Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8ac39aa0-0a17-30b8-b92e-a046e37be10d.roa
File:                     8ac39aa0-0a17-30b8-b92e-a046e37be10d.roa (raw, json)
Hash identifier:          GG1/aIuz9Ga/JWfntTgYK7r4s6Xz4L15cinn7IHcbqE=
Subject key identifier:   54:E1:27:76:77:2F:BA:80:4D:27:A8:1B:3E:F0:28:87:7B:A1:D0:EF
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF0ED2BB
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8ac39aa0-0a17-30b8-b92e-a046e37be10d.roa
Signing time:             Sat 13 Jun 2020 19:01:23 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Sun 07 Apr 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        52.136.176.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 14 Oct 2022 21:27:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0e:d2:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Apr  7 04:00:00 2030 GMT
        Subject: CN=8e4d4821-b8a2-4394-ba7f-64391b1cb88a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:5f:4a:c6:18:be:7b:85:56:74:26:e2:d5:
                    e3:82:74:3e:8e:15:eb:80:e6:fa:28:81:fc:0c:6c:
                    5e:fc:09:50:e6:fa:58:ca:24:70:95:5b:93:1d:c2:
                    6c:10:e8:73:8b:65:bd:e1:4c:94:14:73:1c:38:86:
                    bf:ef:9e:4c:4b:76:50:0c:3d:7e:3f:6c:52:a8:4f:
                    d2:a4:0e:b0:63:59:4a:d3:43:06:63:6f:56:b9:09:
                    3e:35:94:b1:87:3e:9b:cd:14:3a:71:5b:73:f6:60:
                    cf:f0:c3:b7:2c:fd:af:25:78:1e:66:e4:01:f5:83:
                    d7:42:03:35:54:24:e4:47:bc:1e:a9:eb:28:56:13:
                    f6:cc:d5:cd:f2:32:da:f2:d8:02:d4:ea:07:98:c6:
                    38:06:47:ef:5a:9e:8a:d0:7d:59:b1:59:84:0a:40:
                    75:e0:99:f2:cc:02:0c:ef:97:9e:2b:fd:a1:91:38:
                    fd:04:40:06:53:bd:ab:cb:56:2d:46:fc:59:81:8e:
                    55:fd:51:f7:16:33:e8:cb:4f:86:50:3a:0e:1f:08:
                    2a:cf:00:83:8e:5c:29:fb:92:99:df:e2:2e:8a:88:
                    bb:f9:3c:9a:5e:2b:82:c2:03:1b:25:56:69:1b:c8:
                    18:06:3a:76:44:7f:44:c2:0c:7f:56:bf:49:e0:78:
                    d9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E1:27:76:77:2F:BA:80:4D:27:A8:1B:3E:F0:28:87:7B:A1:D0:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8ac39aa0-0a17-30b8-b92e-a046e37be10d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.136.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:1f:cf:52:4e:c8:5f:9a:1c:47:a1:51:ae:ec:bf:50:14:90:
         7a:4c:9f:89:ad:61:a0:1c:2f:d8:df:80:a5:f7:46:88:a9:1c:
         61:47:0c:da:a1:36:51:e8:5c:23:c5:c5:ea:a2:1f:b5:dc:33:
         bc:55:cc:81:6d:b5:48:4c:0e:f0:45:b0:8c:d9:33:53:fd:fd:
         6d:03:ad:8a:0f:db:27:a1:c0:b6:2b:ac:87:13:67:6a:64:7e:
         c3:e9:96:cf:28:ed:7f:fd:f4:bb:75:a9:e4:35:8c:e8:27:ef:
         76:50:ad:30:ad:b0:4d:76:ea:e4:94:3f:b9:5b:8b:94:20:2d:
         07:d8:0f:48:1b:5a:f7:24:23:37:10:1e:50:9e:07:84:bc:2b:
         09:9a:a6:ff:5c:2a:53:f6:5c:39:62:55:07:7d:7b:05:f0:cb:
         4a:2a:9d:7d:df:bb:3c:6c:61:f6:f3:85:09:53:de:3d:da:69:
         f3:37:57:44:ba:18:87:8d:81:a3:1c:99:03:42:4d:4c:3e:7f:
         d1:d9:e1:67:76:d2:3a:5f:e5:77:d3:94:f4:6f:83:b1:f2:a5:
         60:b3:15:a3:08:76:2b:70:81:91:f4:40:87:11:a1:ad:6c:33:
         fb:14:f9:47:df:c5:ba:9b:11:22:bb:47:0f:9d:c7:54:20:32:
         06:a2:39:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:40 2024 by rpki-client on console-fra.rpki-client.org