Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/62ebc7eb-722b-3290-add0-fe92f3d99c44.roa
File:                     62ebc7eb-722b-3290-add0-fe92f3d99c44.roa (raw, json)
Hash identifier:          USdnZcILAJao8wkYt/tjvzQUepDn82E96Zor1rRMQ9U=
Subject key identifier:   CB:74:AA:5D:91:F4:46:E8:B1:1A:6D:D7:7D:30:30:A8:DA:1A:0F:A4
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285841FF195998B512801E9E9CAAD0
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/62ebc7eb-722b-3290-add0-fe92f3d99c44.roa
Signing time:             Thu 25 May 2023 07:40:32 +0000
ROA not before:           Thu 25 May 2023 07:40:32 +0000
ROA not after:            Wed 23 Aug 2023 07:40:32 +0000
asID:                     208485
IP address blocks:        103.251.25.0/24 maxlen: 24
                          103.251.26.0/24 maxlen: 24
                          103.4.251.0/24 maxlen: 24
                          103.4.250.0/24 maxlen: 24
                          103.65.229.0/24 maxlen: 24
                          139.5.20.0/24 maxlen: 24
                          103.216.2.0/24 maxlen: 24
                          103.216.0.0/24 maxlen: 24
                          103.216.3.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ff:19:59:98:b5:12:80:1e:9e:9c:aa:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: May 25 07:40:32 2023 GMT
            Not After : Aug 23 07:40:32 2023 GMT
        Subject: CN=ee34d26c-d6c3-48eb-891a-d31b40a9ccae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:7f:65:1a:e5:9c:ee:82:1c:05:73:13:26:
                    c9:19:a5:91:15:fc:56:90:4c:7d:b1:df:94:50:2f:
                    09:97:bb:92:22:3f:93:c3:20:4e:a2:5f:81:bd:4b:
                    ce:9a:cd:0b:74:cf:b3:67:91:6b:d3:bf:29:9c:28:
                    2c:23:10:3d:b0:b3:3e:ef:07:47:95:37:a1:78:2c:
                    70:60:f2:4b:31:56:f8:69:bf:4e:c0:32:7d:4a:af:
                    30:ce:fe:0a:14:33:10:14:f5:bf:26:b2:5e:94:35:
                    c9:f4:cc:57:e3:82:f9:a8:20:a0:ab:16:7b:31:ae:
                    80:d1:c5:44:eb:bd:3a:42:76:42:7e:84:3b:56:0f:
                    04:41:78:fb:2a:95:69:c9:7e:03:f7:1a:bd:65:e2:
                    a6:8c:8b:32:f2:5c:e9:c3:2d:b0:13:96:3d:f9:c5:
                    f2:33:21:de:ed:b5:f4:d1:9d:6b:43:55:33:f3:0b:
                    d5:d2:59:61:64:2d:11:f0:83:7f:95:c3:77:6f:67:
                    e9:3e:21:0f:23:a4:30:b7:94:26:0a:03:81:cb:fb:
                    f0:ac:12:35:53:41:0f:a5:ff:f9:f4:e0:1e:c2:b4:
                    9b:17:31:7f:e5:30:62:9f:b1:fa:81:1e:1b:12:fa:
                    c9:0f:0f:0d:03:ea:0e:54:3f:31:2f:d4:2e:7c:43:
                    fc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:74:AA:5D:91:F4:46:E8:B1:1A:6D:D7:7D:30:30:A8:DA:1A:0F:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/62ebc7eb-722b-3290-add0-fe92f3d99c44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.250.0/23
                  103.65.229.0/24
                  103.216.0.0/24
                  103.216.2.0/23
                  103.251.25.0-103.251.26.255
                  139.5.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c6:01:0f:4f:a8:54:1f:36:3f:d8:00:6f:da:98:6d:ed:45:
         e9:4b:24:9a:59:a8:31:45:1e:2c:48:43:e2:05:d3:2f:dc:2b:
         62:1d:1b:5d:dd:9f:f2:74:7c:54:a8:ae:a6:8f:c2:ba:73:9f:
         e7:eb:f8:c3:54:c1:ab:bd:51:6d:5d:22:8a:59:52:05:46:88:
         37:9c:e5:72:ff:23:2c:e0:72:20:99:87:38:51:bb:54:ec:c3:
         b5:97:75:d9:b9:17:52:e2:c7:41:b1:4d:e2:49:75:5d:e1:39:
         b0:d4:97:85:49:13:bb:a3:74:6e:45:20:10:43:a6:81:4c:6d:
         97:00:d8:59:0c:b9:4c:66:b3:5d:a5:e8:93:09:1e:5a:d1:44:
         ef:c8:3e:c0:22:06:f5:9c:18:83:f7:e0:7b:9a:85:4b:72:00:
         9f:2f:24:66:75:db:93:24:96:8f:b0:44:b8:94:ed:b8:83:98:
         15:d3:ee:a1:4c:69:63:32:83:79:5f:3a:d5:a8:38:33:2b:16:
         02:7b:56:0d:72:e9:ea:e2:6b:36:9b:c0:48:f3:fb:b2:7a:7a:
         bb:96:7b:f3:81:30:7b:9a:3d:63:0c:79:ae:0c:27:8a:dd:e1:
         3c:8f:d0:d8:66:07:cd:89:9d:ee:1d:62:83:bc:0a:1e:f1:50:
         21:a0:4b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:32 2023 by rpki-client on console-fra.rpki-client.org