Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/bcc0f6f4-3c1b-36f3-b878-5c0df553575c.roa
File:                     bcc0f6f4-3c1b-36f3-b878-5c0df553575c.roa (raw, json)
Hash identifier:          lsk53SxuyBIoSEcjJYvsii6dEOctf7gjpabywzSdJYw=
Subject key identifier:   2C:3F:59:B2:C8:F7:0E:47:94:62:75:1D:4F:AF:E3:48:B6:77:F6:F1
Certificate issuer:       /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial:       010D0C9F432858481B6351C84A499658DF687850
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/bcc0f6f4-3c1b-36f3-b878-5c0df553575c.roa
Signing time:             Thu 05 Dec 2024 15:33:50 +0000
ROA not before:           Thu 05 Dec 2024 15:33:50 +0000
ROA not after:            Wed 05 Mar 2025 15:33:50 +0000
asID:                     376
IP address blocks:        132.213.96.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 13 Dec 2024 14:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1b:63:51:c8:4a:49:96:58:df:68:78:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
        Validity
            Not Before: Dec  5 15:33:50 2024 GMT
            Not After : Mar  5 15:33:50 2025 GMT
        Subject: CN=0b497c03-26b2-44de-9be4-94dc62cf49f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0e:f5:a8:c6:9d:10:d6:eb:28:0e:e9:ec:23:
                    ac:3e:a3:ba:d8:48:ba:44:6b:d3:02:8f:02:e2:04:
                    4f:01:3f:e5:2c:7f:aa:bc:54:26:63:99:56:a4:7f:
                    50:51:95:3c:d2:e6:2d:4f:0d:df:dc:38:1a:c7:b7:
                    e4:af:f5:9e:a7:9d:cd:81:7a:e0:f6:6c:00:bb:c3:
                    9e:08:ea:d9:e9:78:55:b0:70:5f:62:21:26:3a:c8:
                    db:1f:65:58:d4:c1:5f:60:03:06:f2:74:44:bb:36:
                    58:86:b0:1c:0b:a3:fa:e5:33:57:ad:18:32:f7:e8:
                    3d:11:bd:de:78:74:26:8e:0a:46:e3:66:bf:25:6d:
                    b4:52:c9:b9:d9:c1:3f:a1:bb:95:b2:c8:4e:ca:ec:
                    eb:65:b2:c1:c6:fa:b2:d1:04:6b:7a:33:14:d3:39:
                    96:9e:ba:f9:eb:09:f4:f2:de:73:bc:ee:42:a7:3a:
                    62:45:1e:61:de:5f:c9:bb:e4:ea:f0:03:ce:a0:2f:
                    c6:50:aa:26:23:9a:86:14:00:8c:a0:1d:67:6b:96:
                    d7:91:03:a5:5c:ef:3a:0d:6f:d8:5d:c5:12:1a:7d:
                    b6:56:2f:87:2b:0f:9f:f4:49:4a:ed:e7:8e:fc:ab:
                    59:9b:59:65:27:04:8a:58:bd:50:e0:7c:f9:7e:d0:
                    7f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3F:59:B2:C8:F7:0E:47:94:62:75:1D:4F:AF:E3:48:B6:77:F6:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/bcc0f6f4-3c1b-36f3-b878-5c0df553575c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl

            X509v3 Authority Key Identifier:
                keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.213.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:b4:1c:d8:12:f5:f7:b0:74:2a:a2:7c:18:6d:7a:6b:d5:10:
         19:a0:c4:34:9b:cd:8b:5e:45:52:1a:66:3e:5f:f8:30:4f:09:
         de:e6:80:5d:5d:2e:12:83:9c:e9:12:5b:b2:3c:63:79:82:8c:
         aa:50:df:6f:e1:a7:12:2c:a0:10:ae:24:96:42:1b:cd:39:a2:
         58:a4:9b:c4:73:bb:df:f4:64:b9:f7:08:12:6f:58:ec:84:d6:
         92:1a:80:41:40:04:57:0b:91:31:1d:20:41:12:b4:96:cd:7a:
         cc:0b:a1:70:0c:f5:49:e7:c8:bc:ac:18:80:ba:66:06:ff:1a:
         1a:5a:49:82:9b:7a:14:8b:05:52:d9:1a:e1:c3:f7:71:47:98:
         1d:74:bf:fc:1a:a6:62:11:a9:7e:3b:a6:50:40:e2:71:35:ac:
         9e:9b:e3:93:26:c9:25:d9:c4:47:d2:47:a9:99:ca:b1:07:ee:
         59:08:34:90:9c:4a:c6:b0:2d:72:70:c4:e4:ef:6b:66:58:e5:
         fc:7d:f1:a8:99:aa:6f:cb:fb:c6:9e:c9:6a:17:0f:e2:c6:b0:
         14:21:75:d0:68:34:e9:27:fa:39:e8:98:32:24:c3:25:eb:78:
         24:16:7e:e0:26:d6:bc:06:61:fa:b4:db:fe:b5:eb:93:49:5c:
         7a:d8:69:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:32:43 2024 by rpki-client on console-fra.rpki-client.org