Route Origin Authorization

$ rpki-client -vvf rpki.multacom.com/repo/MCOMCA/0/3137332e38322e34302e302f32342d3234203d3e20313530313630.roa
File:                     3137332e38322e34302e302f32342d3234203d3e20313530313630.roa (raw, json)
Hash identifier:          Ly9upMzf5z+LjoNikANnABkXbUoGI4V16+5PNztb8KQ=
Subject key identifier:   97:4A:14:33:62:CF:07:9A:BA:06:11:99:F9:F9:EE:3C:8C:04:08:25
Certificate issuer:       /CN=8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1
Certificate serial:       079699295E1C27D491BCEC5C3BA5BD0FFD2295BB
Authority key identifier: DC:62:76:88:30:B1:B1:20:17:16:51:8D:5E:6A:65:25:B0:23:59:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1.cer
Subject info access:      rsync://rpki.multacom.com/repo/MCOMCA/0/3137332e38322e34302e302f32342d3234203d3e20313530313630.roa
Signing time:             Mon 24 Oct 2022 14:25:56 +0000
ROA not before:           Mon 24 Oct 2022 14:20:56 +0000
ROA not after:            Tue 24 Oct 2023 14:25:56 +0000
asID:                     150160
IP address blocks:        173.82.40.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:96:99:29:5e:1c:27:d4:91:bc:ec:5c:3b:a5:bd:0f:fd:22:95:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1
        Validity
            Not Before: Oct 24 14:20:56 2022 GMT
            Not After : Oct 24 14:25:56 2023 GMT
        Subject: CN=3082010A0282010100C29CB0FD35E53B8A074C0744D0B7165A846D020295C397D067C9B3D82B80DE847B714F668972635EA0D0C2C3E95A23F01961445A07CC773EE0BB1ECAFB39668EB5CD1745E6B6E26C16D56D57446E39D470EEE83FADAA1C79D31F0098847407ECD4D3BB63EB7893A0EAD583E0FA290B94F1C0FDB27D6F635A089B99044D0F483FB7937DFF770B2CB1155C1B41669C4A139F1AED120AE1FF834E66052A812FDEA0B51D46EA54EDBC01A322D64AF32DAFCB2F14F0DAA6F70932DDC1CB95DE80F51C8B8A15353933D30CD2437E498EE7E5C929BDE84F78539831673E1752E01CBDB58BB0AEBE39A14D708AB5736EDF96F82EF2368CFE14C86A0A33E45577CD8DB0E50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:b0:fd:35:e5:3b:8a:07:4c:07:44:d0:b7:
                    16:5a:84:6d:02:02:95:c3:97:d0:67:c9:b3:d8:2b:
                    80:de:84:7b:71:4f:66:89:72:63:5e:a0:d0:c2:c3:
                    e9:5a:23:f0:19:61:44:5a:07:cc:77:3e:e0:bb:1e:
                    ca:fb:39:66:8e:b5:cd:17:45:e6:b6:e2:6c:16:d5:
                    6d:57:44:6e:39:d4:70:ee:e8:3f:ad:aa:1c:79:d3:
                    1f:00:98:84:74:07:ec:d4:d3:bb:63:eb:78:93:a0:
