Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c08f7757-06b3-3674-88f9-ea64de034db6.roa
File:                     c08f7757-06b3-3674-88f9-ea64de034db6.roa (raw, json)
Hash identifier:          aOoQlHf8dWm23jiER2H09K9FlfhGIarBIFFT+yBFTN4=
Subject key identifier:   00:AD:63:FC:BB:3D:75:EE:95:69:20:E6:A3:D0:5F:33:BD:0C:E0:1D
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328583FEE03B25EE3CE7086E2A9F800
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c08f7757-06b3-3674-88f9-ea64de034db6.roa
Signing time:             Thu 02 Jun 2022 20:45:09 +0000
ROA not before:           Thu 02 Jun 2022 20:45:09 +0000
ROA not after:            Mon 18 Feb 2030 05:00:00 +0000
asID:                     14642
IP address blocks:        174.127.198.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Jun 2023 13:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ee:03:b2:5e:e3:ce:70:86:e2:a9:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun  2 20:45:09 2022 GMT
            Not After : Feb 18 05:00:00 2030 GMT
        Subject: CN=20fedb56-407d-419b-a712-3f878d7d9f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3e:44:ca:78:5c:35:41:e1:f7:95:b4:80:d0:
                    7e:06:a3:bb:0b:d0:75:18:46:b4:3f:69:d3:39:e2:
                    fe:02:39:7e:eb:9b:00:49:b4:f6:20:2f:98:6a:f7:
                    fd:d3:d1:b3:52:a7:f4:ed:7e:d6:28:0e:1a:9e:7f:
                    28:f4:fe:fc:b4:63:40:6c:ee:b6:40:a6:d3:80:ab:
                    7d:12:ce:24:e4:b4:12:a8:f3:aa:af:d2:e1:28:ab:
                    f0:d4:4f:cf:a4:76:57:04:9d:1c:b9:cf:51:2c:55:
                    88:0c:b4:5c:b3:a4:9d:1b:3e:03:39:b7:e1:36:23:
                    e0:87:28:76:6c:ae:a4:cd:05:59:c5:d4:ea:6f:63:
                    47:5e:8e:d6:8a:e4:31:65:a3:6c:51:e0:f6:f6:02:
                    6f:73:51:29:80:f8:ee:b5:2e:c5:82:78:cb:2a:a2:
                    de:44:85:6d:8e:e2:aa:8d:a4:30:3a:f9:90:0f:bd:
                    e9:b5:04:ef:5e:79:f3:2a:d1:64:25:c5:42:be:74:
                    a8:3f:9f:fd:fb:03:68:31:95:a7:ad:b7:1a:05:95:
                    1d:2e:02:69:4d:5c:4c:dc:69:80:c5:5c:e3:a1:6b:
                    ab:2f:44:30:ca:6e:46:7c:12:69:5f:00:74:1a:56:
                    55:6e:24:2f:f3:c8:e4:c0:35:e4:56:69:4b:73:42:
                    35:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AD:63:FC:BB:3D:75:EE:95:69:20:E6:A3:D0:5F:33:BD:0C:E0:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c08f7757-06b3-3674-88f9-ea64de034db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.127.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:4b:65:f9:36:60:5d:64:2d:40:d2:09:49:4d:42:03:47:ae:
         9e:40:c0:de:85:4d:09:9d:d1:55:86:b8:4d:d1:96:4e:61:b9:
         3b:33:67:61:1c:98:6f:df:98:f2:b8:cf:16:e2:89:62:a3:f0:
         5b:16:4f:c1:1e:34:b2:37:70:f9:fd:1c:d7:9e:a3:2b:ae:12:
         28:74:ee:e8:db:8d:9c:25:6d:77:66:f0:4d:e3:04:5c:86:ce:
         73:7c:14:78:10:01:58:f2:35:02:af:29:82:e5:6e:f6:f2:07:
         e8:29:c7:62:57:fc:1c:b9:a2:c6:86:d2:be:a3:f7:be:63:d1:
         e5:d6:05:5f:b1:9f:93:3f:f0:fa:fb:07:ce:e7:bc:9a:0b:3b:
         1e:ea:ee:cd:74:9c:c3:4d:3f:83:d0:26:c6:42:50:7c:de:6f:
         96:52:e0:bd:cf:28:79:79:92:d8:c8:a8:fb:4d:12:7b:0b:24:
         5d:1f:70:60:b2:d1:3b:7e:4d:99:ce:35:56:58:3b:33:84:e4:
         82:7d:d8:7a:8c:03:3b:52:49:87:2b:18:63:8d:81:5c:d9:ff:
         ec:4e:9d:2d:51:ab:7f:ee:c4:f7:ff:2d:63:fc:2f:23:a7:c3:
         b4:59:ba:e1:8a:ad:40:8b:1d:b9:f7:f9:a9:46:91:5f:9a:ec:
         78:ef:93:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:36 2024 by rpki-client on console-ams.rpki-client.org