Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/68a08f89-4d25-317f-bb32-cc9fac5d723c.roa
File:                     68a08f89-4d25-317f-bb32-cc9fac5d723c.roa (raw, json)
Hash identifier:          Wb5umwNW9bGnWZK+VX/gNQNXj6WpPXJ5n7Yj0sBAyYY=
Subject key identifier:   31:0C:30:75:5C:72:A8:05:92:51:DB:20:AB:59:ED:41:2E:68:F9:5A
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328583D7D72F085AF9EC2431BF4D600
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/68a08f89-4d25-317f-bb32-cc9fac5d723c.roa
Signing time:             Wed 06 Apr 2022 04:00:00 +0000
ROA not before:           Wed 06 Apr 2022 04:00:00 +0000
ROA not after:            Mon 08 Jul 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.23.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:7d:72:f0:85:af:9e:c2:43:1b:f4:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Apr  6 04:00:00 2022 GMT
            Not After : Jul  8 04:00:00 2024 GMT
        Subject: CN=7e18087c-14f6-402c-9454-d964540d1d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9c:a4:0f:3d:1d:e1:cb:9d:39:f7:f7:d8:95:
                    ba:bf:f8:b2:3d:02:d0:3d:f2:2f:7e:f8:c7:bb:9a:
                    8b:83:b5:58:a5:8f:55:e7:93:eb:9b:b2:20:1e:24:
                    37:8e:a6:72:e7:a9:70:8d:dd:73:98:27:23:c0:89:
                    0a:8e:0d:66:6e:40:69:ab:1a:94:1c:88:57:70:64:
                    eb:df:dc:d9:f1:22:d2:c2:8c:16:6a:2b:56:be:23:
                    dd:1f:0e:c8:65:26:65:d3:8c:19:89:24:34:f7:b5:
                    7e:2c:11:ad:aa:8b:a6:cb:9e:af:e5:23:09:a3:e4:
                    68:fc:fd:28:f3:30:ec:f2:9b:2f:95:fd:38:28:58:
                    80:b3:79:ae:ec:a0:ab:25:2c:4e:90:91:90:4c:64:
                    3e:77:9a:ba:0f:59:ac:b7:41:0f:5e:16:d1:0a:d7:
                    01:75:c6:de:ca:d5:dd:03:e4:1d:3e:3c:95:9a:12:
                    a2:ee:f0:30:24:62:02:ad:fb:8f:0e:d2:45:22:84:
                    0b:4f:7d:cd:65:7b:76:2e:12:38:f0:6a:a2:32:2c:
                    7b:ef:10:ee:f0:cf:a8:0c:81:8a:33:c4:06:da:11:
                    69:4c:da:b4:2e:01:33:45:a0:bb:9f:34:da:66:54:
                    dc:83:18:50:13:df:4a:65:05:92:25:5c:a7:6a:30:
                    6f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0C:30:75:5C:72:A8:05:92:51:DB:20:AB:59:ED:41:2E:68:F9:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/68a08f89-4d25-317f-bb32-cc9fac5d723c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e8:23:6d:ba:d6:21:e5:f8:68:1a:71:6e:c9:38:18:ec:11:
         b7:4f:97:f9:a6:cb:1e:f8:6f:47:6d:30:6c:66:40:39:79:81:
         db:33:08:1f:03:7d:fc:29:a0:e7:60:b2:33:5c:64:3a:5d:4c:
         3a:b4:7a:2a:46:bc:ba:dc:e8:e0:40:10:e1:87:e3:42:ac:ac:
         13:75:24:91:99:11:e8:d8:3d:47:2f:71:b9:e9:6e:a9:29:32:
         eb:43:28:a7:8f:6c:cf:73:eb:75:b9:e2:3d:cb:35:54:cf:57:
         82:57:77:f6:9f:d4:23:a9:2a:b5:a7:45:ba:43:61:93:39:9c:
         6e:c3:24:b1:d0:9e:ed:e1:69:80:4f:b1:ea:c1:81:39:d6:24:
         f0:58:bd:71:f4:1a:8e:a8:6f:c5:5d:8f:dd:36:a3:57:6a:fa:
         8e:aa:58:b0:69:f9:56:f8:9f:2f:22:26:0f:cd:eb:06:3a:29:
         ad:6f:1a:11:ac:fc:e9:58:2a:d1:10:d3:fa:3e:d1:0a:6d:57:
         c2:1f:9c:62:bb:ee:b3:7b:8f:12:73:f6:09:ae:e4:98:97:31:
         f6:68:49:bc:f7:67:a3:93:d3:8b:68:bb:bf:0f:bb:dd:e3:87:
         c5:75:f5:89:00:18:94:16:b3:57:5e:e0:a3:9f:7a:c7:e1:d4:
         ec:8d:85:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:22:22 2024 by rpki-client on console-fra.rpki-client.org