Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f2feb65d-ecf6-369f-82db-eb40ffa43889.roa
File:                     f2feb65d-ecf6-369f-82db-eb40ffa43889.roa (raw, json)
Hash identifier:          tuFVh21f0+3Q1EdtW1p151pRpUK8QIZzZ0Z5R0Y2g5U=
Subject key identifier:   AD:A8:37:CA:5E:06:DB:2D:EE:8F:AB:FB:33:C6:02:8A:E9:A9:5E:EA
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328583D55B48A99319F2E218235CFC0
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f2feb65d-ecf6-369f-82db-eb40ffa43889.roa
Signing time:             Tue 28 Apr 2020 04:00:00 +0000
ROA not before:           Tue 28 Apr 2020 04:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     16509
IP address blocks:        207.202.18.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 15 Jun 2022 20:43:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:55:b4:8a:99:31:9f:2e:21:82:35:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Apr 28 04:00:00 2020 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=ce2d5178-a4f4-42ce-90b2-d6d74af45b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:3e:3f:fc:e6:d0:62:ec:77:57:8d:74:02:
                    51:bf:d8:b6:8d:5c:cd:8c:62:60:c9:e2:4b:c4:35:
                    17:60:b9:4f:8f:ce:f6:bb:99:01:e6:bd:15:61:dd:
                    4b:1b:d3:79:e8:42:2a:db:a8:18:33:ad:8b:47:70:
                    d7:97:52:6e:a6:d2:0a:55:9f:53:7e:db:da:06:84:
                    9d:a5:99:14:3a:75:85:1c:86:52:e6:8a:6c:c9:be:
                    91:ce:1c:59:8c:5f:66:38:fa:db:00:89:fc:3a:e8:
                    10:44:d9:07:38:d6:41:c3:45:3e:73:73:e2:e5:e4:
                    5e:e6:25:82:15:1c:ed:9a:6d:80:99:50:fe:34:75:
                    08:f6:59:31:dc:91:1f:ab:aa:72:05:6c:75:e7:9d:
                    39:b9:56:3c:3d:98:2e:93:ca:98:f4:da:97:1c:b1:
                    35:f7:c2:25:cf:9a:ae:b9:7b:1e:d7:55:61:20:4e:
                    29:d9:ef:ed:8f:db:fc:49:df:d1:bd:22:b7:e9:75:
                    86:5c:85:a7:26:f7:11:ff:1d:ca:75:e1:c8:18:b4:
                    1c:c9:48:7a:09:15:0a:55:c1:20:e9:87:92:01:51:
                    4b:04:05:10:34:3c:42:df:af:58:c6:d9:73:e0:95:
                    6d:46:5c:1a:e9:db:de:8e:00:4d:3c:c9:7d:86:bf:
                    9e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A8:37:CA:5E:06:DB:2D:EE:8F:AB:FB:33:C6:02:8A:E9:A9:5E:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f2feb65d-ecf6-369f-82db-eb40ffa43889.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:89:05:70:81:26:3c:5f:a9:03:66:d4:a0:90:a5:75:1e:d0:
         b9:0b:fb:a1:19:77:8b:62:43:2e:76:c8:5d:45:f9:66:44:a5:
         82:9f:3d:02:f6:73:a2:c4:80:7b:a7:ed:7d:96:fd:72:c0:d4:
         30:1a:4e:89:24:40:be:32:7f:73:bf:8b:2a:3d:52:5d:aa:6e:
         df:c9:98:fb:0a:df:f1:52:67:e8:b4:a7:ad:db:0b:64:55:f1:
         45:9a:18:00:c0:78:e0:4f:44:5d:13:24:f7:4f:54:f3:0e:25:
         67:f0:39:45:55:30:4c:94:8d:93:a4:fc:48:b2:73:45:25:76:
         60:e5:77:18:1c:a6:5a:9e:9a:e8:97:72:db:b7:17:3b:d9:2e:
         bc:a5:cc:77:74:90:fb:30:7a:a0:05:dc:06:17:e3:1a:83:38:
         23:7a:29:38:f1:52:ff:48:00:06:ba:be:10:70:61:ab:e1:5f:
         22:63:2a:02:6f:c9:6d:74:8b:2b:1e:01:d9:ff:30:a0:09:d1:
         46:7b:10:dc:d0:77:81:22:5f:45:fb:eb:78:08:b9:df:03:cf:
         82:dd:5d:3c:c3:c9:cb:5e:5b:4f:2f:c5:16:92:f2:7f:d7:67:
         89:be:7f:89:5f:67:7d:36:6a:de:f8:3f:07:81:40:28:c1:c5:
         f4:83:23:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:04 2024 by rpki-client on console-ams.rpki-client.org