Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/002e5797-866a-3765-8009-a02bde7b0032.roa
File:                     002e5797-866a-3765-8009-a02bde7b0032.roa (raw, json)
Hash identifier:          FoLf12P+86Rt5XOilQNenPCL+ctuTQ3p5QMJ+QqzPJQ=
Subject key identifier:   34:BB:96:83:4E:2C:60:CB:94:83:79:DA:CA:35:72:77:23:13:16:77
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285845FAB3F8D57035030011F0C900
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/002e5797-866a-3765-8009-a02bde7b0032.roa
Signing time:             Fri 24 May 2024 13:00:34 +0000
ROA not before:           Fri 24 May 2024 13:00:34 +0000
ROA not after:            Thu 22 Aug 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        161.69.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 28 Jun 2024 14:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:fa:b3:f8:d5:70:35:03:00:11:f0:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: May 24 13:00:34 2024 GMT
            Not After : Aug 22 13:00:34 2024 GMT
        Subject: CN=253991f4-4284-4035-afda-d678f149bf35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d0:1f:9b:37:80:a1:63:12:8d:8d:e1:df:38:
                    42:f1:8e:00:cd:09:1f:71:63:9d:84:cf:e5:70:65:
                    a5:fb:97:5e:4e:8c:f2:7f:ea:fc:12:81:55:3a:63:
                    21:19:68:4e:84:56:63:29:05:03:a4:da:0b:7e:c0:
                    b9:5a:89:4f:8d:d7:d7:c4:06:08:8d:97:f8:cb:99:
                    b7:28:aa:02:2b:4b:5b:4b:8d:43:83:85:3a:f4:d9:
                    b8:a1:09:42:25:23:66:ab:db:9f:26:bb:c1:c4:4a:
                    f5:98:30:4e:49:ca:ff:2a:22:a2:ab:9e:af:4a:9d:
                    70:f0:3b:d8:2f:80:36:f3:13:48:4b:10:b3:1e:f1:
                    ed:36:f8:66:58:38:06:8a:25:f2:18:41:20:a7:c7:
                    42:23:a5:f7:f3:a8:e8:4a:47:af:e0:7e:d4:6f:a0:
                    c0:97:07:cb:ec:07:dc:e7:46:28:be:ea:9b:d1:f6:
                    44:8a:e3:8a:01:7d:c1:d6:5e:07:a8:b7:0e:b0:8c:
                    06:16:56:63:94:a1:c3:57:fd:57:85:83:ad:3a:35:
                    c5:17:40:d4:f9:8f:32:a9:e9:8c:9d:41:8f:bd:5a:
                    6a:81:e9:0b:f7:47:9c:4b:38:d1:e4:6f:6b:89:89:
                    d5:7c:93:2a:79:6e:9f:b5:be:fe:b9:75:4c:cf:ad:
                    98:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BB:96:83:4E:2C:60:CB:94:83:79:DA:CA:35:72:77:23:13:16:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/002e5797-866a-3765-8009-a02bde7b0032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:21:2b:2a:ce:00:7b:fd:6a:e1:18:a0:5a:06:c9:7c:28:13:
         58:4c:d4:13:a5:c4:5f:9f:f5:6c:c4:aa:d3:c6:c5:0e:fd:2c:
         84:f5:14:ad:02:5c:13:d1:18:c5:25:92:4b:c6:0e:16:86:32:
         c3:f2:b4:77:c2:8a:6e:1e:bf:c6:fc:56:4f:ee:1a:24:4e:59:
         de:20:05:df:a2:3a:5d:cd:56:c4:71:86:84:8e:48:ca:f3:da:
         31:1a:cd:5d:73:ec:7f:6b:87:a4:3e:ee:36:6d:ed:66:11:02:
         bb:2c:f7:ff:bf:5b:23:3b:0a:68:62:b4:0c:76:8e:c3:14:da:
         fa:70:e0:b2:8b:63:fa:87:3e:16:ae:7f:a5:d4:83:98:81:80:
         fb:19:f1:62:2f:0e:39:54:c5:ec:88:f6:1b:3d:c7:6d:66:85:
         26:0f:b8:94:3b:46:f8:fe:85:68:26:ea:5c:da:60:1f:26:59:
         cb:21:a9:04:1d:49:dd:b5:29:bd:8a:2c:be:99:63:d0:e3:64:
         df:1c:af:11:3a:87:4a:bb:99:b0:6c:5c:ff:29:76:06:0d:3d:
         3f:e1:62:be:c7:ba:ca:82:10:53:3a:ac:cd:8a:85:4a:43:dc:
         20:18:d0:07:af:a3:83:26:ae:2c:df:78:ab:36:41:11:a2:c8:
         58:a1:1d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:45:54 2024 by rpki-client on console-ams.rpki-client.org