                    ea:d5:83:e0:fa:29:0b:94:f1:c0:fd:b2:7d:6f:63:
                    5a:08:9b:99:04:4d:0f:48:3f:b7:93:7d:ff:77:0b:
                    2c:b1:15:5c:1b:41:66:9c:4a:13:9f:1a:ed:12:0a:
                    e1:ff:83:4e:66:05:2a:81:2f:de:a0:b5:1d:46:ea:
                    54:ed:bc:01:a3:22:d6:4a:f3:2d:af:cb:2f:14:f0:
                    da:a6:f7:09:32:dd:c1:cb:95:de:80:f5:1c:8b:8a:
                    15:35:39:33:d3:0c:d2:43:7e:49:8e:e7:e5:c9:29:
                    bd:e8:4f:78:53:98:31:67:3e:17:52:e0:1c:bd:b5:
                    8b:b0:ae:be:39:a1:4d:70:8a:b5:73:6e:df:96:f8:
                    2e:f2:36:8c:fe:14:c8:6a:0a:33:e4:55:77:cd:8d:
                    b0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4A:14:33:62:CF:07:9A:BA:06:11:99:F9:F9:EE:3C:8C:04:08:25
            X509v3 Authority Key Identifier:
                keyid:DC:62:76:88:30:B1:B1:20:17:16:51:8D:5E:6A:65:25:B0:23:59:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.multacom.com/repo/MCOMCA/0/DC62768830B1B1201716518D5E6A6525B023593A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/0/3137332e38322e34302e302f32342d3234203d3e20313530313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:7a:8a:ff:31:41:53:02:41:fc:b5:7b:72:58:c9:6a:f3:8e:
         8f:1b:fe:4d:d9:f5:90:b4:5f:7d:78:80:dd:2b:a6:ce:52:f9:
         39:56:40:47:11:5a:9a:05:b3:a6:36:29:32:a2:9a:e8:10:fd:
         53:bc:5c:1e:50:54:a1:98:fa:58:81:2c:7f:6c:06:88:0d:e4:
         a0:37:5d:04:36:c4:34:5d:e9:08:0f:a9:2f:9e:be:e8:2b:3a:
         95:8f:95:64:af:bd:b1:6f:38:44:90:e0:7e:09:39:10:e6:b1:
         58:df:f1:fb:f8:b2:97:b7:89:89:bb:43:b9:ea:20:fa:15:7d:
         40:b0:ec:8c:bd:b3:68:4f:01:f1:a9:d0:83:50:f7:27:cf:b5:
         80:d7:6e:88:5f:46:cd:4c:b9:64:e7:e0:52:8e:69:31:69:56:
         61:c6:a3:43:c1:b5:3d:b3:81:eb:e6:5f:20:6c:62:84:f6:b5:
         1a:df:31:c7:3f:9e:4a:e1:e9:43:4f:6f:c5:88:a6:8e:3d:41:
         d1:00:50:7c:15:78:04:cf:e2:f1:42:fa:36:c2:ec:9f:46:12:
         46:64:6a:3c:57:70:a6:29:c4:fc:50:2e:2c:d5:ec:08:8e:02:
         39:8b:87:e8:55:dd:8a:a8:17:ab:84:b7:74:4f:18:d9:e9:d7:
         26:aa:a8:37
-----BEGIN CERTIFICATE-----
MIIHaDCCBlCgAwIBAgIUB5aZKV4cJ9SRvOxcO6W9D/0ilbswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODkwMTk0MDU5N2M0OGY3ODVhOTFkNzIxMmI5Y2E3MWIx
ZjFmMjBhZGU2ODU2OGU1YjEwHhcNMjIxMDI0MTQyMDU2WhcNMjMxMDI0MTQyNTU2
