Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/216d6855-e01b-37e2-89ae-142d278d2e8c.roa
File:                     216d6855-e01b-37e2-89ae-142d278d2e8c.roa (raw, json)
Hash identifier:          AkUSdibSiE440utRbj35+NspH78TiLfce7RBWGz4k/A=
Subject key identifier:   12:70:8E:4D:BF:C9:A2:00:E4:F8:C2:67:64:82:27:97:0D:49:3B:12
Certificate issuer:       /CN=d27e1a94-34c3-4462-8f10-07b9ec5d8176
Certificate serial:       010D0C9F4328583A576B7BB36E0989669A5CA400
Authority key identifier: F3:53:03:D3:57:0E:31:CC:DD:F5:88:F3:83:5B:23:44:0A:F9:40:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/216d6855-e01b-37e2-89ae-142d278d2e8c.roa
Signing time:             Wed 09 Jun 2021 04:00:00 +0000
ROA not before:           Wed 09 Jun 2021 04:00:00 +0000
ROA not after:            Sun 09 Jun 2024 04:00:00 +0000
asID:                     14618
IP address blocks:        204.89.148.0/22 maxlen: 22
                          216.120.187.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:57:6b:7b:b3:6e:09:89:66:9a:5c:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27e1a94-34c3-4462-8f10-07b9ec5d8176
        Validity
            Not Before: Jun  9 04:00:00 2021 GMT
            Not After : Jun  9 04:00:00 2024 GMT
        Subject: CN=8bfaa113-6c91-4269-af22-11abc9dd3f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0f:36:db:35:4b:68:81:2b:63:20:f6:ae:93:
                    0f:eb:9e:a2:8e:8a:76:95:8d:55:f6:42:e0:b5:df:
                    9a:d3:44:7b:05:ed:6b:c1:ea:9e:b6:6d:0c:28:58:
                    08:72:0e:53:ef:e3:9c:24:66:4c:76:2f:1b:02:9e:
                    5c:e6:ff:3e:9d:50:22:25:4e:9d:e0:ab:e3:4f:1e:
                    32:20:7a:6c:17:0c:ce:9f:e0:61:9e:b4:c2:fa:d3:
                    ee:76:d0:4a:eb:47:30:00:ba:69:ec:bc:97:cb:0b:
                    ec:13:6a:bf:57:fd:9b:85:49:f3:ce:ed:f0:b4:df:
                    01:c3:9e:ec:91:88:cd:e4:ae:3b:c0:4f:e0:5e:72:
                    e2:df:b0:91:00:5c:3a:ae:ef:ee:b5:d6:ca:3a:b4:
                    9a:80:a4:8a:f0:9a:2e:ea:0e:f1:56:95:3e:26:ea:
                    55:74:26:32:08:ee:75:74:7f:48:b0:fa:a4:1f:2c:
                    42:f2:d5:4a:1e:98:d8:6d:9a:0b:be:55:0a:51:6f:
                    00:f5:03:1e:bc:f2:d7:9e:33:81:c7:30:47:94:88:
                    c7:be:36:89:22:1f:88:ef:40:7b:b5:8e:3a:ce:9e:
                    49:db:84:6f:00:a3:a7:84:1a:24:78:49:7d:cb:c0:
                    cb:53:8d:ee:13:80:ab:1a:5a:c0:ec:a5:74:84:40:
                    46:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:70:8E:4D:BF:C9:A2:00:E4:F8:C2:67:64:82:27:97:0D:49:3B:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/216d6855-e01b-37e2-89ae-142d278d2e8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/d27e1a94-34c3-4462-8f10-07b9ec5d8176.crl

            X509v3 Authority Key Identifier:
                keyid:F3:53:03:D3:57:0E:31:CC:DD:F5:88:F3:83:5B:23:44:0A:F9:40:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.89.148.0/22
                  216.120.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:46:d7:e1:48:f3:ce:38:4d:65:f8:b2:f7:f0:f7:eb:da:cc:
         f2:32:e6:7b:f4:5c:5f:29:6d:2b:9b:6b:5a:7d:5b:fe:ec:be:
         2b:79:b7:42:ad:30:3f:45:6e:4b:1e:10:c4:b4:49:90:9d:a4:
         52:0d:b1:6b:70:45:25:bf:38:50:61:b0:89:8a:7a:64:cc:80:
         91:2a:38:19:8e:69:be:2c:eb:b2:34:9e:0c:3a:ae:99:94:fc:
         c1:19:3d:a0:db:5c:1e:e4:78:da:d6:47:05:b7:57:df:32:96:
         7b:28:e3:16:fe:d0:7a:0b:c8:9d:ea:92:d6:82:0d:f4:da:fb:
         5a:0d:98:3b:30:10:69:2a:3b:ff:fe:d0:96:2f:34:72:c3:77:
         6e:d6:bb:d2:6e:af:74:b1:81:b3:00:c2:8b:6f:c5:2e:80:dd:
         6d:49:88:0b:3f:d9:25:03:c9:f0:28:56:cd:19:15:9f:cf:0b:
         b1:c1:11:d2:d8:b1:ff:93:7a:9d:cf:94:f1:f4:5a:7d:e7:ed:
         5a:a6:65:43:4e:89:c5:3d:8b:d4:ca:3d:db:39:a5:67:ef:4d:
         b7:a7:53:fa:2b:46:b3:18:04:9e:d6:6c:a8:0a:9a:13:2b:dc:
         22:35:2a:19:e0:48:01:43:de:cd:47:9b:64:6d:e7:c6:b4:ca:
         70:a5:5f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:41 2023 by rpki-client on console-ams.rpki-client.org