Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/7ebc4018-ddd3-3c45-874c-6aa410221b7b.roa
File:                     7ebc4018-ddd3-3c45-874c-6aa410221b7b.roa (raw, json)
Hash identifier:          HsxPo7qH4RjFPrMbbvjT23HS4okbbv08qZk7Dkq1yrE=
Subject key identifier:   34:BA:78:45:D8:64:99:D0:37:68:9E:52:23:BD:64:A9:90:DD:5B:D4
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584575148AD4701B48798BD7E9C0
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/7ebc4018-ddd3-3c45-874c-6aa410221b7b.roa
Signing time:             Sat 06 Apr 2024 16:17:02 +0000
ROA not before:           Sat 06 Apr 2024 16:17:02 +0000
ROA not after:            Fri 05 Jul 2024 16:17:02 +0000
asID:                     14596
IP address blocks:        45.61.148.0/22 maxlen: 24
                          45.61.156.0/23 maxlen: 24
                          104.194.132.0/23 maxlen: 24
                          104.194.134.0/24 maxlen: 24
                          104.194.152.0/22 maxlen: 24
                          172.86.104.0/23 maxlen: 24
                          172.86.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 07 Apr 2024 19:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:75:14:8a:d4:70:1b:48:79:8b:d7:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Apr  6 16:17:02 2024 GMT
            Not After : Jul  5 16:17:02 2024 GMT
        Subject: CN=b12d80ba-85ad-4045-a32c-a04b79b43227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4f:94:16:2d:81:a3:de:3a:5f:30:79:b1:71:
                    71:ff:9e:1f:2f:55:06:ce:94:37:14:f4:b7:10:ee:
                    71:1a:74:c3:98:01:e9:1e:ca:2b:67:ea:ec:e1:d5:
                    73:05:4f:8f:e7:76:d9:d5:1d:df:b4:fd:2d:cb:eb:
                    02:9a:c1:ba:ff:71:26:28:4a:6c:87:3e:ca:1a:e8:
                    b3:a2:5d:9a:d9:aa:c4:b5:95:f0:80:dd:78:8b:36:
                    71:db:3f:03:b5:6d:4d:61:77:f7:fa:56:cb:47:ab:
                    78:06:4e:6b:a4:00:fb:d6:ef:e7:3a:51:be:eb:a4:
                    79:89:37:17:78:3a:1c:10:f8:b7:0a:2b:e1:64:1a:
                    87:3e:a2:74:b2:c7:9c:cb:01:ca:a4:82:b0:5f:63:
                    5c:ab:e7:5f:f0:b9:c2:82:cd:52:82:1b:d1:c7:3f:
                    09:95:54:18:01:7d:b2:55:cc:cf:61:1d:e8:e4:48:
                    ee:bb:46:03:02:8f:73:c8:bb:72:94:ac:20:f3:a0:
                    4a:ad:d9:d9:8e:21:a4:28:7a:81:87:ef:dd:9f:9b:
                    66:48:c8:9f:64:7c:93:4f:24:76:b1:f9:e0:50:56:
                    91:0e:50:e7:c9:0f:9b:53:5d:92:0e:2c:2d:e9:ab:
                    c9:a5:8e:a5:81:89:de:ab:d8:f5:e6:b0:96:62:ca:
                    5c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BA:78:45:D8:64:99:D0:37:68:9E:52:23:BD:64:A9:90:DD:5B:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/7ebc4018-ddd3-3c45-874c-6aa410221b7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.148.0/22
                  45.61.156.0/23
                  104.194.132.0-104.194.134.255
                  104.194.152.0/22
                  172.86.104.0-172.86.106.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:98:02:f2:be:7d:34:f3:cf:26:97:74:cd:da:ba:43:49:c0:
         0f:12:af:b4:2f:cc:cd:5d:d1:bc:e9:4a:11:97:30:48:1d:53:
         49:f3:89:98:53:88:61:6f:b4:9c:3c:d4:93:92:0d:67:00:01:
         3a:33:0b:1d:ea:4e:5b:ff:6b:76:99:5d:4e:2f:94:9f:a9:5b:
         35:a7:68:81:96:3e:00:8e:61:f6:fa:5e:de:ba:0e:b7:63:3e:
         5d:14:f1:9e:ae:a8:86:42:45:cd:43:13:87:95:fa:ad:00:1a:
         f7:20:0c:57:b7:f6:f3:aa:d1:24:1d:a7:21:d5:2a:fe:5f:ce:
         3a:05:e6:ed:c9:90:f6:46:b4:2a:28:8a:da:85:44:ba:5a:25:
         f6:f9:2c:ae:c1:3a:87:f1:97:97:d2:43:5d:4b:01:8e:5d:a8:
         6d:89:43:42:c9:80:db:8e:b8:e2:46:f8:b6:7d:e2:22:81:b6:
         2e:f4:81:96:27:9a:91:88:ea:18:e9:a3:56:cd:d2:21:64:78:
         54:00:f5:cc:ba:a2:d7:ee:52:45:e5:2e:d8:f5:97:62:d8:30:
         f1:f3:9b:af:ea:da:73:ea:4d:0e:56:2e:78:1a:eb:e5:d2:e1:
         00:68:11:5c:6b:d5:df:50:c7:70:70:0d:ba:c4:c2:ba:16:3b:
         34:26:f4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:41 2024 by rpki-client on console-ams.rpki-client.org