Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/1125f1f8-f27d-3e8b-a900-237414837531.roa
File:                     1125f1f8-f27d-3e8b-a900-237414837531.roa (raw, json)
Hash identifier:          E+jHsULYwj9/qQ6RaRl9bwbRSbBfnCcvpQ6RtBFO/Tk=
Subject key identifier:   81:D5:74:BE:23:6E:A0:08:A0:D3:B8:80:EA:47:3B:FF:B6:B3:69:DF
Certificate issuer:       /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial:       010D0C9F432858481B595C099BFCD988AC9A3040
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/1125f1f8-f27d-3e8b-a900-237414837531.roa
Signing time:             Thu 05 Dec 2024 15:13:46 +0000
ROA not before:           Thu 05 Dec 2024 15:13:46 +0000
ROA not after:            Wed 05 Mar 2025 15:13:46 +0000
asID:                     376
IP address blocks:        132.213.9.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 13 Dec 2024 14:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1b:59:5c:09:9b:fc:d9:88:ac:9a:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
        Validity
            Not Before: Dec  5 15:13:46 2024 GMT
            Not After : Mar  5 15:13:46 2025 GMT
        Subject: CN=12cf4095-437f-4d63-b58e-38888aed3d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6b:0b:0a:09:4b:eb:7f:9b:66:e1:5b:04:bb:
                    3f:7d:00:a0:57:74:a8:b5:0c:af:1d:99:01:9b:3a:
                    c5:e6:db:69:11:13:53:71:64:f1:cf:ce:e4:ba:a5:
                    0f:a0:c4:66:21:75:76:e0:7b:89:0c:e8:2e:27:0b:
                    5b:c7:55:72:09:80:4e:bb:d7:46:fe:63:d1:8f:e4:
                    91:be:8e:db:96:f2:81:c5:06:7e:42:9f:eb:74:9c:
                    90:3e:b9:18:bf:9a:cb:6d:6e:88:23:69:39:31:c5:
                    2b:22:3e:19:e9:7d:0d:cd:45:33:76:ca:72:74:76:
                    95:71:c7:42:8e:85:9b:74:50:01:03:11:88:66:1d:
                    c8:a1:e6:15:c3:a9:dd:18:0a:53:70:b3:62:ff:68:
                    85:1c:82:da:98:8e:af:1e:68:5f:a4:bb:5b:2d:a1:
                    d4:98:e1:28:c8:03:87:5d:c2:d1:10:59:33:ec:c0:
                    45:3e:03:6c:3d:cd:51:a6:35:99:dd:1f:fe:00:fb:
                    b2:53:b6:b7:2b:6d:03:5f:3a:c0:23:40:70:a6:18:
                    90:dd:f9:6a:00:77:31:ef:aa:a9:e7:1b:2b:28:ae:
                    65:cc:f1:d9:7e:08:f2:4c:1d:80:1c:77:10:14:3f:
                    69:a5:db:b6:d0:7c:a5:f4:44:92:71:c7:36:f9:89:
                    bb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D5:74:BE:23:6E:A0:08:A0:D3:B8:80:EA:47:3B:FF:B6:B3:69:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/1125f1f8-f27d-3e8b-a900-237414837531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl

            X509v3 Authority Key Identifier:
                keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.213.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:ed:6e:3e:da:e4:4e:a9:3f:02:13:58:59:30:97:23:ba:4a:
         eb:5b:c9:df:fc:db:9e:c9:8e:6a:a0:d3:f0:7e:24:2c:1b:0b:
         ff:f9:92:66:38:53:ff:7c:03:f3:89:85:fc:e4:3f:9a:13:0c:
         5d:6d:02:bc:69:4a:00:a3:62:15:17:f7:5a:26:2c:fa:3e:05:
         e6:86:0d:98:ed:ad:67:b6:8d:08:2f:14:73:99:bb:5f:9a:6e:
         25:1c:44:7d:53:bd:f5:ab:c7:c9:08:72:dd:d6:d7:f0:2f:dc:
         01:da:73:87:38:d9:2a:20:74:71:bf:39:f7:0e:a2:0a:54:d1:
         01:f9:bf:2f:88:40:7d:94:d9:58:e2:61:f0:e7:e7:f4:69:4e:
         40:1b:57:3f:4e:76:8f:a8:8c:0d:8e:7d:ac:a4:df:6f:6d:ae:
         4f:7b:33:f5:5e:10:fb:10:9e:69:31:bc:69:a7:44:d8:1c:c0:
         88:85:0e:92:79:e1:6e:72:3b:1d:85:d2:01:9f:04:4a:f5:79:
         92:70:88:e3:5c:d1:77:b1:cf:4d:e4:64:25:df:57:be:d9:4e:
         f4:90:83:4e:b4:ff:5f:44:fc:e3:b1:40:d0:b3:ee:1f:eb:91:
         8e:23:7e:22:19:f8:4e:be:16:0d:df:4a:1b:20:66:8a:74:2d:
         ba:19:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:32:43 2024 by rpki-client on console-fra.rpki-client.org