subject: CN=65a276b4-344b-4528-b873-5e054f7cd390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ad:48:03:cc:da:4c:86:82:35:14:1a:8b:55:
                    0c:51:b5:55:d6:e8:95:5f:95:f1:f3:00:83:cb:96:
                    36:e1:5a:24:a8:9c:14:81:99:9d:80:d9:6b:15:ac:
                    ee:a4:a5:1f:a4:ad:25:e6:1e:79:42:71:71:ea:91:
                    e6:94:d0:7d:67:9b:36:f8:eb:81:76:c3:08:95:c6:
                    d9:cc:32:3a:cd:e8:19:0f:c6:87:fd:27:5b:c9:6b:
                    c1:c0:a7:4e:47:c5:9c:a0:6b:f4:34:61:fb:87:bc:
                    0b:07:ea:78:c8:9a:e1:cc:29:f5:bf:50:34:cf:19:
                    90:8b:c2:bb:1d:15:95:12:dc:13:df:ab:eb:24:89:
                    bc:25:4b:a8:c0:9d:de:92:e7:d9:61:60:d4:68:c1:
                    2e:ad:65:21:19:dd:9f:17:da:13:a8:61:8e:dd:07:
                    47:f1:91:f3:37:50:96:4f:cf:a4:c7:07:90:fb:76:
                    94:b8:1a:24:a9:0e:af:7c:12:c5:2a:db:cc:0b:60:
                    59:f9:f3:72:c5:33:e2:50:c8:59:0b:c8:e3:9d:7f:
                    ba:51:1e:cf:5c:1b:4a:41:bf:33:05:54:42:9a:d5:
                    53:d7:66:47:76:06:a8:75:a1:72:7a:ae:66:3b:d4:
                    ae:01:87:ad:74:f9:3c:38:8d:15:cd:22:80:b5:77:
                    4d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:99:16:59:3F:E8:1D:C8:14:DD:2F:71:47:E7:84:00:96:AE:ED:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/fe46b044-a9fe-369c-b9a1-82d7465b1f96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/0675db59-b7a3-47ed-ae85-edcfb590155e.crl

            X509v3 Authority Key Identifier:
                keyid:D6:DD:50:92:34:CF:D1:3B:C7:4B:47:40:06:68:71:C3:2A:DE:A6:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.20.0/22
                IPv6:
                  2602:fc5d:fe0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:0e:80:a7:0e:19:42:40:42:ce:fc:72:16:89:37:f1:8d:09:
         01:7e:7f:b7:9a:2c:29:f5:e0:18:1e:04:30:93:5b:b6:97:f8:
         58:69:1f:2b:79:67:27:b5:fd:a9:5e:f4:a1:d5:99:ec:76:51:
         ba:17:5c:4f:80:da:86:4f:80:1c:67:7e:92:78:a0:35:dd:fa:
         be:8f:82:b8:d2:1d:f0:b7:4c:ff:5d:70:5a:df:e2:95:8c:c4:
         20:2b:ba:e1:18:2b:bb:22:4d:16:ef:82:e9:c1:30:96:24:91:
         95:1b:a6:59:1d:f2:fb:6e:4b:6e:a4:a6:88:45:67:10:86:b7:
         1f:9c:bd:d4:d9:a7:d3:14:7a:1a:97:82:76:f3:a4:ed:5c:af:
         cb:3c:7a:47:52:c6:59:b5:4f:05:52:9b:b2:b9:c2:a3:24:96:
         4c:a0:5a:f8:21:41:31:f5:2c:3c:43:96:86:4c:07:b9:67:3a:
         6e:dd:b6:43:f4:66:45:c2:3d:8b:96:47:be:dd:84:55:6e:ff:
         6f:9a:cd:a7:d7:1d:32:36:b2:39:74:50:e3:15:77:4a:8c:11:
         3b:ab:f8:47:7d:13:06:74:56:b1:35:b0:6f:52:9d:71:e7:f7:
         3d:7f:a1:91:8b:7a:7c:d9:25:f4:54:57:f4:55:20:6c:df:5a:
         04:0f:9e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 18:16:24 2024 by rpki-client on console-fra.rpki-client.org