Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9fed7c35-0748-3da6-bd89-c9495332825c.roa
File:                     9fed7c35-0748-3da6-bd89-c9495332825c.roa (raw, json)
Hash identifier:          n+R44GZUTjyt48jxj0oSs1E76XK701X7w1kTjZU78/4=
Subject key identifier:   93:0B:5C:25:94:E3:02:60:E6:8E:4F:EB:E8:4D:61:0C:55:F7:E3:97
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285840F18CA1C4C46C496D361F0000
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9fed7c35-0748-3da6-bd89-c9495332825c.roa
Signing time:             Mon 06 Feb 2023 17:51:09 +0000
ROA not before:           Mon 06 Feb 2023 17:51:09 +0000
ROA not after:            Wed 22 May 2030 04:00:00 +0000
asID:                     396481
IP address blocks:        152.44.189.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Jun 2023 12:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:f1:8c:a1:c4:c4:6c:49:6d:36:1f:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb  6 17:51:09 2023 GMT
            Not After : May 22 04:00:00 2030 GMT
        Subject: CN=8bfeaf85-614f-4e27-af85-478e6edd92ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:02:54:89:75:ba:a8:74:9e:cf:77:aa:df:
                    7a:c2:f1:96:d6:31:1b:2c:ec:ae:0e:81:18:05:1b:
                    02:3e:1b:75:a8:c0:60:5b:a2:ff:9d:44:08:8a:ce:
                    82:89:86:a9:ba:53:38:93:a5:df:c4:5c:f6:50:4e:
                    d8:fd:fc:53:71:15:1f:78:a4:c4:10:58:56:9c:dc:
                    d5:27:a0:66:81:a3:4a:93:75:64:48:14:aa:5e:ca:
                    7c:1c:08:57:fa:35:c0:d7:1f:91:5d:27:25:ec:55:
                    df:9b:67:1c:eb:b3:7d:5c:3d:4d:c3:c5:07:e4:b8:
                    14:58:79:72:a0:e8:41:e8:b1:d7:ea:2f:02:6c:68:
                    6a:18:25:46:d1:ef:4f:59:83:5f:55:04:13:35:85:
                    d7:36:d3:70:c5:81:b4:ac:35:66:a4:9e:f4:d8:35:
                    ed:f2:78:81:cd:3d:f7:14:53:5c:cf:1e:f0:e3:17:
                    51:02:9c:91:bd:63:8e:a2:71:f7:86:4e:37:5a:6a:
                    06:7c:76:ca:fd:0e:22:32:1d:62:9e:2e:2c:87:64:
                    cf:27:65:2e:d9:80:87:33:6e:0a:69:f2:61:73:53:
                    6a:04:c6:ce:42:5e:06:5b:42:d2:5b:e7:f8:47:df:
                    4d:5e:05:52:05:54:81:ba:f5:f5:22:4c:8a:17:60:
                    e6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0B:5C:25:94:E3:02:60:E6:8E:4F:EB:E8:4D:61:0C:55:F7:E3:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9fed7c35-0748-3da6-bd89-c9495332825c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:3c:56:ea:90:c3:5e:6b:7b:08:19:b5:cb:16:0a:09:f6:cf:
         ea:ff:c1:2d:bb:19:c8:eb:bb:f2:35:31:86:24:b6:15:cf:19:
         51:4e:a4:e6:cc:45:05:83:9b:a4:9b:50:16:3d:02:67:27:8c:
         3d:0e:6a:e3:8c:f9:0f:58:45:a6:b1:98:55:21:39:56:4e:f7:
         ca:39:a6:d0:db:f8:1d:5b:35:26:c4:7a:22:69:bb:b9:1e:7c:
         81:6c:f1:6b:2d:0c:c2:7b:dd:85:84:1b:4a:68:af:11:64:1a:
         c6:69:f6:7a:f0:91:aa:3d:b4:11:3c:90:19:fc:98:a1:3e:c0:
         9f:e0:28:b4:e2:d4:e2:80:48:30:cc:c5:bc:18:25:c7:5f:6a:
         27:73:80:be:30:73:26:1e:5e:0c:e4:6b:4c:02:ed:16:70:fe:
         2f:73:0e:ee:af:92:6b:b5:35:65:a8:8a:9f:63:f0:be:a4:b5:
         48:f1:88:a8:63:7c:96:0d:40:47:4c:4a:41:3b:68:91:f7:22:
         6d:11:fd:5b:55:7a:b4:ea:06:75:bc:77:a0:a6:d7:cf:90:1c:
         e8:2f:20:24:55:7a:45:3a:37:b8:ed:43:1e:9b:ba:3d:ba:89:
         07:b8:e4:03:81:98:f9:26:d8:ca:0a:89:ad:ec:c3:db:f4:70:
         1f:75:e5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:36 2024 by rpki-client on console-ams.rpki-client.org