Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/f176e750-f90d-3575-9197-3828fc83e159.roa
File:                     f176e750-f90d-3575-9197-3828fc83e159.roa (raw, json)
Hash identifier:          yCrFF4wsl76RFYLHh50lhWy5WnESpSV574Sv1p6oCsQ=
Subject key identifier:   F9:18:11:43:3D:99:58:85:75:0F:72:15:47:12:65:31:8C:D7:BC:31
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328583D7D72DF6CBEBD5FF3548D53C0
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/f176e750-f90d-3575-9197-3828fc83e159.roa
Signing time:             Wed 06 Apr 2022 04:00:00 +0000
ROA not before:           Wed 06 Apr 2022 04:00:00 +0000
ROA not after:            Mon 08 Jul 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.23.56.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:7d:72:df:6c:be:bd:5f:f3:54:8d:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Apr  6 04:00:00 2022 GMT
            Not After : Jul  8 04:00:00 2024 GMT
        Subject: CN=07839fc4-1552-49a1-b982-8ee5d4281d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c6:ee:01:ed:a0:81:47:23:58:4a:5f:91:12:
                    22:7f:f1:e2:46:39:46:01:11:57:9d:d8:33:bf:50:
                    a2:72:81:6f:bc:33:89:38:ac:fd:24:32:9b:84:67:
                    b5:22:45:45:33:bd:cb:2f:f9:1e:08:cf:a9:19:e3:
                    ee:9a:b4:f9:3e:2e:36:8e:f9:55:c0:b6:8b:42:11:
                    3d:39:fc:c0:ce:66:dc:4a:a5:ed:cd:bd:34:84:f6:
                    2b:70:4f:3a:cb:f3:9a:86:ac:17:9d:d6:a1:8d:18:
                    3b:20:08:08:0c:f3:ed:1e:96:74:52:9e:85:9e:79:
                    d1:be:1e:d3:f0:12:d2:72:eb:5b:1d:56:85:59:08:
                    c9:ae:ad:40:e9:d3:ef:41:52:8d:39:3d:c1:b5:55:
                    66:9d:98:dd:4e:64:97:c9:f1:d8:00:a9:f8:c4:ec:
                    77:50:13:76:bf:e7:c6:29:06:5a:4a:33:5e:f5:c1:
                    e0:cf:84:50:77:b9:0b:6d:b4:46:7e:57:09:14:f9:
                    33:ee:c0:22:81:9f:30:82:26:ba:23:a4:ad:af:30:
                    7a:04:37:77:07:2b:be:40:7e:01:e4:3e:fa:c5:9d:
                    50:db:a1:cf:72:fa:b5:ee:01:5a:69:63:e8:eb:ef:
                    2e:1f:46:16:75:38:76:6d:bb:2f:f2:1e:57:15:65:
                    e5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:18:11:43:3D:99:58:85:75:0F:72:15:47:12:65:31:8C:D7:BC:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/f176e750-f90d-3575-9197-3828fc83e159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e7:67:85:07:7e:11:24:25:59:69:69:c0:8f:aa:a1:54:83:32:
         f8:b9:85:38:96:ce:65:dd:12:c3:63:15:86:4f:ca:24:8a:ea:
         70:05:4c:dc:7a:23:f9:43:e2:a8:7b:92:2e:85:d6:a5:47:3f:
         91:b9:94:c2:d1:46:44:ab:91:61:48:c1:25:ca:0e:2d:2d:14:
         9b:a6:cc:39:d4:69:4f:8e:3d:5f:a1:cb:9a:cc:53:53:f6:b6:
         22:c7:62:c6:ef:3e:8e:53:6a:e3:ef:e5:85:02:d4:68:30:9d:
         06:0d:c0:2d:69:98:2f:ca:57:ed:f6:24:f2:a5:2d:97:a8:5d:
         d7:48:b8:b0:e4:5d:1f:32:d6:2f:fe:11:02:f3:fe:31:8b:9d:
         6d:9e:5a:dc:d0:e7:bd:2a:3b:da:dc:ef:b6:c8:06:3e:e2:e0:
         cd:80:95:fe:e0:d7:8b:5d:57:03:e6:65:8d:97:65:51:e0:39:
         0f:ab:43:84:b3:ef:1d:30:cf:4f:5e:28:5d:61:52:5e:41:97:
         31:fc:be:56:75:03:9b:41:7e:d9:69:7b:b1:5a:e4:9e:fb:2b:
         3c:ad:48:6f:bd:8c:98:cc:9f:d6:66:02:03:49:00:95:e7:82:
         fd:8b:06:3d:b1:ea:a3:46:b5:3c:48:47:ae:c8:fe:4d:95:c5:
         1a:b6:e2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:22:23 2024 by rpki-client on console-fra.rpki-client.org