Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/c2161997-4c8b-3103-88e7-f30a214b3926.roa
File:                     c2161997-4c8b-3103-88e7-f30a214b3926.roa (raw, json)
Hash identifier:          aPSKhkyAKvzAkZo8t16JI9j1F9Tfs13ac8FcvIVkXdk=
Subject key identifier:   29:68:1D:C8:E5:0A:7E:9E:ED:EA:B0:FC:C0:ED:FB:A4:D6:EB:DE:F2
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F432858444127799F0AA71C068E3C7A00
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/c2161997-4c8b-3103-88e7-f30a214b3926.roa
Signing time:             Mon 18 Dec 2023 09:06:13 +0000
ROA not before:           Mon 18 Dec 2023 09:06:13 +0000
ROA not after:            Sun 17 Mar 2024 08:06:13 +0000
asID:                     215938
IP address blocks:        103.81.231.0/24 maxlen: 24
                          115.42.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:41:27:79:9f:0a:a7:1c:06:8e:3c:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Dec 18 09:06:13 2023 GMT
            Not After : Mar 17 08:06:13 2024 GMT
        Subject: CN=845f20c3-8eb1-43d2-8f20-6e0ae6ea6159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fc:b6:0a:f1:d1:9a:c1:c6:14:42:79:48:37:
                    cd:8e:13:d9:29:3b:fc:0c:11:5a:83:85:a4:76:36:
                    5c:e3:f8:a6:83:70:17:f3:27:74:df:87:e8:00:a1:
                    41:d9:54:a1:df:92:77:72:cc:12:9a:b3:19:8a:2a:
                    96:a4:68:7e:31:0d:75:2c:cf:28:15:33:1b:42:d6:
                    90:db:e0:fc:22:91:0f:df:a5:ac:5c:ec:c0:2c:b2:
                    e9:b2:13:b2:0a:dc:6a:b1:38:37:7d:67:14:23:56:
                    87:4e:93:77:be:69:ff:0c:06:75:5a:ed:01:85:f7:
                    90:ed:bc:76:05:5d:8b:8b:0e:90:36:69:f4:c5:44:
                    63:9e:57:e7:0d:6e:32:91:a9:c2:c8:eb:f6:04:98:
                    62:71:9a:8c:00:0f:5f:8f:5c:23:17:4e:24:ac:43:
                    1f:a3:39:4f:a8:f4:49:91:7f:75:cb:9b:ec:09:de:
                    bb:56:42:c9:32:59:ad:cd:93:d6:02:b1:7b:fa:b5:
                    6a:9d:75:3f:97:9b:a3:86:d5:6d:ee:f1:8f:48:5a:
                    20:30:cf:65:6e:cc:3a:2d:8c:f6:9a:44:23:6e:83:
                    3d:0a:94:e0:8a:8d:02:5d:ab:b0:67:bf:ed:e0:69:
                    d6:d5:79:fe:bc:ce:5a:6d:68:fb:90:92:16:29:c8:
                    86:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:68:1D:C8:E5:0A:7E:9E:ED:EA:B0:FC:C0:ED:FB:A4:D6:EB:DE:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/c2161997-4c8b-3103-88e7-f30a214b3926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.231.0/24
                  115.42.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:1a:66:0e:28:0d:0f:f1:ec:d0:8e:4d:7b:c8:c9:a3:4d:1a:
         b5:ba:b0:48:99:f8:52:bf:08:88:dc:00:75:bc:af:6e:c4:d2:
         59:2c:4a:e5:bb:a6:1a:9e:a6:6f:b9:a8:67:e7:6a:ff:66:1d:
         fa:f0:4a:bb:07:e9:8d:14:7e:e3:a0:c7:7e:38:d6:40:1c:ea:
         6f:1f:03:30:2c:1b:06:d9:bc:e9:0d:b9:d4:c1:a3:e6:14:6a:
         79:e7:d8:42:30:96:5f:26:6d:0b:e8:02:c3:1b:5d:90:18:83:
         54:fa:d9:67:38:b8:51:fa:79:ea:a3:93:cd:c9:04:8c:37:64:
         ee:d5:2f:1a:3e:50:4d:24:65:51:e1:35:38:81:2d:6d:1b:79:
         77:7c:95:6e:1e:e6:50:23:db:8c:4e:6a:2d:21:da:47:59:8a:
         ed:32:c8:89:51:eb:fb:ca:07:1b:26:59:37:79:b7:12:7e:80:
         75:60:e5:e5:40:2c:83:e1:97:5c:3d:45:98:fa:e0:75:79:13:
         70:62:df:5f:7b:6d:c5:7c:5b:25:83:c9:b8:fc:0b:4e:8c:97:
         e2:f3:41:27:a6:38:da:86:21:da:eb:3b:9b:64:7b:14:d4:89:
         88:f3:86:02:3a:64:df:ef:2b:9d:5d:31:94:f7:1c:66:f6:dc:
         e5:c5:68:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 13:09:56 2024 by rpki-client on console-fra.rpki-client.org