Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8ae69971-ce2f-337c-942b-ab4d5e302313.roa
File:                     8ae69971-ce2f-337c-942b-ab4d5e302313.roa (raw, json)
Hash identifier:          Es5Z1w94vsSfwh5/ksF/1U59MdqHK8XwRn7PPDuh88U=
Subject key identifier:   A8:27:A8:53:75:6D:AF:FA:DE:67:EB:AD:32:31:85:72:EA:ED:DD:55
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285843D4D8E5B3E5859DC703B0BB80
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8ae69971-ce2f-337c-942b-ab4d5e302313.roa
Signing time:             Thu 09 Nov 2023 14:00:20 +0000
ROA not before:           Thu 09 Nov 2023 14:00:20 +0000
ROA not after:            Wed 07 Feb 2024 14:00:20 +0000
asID:                     55293
IP address blocks:        162.212.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:d4:d8:e5:b3:e5:85:9d:c7:03:b0:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Nov  9 14:00:20 2023 GMT
            Not After : Feb  7 14:00:20 2024 GMT
        Subject: CN=ce5636a9-5d4b-4cf4-8bd3-2a57efc5ee4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:81:44:76:f3:d6:40:3b:5f:e4:e9:e9:93:db:
                    c3:cc:af:c0:97:77:00:d2:9c:0d:ec:b5:8f:f3:94:
                    90:fb:69:5d:29:9d:53:47:50:01:72:95:70:af:c8:
                    a1:78:b4:4e:d4:6b:c5:06:44:00:5a:02:3e:b1:fe:
                    13:10:73:b1:bd:db:10:3c:c3:b0:34:50:69:03:57:
                    53:93:aa:ad:79:49:ad:bf:80:ca:44:e0:82:d0:4a:
                    eb:6b:0f:6a:e0:ba:be:ac:42:ae:07:b1:97:ed:45:
                    98:d6:8f:39:33:61:1c:85:f6:f7:d6:91:e9:f1:c2:
                    3a:0a:92:36:e2:5e:04:fa:46:1f:4f:0f:bf:a8:9d:
                    13:5f:20:77:51:6e:59:e8:72:45:8f:c6:85:18:13:
                    82:e7:bb:39:80:e3:3d:4b:9b:dc:b7:10:d9:f6:35:
                    73:d4:e2:4d:24:57:67:35:8e:3f:79:40:ca:42:3e:
                    30:43:dd:3c:6c:e8:49:47:91:fb:57:bb:ff:b2:88:
                    7e:6e:9c:08:86:a3:04:19:cb:29:70:8a:27:db:71:
                    30:db:21:b0:36:94:82:9c:93:f4:06:ad:f7:7c:44:
                    16:01:14:cb:63:31:5e:2a:f3:2a:44:01:48:90:39:
                    18:48:db:54:9a:38:b2:b9:db:0c:ea:7c:27:ed:8b:
                    cf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:27:A8:53:75:6D:AF:FA:DE:67:EB:AD:32:31:85:72:EA:ED:DD:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8ae69971-ce2f-337c-942b-ab4d5e302313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:0e:ed:6c:58:31:1d:81:b7:99:d2:2d:ff:e6:6c:06:dd:9b:
         e9:4b:49:ed:c7:73:62:81:17:8e:c9:2a:fd:2c:7f:db:88:9e:
         1e:4e:14:4f:ac:7e:f9:77:d9:48:53:ce:86:14:ea:8e:07:66:
         c3:59:91:43:b8:85:2d:48:a1:ac:d4:1e:61:fc:e0:c9:80:d1:
         86:ee:0b:73:ed:b9:cd:8b:3c:a2:db:79:e2:a0:5a:ee:5a:fb:
         6d:b4:b7:4d:c9:e2:7c:77:13:3b:4c:5a:37:5a:1e:f2:40:1d:
         f8:a8:10:73:64:73:07:56:6a:98:4e:7e:fe:13:ff:f6:a8:60:
         bf:5f:5d:c4:0c:81:72:09:ab:95:9e:78:41:35:4b:35:e2:bc:
         f9:16:e2:97:8e:ee:5d:eb:49:b8:4b:b7:9f:2e:c5:ca:aa:42:
         c0:0a:85:08:0e:af:07:97:eb:34:46:25:81:02:68:d6:36:4f:
         4b:b4:25:71:2c:f6:b5:77:a6:14:91:3a:9f:d0:7a:23:0e:da:
         30:e4:3d:0e:38:87:ab:1c:b4:b4:21:44:bd:13:dc:36:4d:d4:
         fe:eb:31:0f:fa:9c:9a:05:8a:bf:06:44:b4:ab:2b:e0:15:0c:
         a6:73:c1:8a:c2:81:ce:88:50:ad:32:eb:81:24:3d:7a:b5:e5:
         9e:f7:b1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:35:44 2024 by rpki-client on console-fra.rpki-client.org