Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136322e302f32342d3234203d3e2036303739.roa
File:                     3139392e3230342e3136322e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          GIAwWlHkBYkj2xXrfgA59ApTuB27/vPxCs5hsGhu/TM=
Subject key identifier:   C0:42:B7:1B:BD:9C:2A:57:B1:68:35:D3:13:2D:32:07:FD:9E:24:05
Certificate issuer:       /CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
Certificate serial:       2C804A6597515216AEB0EB1DA96C2E846FF31680
Authority key identifier: 9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136322e302f32342d3234203d3e2036303739.roa
Signing time:             Fri 23 Jun 2023 15:32:58 +0000
ROA not before:           Fri 23 Jun 2023 15:27:58 +0000
ROA not after:            Fri 21 Jun 2024 15:32:58 +0000
asID:                     6079
IP address blocks:        199.204.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:80:4a:65:97:51:52:16:ae:b0:eb:1d:a9:6c:2e:84:6f:f3:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
        Validity
            Not Before: Jun 23 15:27:58 2023 GMT
            Not After : Jun 21 15:32:58 2024 GMT
        Subject: CN=C042B71BBD9C2A57B16835D3132D3207FD9E2405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:53:7c:8e:cc:96:36:aa:8b:07:51:1e:97:2d:
                    99:27:17:c3:51:66:e7:f5:24:21:7b:82:48:8f:6c:
                    07:f6:61:d8:99:d5:2a:1e:0f:25:9c:42:5e:eb:df:
                    2a:f8:7b:ff:f4:8f:ed:3c:18:ab:79:4a:48:92:80:
                    b4:39:c0:5c:19:cf:c6:55:d9:06:8e:59:bf:ba:3b:
                    70:c7:b2:73:15:9b:7b:f2:6b:be:ba:6c:6b:62:88:
                    1b:1c:ef:96:d4:6b:ff:dd:1c:12:62:12:63:1a:67:
                    bf:4b:df:cf:af:6c:c0:9c:c7:7f:cb:f2:d4:16:41:
                    76:2a:7b:f6:50:8e:6d:d3:2b:3f:01:89:4e:b1:d8:
                    47:d3:22:18:2e:8b:36:95:e6:96:42:e7:cf:ee:11:
                    95:ed:6e:b0:6a:8f:e8:e4:63:bb:76:d5:62:d8:f3:
                    1d:ba:81:a3:a1:76:88:68:56:f4:4c:59:cd:3d:50:
                    41:28:c5:d9:9b:77:89:e8:30:64:7d:7b:31:00:28:
                    65:54:ce:d4:2d:18:16:80:f8:b4:2c:e3:13:65:7d:
                    35:c3:d2:c9:38:67:12:67:41:49:ea:ba:d5:c6:a6:
                    1b:2e:52:bd:b1:6b:2f:7e:ad:a1:68:76:88:a7:d9:
                    25:3a:16:63:18:ba:3b:fa:b2:58:04:f6:db:95:d2:
                    f7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:42:B7:1B:BD:9C:2A:57:B1:68:35:D3:13:2D:32:07:FD:9E:24:05
            X509v3 Authority Key Identifier:
                keyid:9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136322e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.204.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:3d:d2:66:f2:57:15:10:24:4a:6b:2b:c5:04:e5:15:7f:fa:
         8b:c9:73:17:ef:1e:87:f5:c3:36:d5:46:6a:1d:e4:1a:92:38:
         04:36:a9:f4:74:f0:62:2b:54:f0:45:f3:ff:2d:25:1b:dc:3e:
         fd:8f:cb:7a:d2:df:ca:b8:37:4f:88:c8:b7:27:3e:a9:48:d8:
         21:69:2a:56:d6:aa:c9:eb:42:a5:d2:58:10:85:be:0b:ce:b2:
         64:de:c0:c6:c2:a2:07:e6:0f:c9:36:d5:42:2e:26:d9:05:e3:
         96:e5:6c:59:80:98:8f:6d:a2:d4:3e:60:0f:95:ef:55:b1:57:
         22:ce:a0:26:b1:ba:43:01:3e:87:5d:9c:c7:ce:2c:e7:c9:90:
         ce:23:5d:ab:c0:6e:77:50:69:37:b3:bc:a5:e5:7b:ca:3f:b4:
         25:bb:37:d4:58:37:53:ea:32:a4:1f:77:89:36:7c:d6:4a:0a:
         0d:9f:8a:ed:e4:14:49:13:5f:09:bc:55:b4:4e:d9:a7:af:34:
         53:44:92:a8:94:9a:3d:c9:a7:d8:81:5d:48:57:9d:f7:4f:f2:
         6a:57:e4:8d:f8:23:58:e7:11:2a:cd:47:9d:bd:4c:98:d3:eb:
         d4:76:dd:6a:60:d1:fd:e7:be:9b:16:b4:60:39:02:ee:ce:bc:
         02:51:ba:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:52 2023 by rpki-client on console.sobornost.net