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEMyOUNCMEZE
MzVFNTNCOEEwNzRDMDc0NEQwQjcxNjVBODQ2RDAyMDI5NUMzOTdEMDY3QzlCM0Q4
MkI4MERFODQ3QjcxNEY2Njg5NzI2MzVFQTBEMEMyQzNFOTVBMjNGMDE5NjE0NDVB
MDdDQzc3M0VFMEJCMUVDQUZCMzk2NjhFQjVDRDE3NDVFNkI2RTI2QzE2RDU2RDU3
NDQ2RTM5RDQ3MEVFRTgzRkFEQUExQzc5RDMxRjAwOTg4NDc0MDdFQ0Q0RDNCQjYz
RUI3ODkzQTBFQUQ1ODNFMEZBMjkwQjk0RjFDMEZEQjI3RDZGNjM1QTA4OUI5OTA0
NEQwRjQ4M0ZCNzkzN0RGRjc3MEIyQ0IxMTU1QzFCNDE2NjlDNEExMzlGMUFFRDEy
MEFFMUZGODM0RTY2MDUyQTgxMkZERUEwQjUxRDQ2RUE1NEVEQkMwMUEzMjJENjRB
RjMyREFGQ0IyRjE0RjBEQUE2RjcwOTMyRERDMUNCOTVERTgwRjUxQzhCOEExNTM1
MzkzM0QzMENEMjQzN0U0OThFRTdFNUM5MjlCREU4NEY3ODUzOTgzMTY3M0UxNzUy
RTAxQ0JEQjU4QkIwQUVCRTM5QTE0RDcwOEFCNTczNkVERjk2RjgyRUYyMzY4Q0ZF
MTRDODZBMEEzM0U0NTU3N0NEOERCMEU1MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMKcsP015TuKB0wHRNC3FlqEbQIClcOX0GfJs9gr
gN6Ee3FPZolyY16g0MLD6Voj8BlhRFoHzHc+4Lseyvs5Zo61zRdF5rbibBbVbVdE
bjnUcO7oP62qHHnTHwCYhHQH7NTTu2PreJOg6tWD4PopC5TxwP2yfW9jWgibmQRN
D0g/t5N9/3cLLLEVXBtBZpxKE58a7RIK4f+DTmYFKoEv3qC1HUbqVO28AaMi1krz
La/LLxTw2qb3CTLdwcuV3oD1HIuKFTU5M9MM0kN+SY7n5ckpvehPeFOYMWc+F1Lg
HL21i7CuvjmhTXCKtXNu35b4LvI2jP4UyGoKM+RVd82NsOUCAwEAAaOCAmwwggJo
MB0GA1UdDgQWBBSXShQzYs8HmroGEZn5+e48jAQIJTAfBgNVHSMEGDAWgBTcYnaI
MLGxIBcWUY1eamUlsCNZOjAOBgNVHQ8BAf8EBAMCB4AwZQYDVR0fBF4wXDBaoFig
VoZUcnN5bmM6Ly9ycGtpLm11bHRhY29tLmNvbS9yZXBvL01DT01DQS8wL0RDNjI3
Njg4MzBCMUIxMjAxNzE2NTE4RDVFNkE2NTI1QjAyMzU5M0EuY3JsMIHzBggrBgEF
BQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQv
cmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMt
MjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlh
OC80ZGMwN2JhNi1kMzYwLTRjYTUtYTg2MC02MmU0ZTU0NzZmODQvODkwMTk0MDU5
N2M0OGY3ODVhOTFkNzIxMmI5Y2E3MWIxZjFmMjBhZGU2ODU2OGU1YjEuY2VyMH4G
CCsGAQUFBwELBHIwcDBuBggrBgEFBQcwC4ZicnN5bmM6Ly9ycGtpLm11bHRhY29t
LmNvbS9yZXBvL01DT01DQS8wLzMxMzczMzJlMzgzMjJlMzQzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDMxMzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAK1SKDANBgkqhkiG
9w0BAQsFAAOCAQEAUHqK/zFBUwJB/LV7cljJavOOjxv+Tdn1kLRffXiA3SumzlL5
OVZARxFamgWzpjYpMqKa6BD9U7xcHlBUoZj6WIEsf2wGiA3koDddBDbENF3pCA+p
L56+6Cs6lY+VZK+9sW84RJDgfgk5EOaxWN/x+/iyl7eJibtDueog+hV9QLDsjL2z
aE8B8anQg1D3J8+1gNduiF9GzUy5ZOfgUo5pMWlWYcajQ8G1PbOB6+ZfIGxihPa1
Gt8xxz+eSuHpQ09vxYimjj1B0QBQfBV4BM/i8UL6NsLsn0YSRmRqPFdwpinE/FAu
LNXsCI4COYuH6FXdiqgXq4S3dE8Y2enXJqqoNw==
-----END CERTIFICATE-----