Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/26be740c-0968-3aa5-943e-00a08c2295c7.roa
File:                     26be740c-0968-3aa5-943e-00a08c2295c7.roa (raw, json)
Hash identifier:          8tAjLTU/B/wDMlW2WdeSsux3+r6gtaS+FFnz4dj6UqM=
Subject key identifier:   6A:3A:85:64:8F:84:A6:F5:65:86:12:8B:57:A4:02:49:31:9A:07:77
Certificate issuer:       /CN=8b7074c2-7c8f-41ac-8307-74ece44a460c
Certificate serial:       010D0C9F4328584683D623C4E15BB1DF45BF1AC0
Authority key identifier: C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/26be740c-0968-3aa5-943e-00a08c2295c7.roa
Signing time:             Fri 12 Jul 2024 15:55:22 +0000
ROA not before:           Fri 12 Jul 2024 15:55:22 +0000
ROA not after:            Thu 10 Oct 2024 15:55:22 +0000
asID:                     17385
IP address blocks:        68.68.188.0/24 maxlen: 24
                          68.68.189.0/24 maxlen: 24
                          68.68.190.0/24 maxlen: 24
                          68.68.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 Jul 2024 23:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:83:d6:23:c4:e1:5b:b1:df:45:bf:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b7074c2-7c8f-41ac-8307-74ece44a460c
        Validity
            Not Before: Jul 12 15:55:22 2024 GMT
            Not After : Oct 10 15:55:22 2024 GMT
        Subject: CN=36e39c59-760f-4789-a964-72aa2bcc943b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0f:86:4e:49:81:04:aa:2b:e9:31:95:d2:c1:
                    e8:c1:12:76:a6:d6:63:3d:27:11:92:87:6d:75:2d:
                    98:3c:39:ec:39:44:d9:d8:19:f8:f6:46:62:46:13:
                    d3:ff:7e:e4:ee:5a:50:34:aa:75:19:4c:b8:e4:07:
                    2a:a6:dd:df:1e:a2:de:c9:54:68:4e:40:6e:aa:2d:
                    56:e4:58:fc:06:76:0c:7e:24:81:12:d5:0c:c3:5e:
                    be:02:45:2d:e9:8b:09:17:c0:1f:86:56:c5:9c:6a:
                    89:bf:a7:d3:3b:53:2e:51:ce:c5:26:d7:71:99:0e:
                    63:c9:93:33:15:78:7b:15:93:ba:66:20:48:27:ce:
                    7a:f2:21:87:81:01:23:7f:13:d4:8a:77:78:7e:0f:
                    1e:96:50:92:34:10:9a:2a:c0:d1:39:ea:9d:35:92:
                    bd:73:56:84:ee:13:eb:fa:af:78:b8:ca:8c:42:f9:
                    2f:78:63:04:5c:f2:69:97:6b:9a:a0:f1:1c:80:53:
                    d3:89:43:0a:7b:e9:d1:cc:6f:74:4d:79:41:f5:6e:
                    6a:53:82:32:48:86:d7:c6:2e:11:65:a5:8c:c6:87:
                    6a:00:f5:9f:79:65:26:10:1f:2d:6c:ae:5d:23:9e:
                    6c:15:4a:c6:b7:b2:d4:16:5e:44:b2:ab:06:1a:2a:
                    37:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3A:85:64:8F:84:A6:F5:65:86:12:8B:57:A4:02:49:31:9A:07:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/26be740c-0968-3aa5-943e-00a08c2295c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl

            X509v3 Authority Key Identifier:
                keyid:C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:91:c1:77:1d:0e:52:d0:6c:28:88:71:96:36:c1:d0:62:06:
         f4:dc:d0:85:bf:2b:4a:95:13:e9:4e:90:e6:85:20:12:48:ad:
         7f:7a:05:f1:fe:bb:24:14:f7:df:41:73:af:2b:15:60:d1:fa:
         2a:56:d1:1d:e5:9c:14:2d:75:a2:ac:cd:74:df:dc:01:7f:cd:
         8c:fe:5e:74:6a:45:af:46:f0:e2:38:85:1d:b1:27:31:8e:94:
         14:41:2f:46:64:ed:c3:af:ec:a3:7d:6c:92:5a:49:2a:6a:95:
         3e:c0:ff:a5:8c:85:56:4d:87:5b:4a:e2:23:e8:c7:48:db:fb:
         53:89:94:e3:52:fd:49:e4:0a:2e:97:1f:29:4c:41:f7:97:57:
         1e:bc:1e:ae:1a:bb:a7:44:3d:ac:20:a6:bd:64:05:14:02:e0:
         a5:d1:03:2d:56:ec:58:c0:85:ae:77:28:16:c2:e4:21:92:a1:
         8e:69:82:09:ab:f6:e6:f2:0d:d2:d9:2e:bd:ad:16:0d:0c:70:
         ea:8a:2f:03:dd:10:7b:e7:aa:f9:a7:59:88:54:fa:7c:4b:c1:
         41:27:03:d1:f7:7c:c5:bb:5d:ff:7b:2e:6d:98:a0:0c:b2:a0:
         af:0f:d9:4d:36:4d:6f:80:f2:a0:23:09:e0:0c:64:e5:f6:ac:
         78:54:d5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 13 01:43:24 2024 by rpki-client on console-fra.rpki-client.org