Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136332e302f32342d3234203d3e203230343733.roa
File:                     3139392e3230342e3136332e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          Zv9FZOC5Yf52aksL02SY9YAa07bAumhjZjSDkeyLjSM=
Subject key identifier:   78:4F:BF:8C:64:BD:EE:3B:0E:97:B9:1A:04:07:5D:48:AE:15:BB:23
Certificate issuer:       /CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
Certificate serial:       6F04742D65F5EED3AC7E48F2A5E91DCA462E258D
Authority key identifier: 9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136332e302f32342d3234203d3e203230343733.roa
Signing time:             Fri 10 Feb 2023 08:26:26 +0000
ROA not before:           Fri 10 Feb 2023 08:21:26 +0000
ROA not after:            Fri 09 Feb 2024 08:26:26 +0000
asID:                     20473
IP address blocks:        199.204.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:04:74:2d:65:f5:ee:d3:ac:7e:48:f2:a5:e9:1d:ca:46:2e:25:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
        Validity
            Not Before: Feb 10 08:21:26 2023 GMT
            Not After : Feb  9 08:26:26 2024 GMT
        Subject: CN=784FBF8C64BDEE3B0E97B91A04075D48AE15BB23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:66:34:e1:96:ad:3e:fb:ee:7e:d2:ff:cc:
                    2c:43:21:9a:c7:2a:26:ed:68:a2:2c:6a:f9:1d:11:
                    7d:ad:c8:56:f7:10:39:0f:71:1f:e5:40:4a:1c:f6:
                    fa:f5:66:82:5e:c5:8e:f3:89:ce:8a:47:a4:e0:de:
                    ce:90:fa:d0:5c:bd:33:e1:ea:86:81:94:fa:d5:89:
                    ec:fa:e7:65:7b:fc:07:97:90:fe:cd:b6:d5:16:a5:
                    36:d7:9e:be:61:04:61:da:66:50:ff:8e:b7:88:e2:
                    df:e8:f7:6f:3a:dd:75:61:8b:98:de:14:b5:0f:1a:
                    ba:65:f0:98:a0:97:ee:00:0b:1e:bd:a9:b8:b5:30:
                    8d:c2:23:b3:63:bb:ed:35:03:a7:70:49:d3:a6:bb:
                    ed:6d:27:be:eb:b7:fd:cc:ee:15:98:e8:49:a8:f8:
                    bd:7a:27:1c:c7:49:4b:fb:5d:ee:9d:8f:7a:32:38:
                    0a:7d:87:49:ea:4f:58:0d:31:b6:78:03:1b:9f:55:
                    d9:b9:56:04:ba:07:18:9c:f9:41:fc:2d:7c:35:4d:
                    25:9d:c7:58:07:a6:f8:f1:6b:96:8a:63:c3:17:fd:
                    ca:b9:9e:af:bf:75:57:df:d0:71:7a:20:72:30:54:
                    95:80:58:08:43:c0:04:90:39:82:ca:55:d1:70:cc:
                    8e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4F:BF:8C:64:BD:EE:3B:0E:97:B9:1A:04:07:5D:48:AE:15:BB:23
            X509v3 Authority Key Identifier:
                keyid:9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136332e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.204.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:08:b6:93:28:0b:53:8a:83:f6:1d:3d:a4:d5:1a:62:da:2c:
         b9:57:22:1f:f4:e6:9b:46:9a:58:70:b1:bd:15:30:51:4a:d9:
         e9:98:38:44:0a:e5:ce:2c:bd:d1:b1:cb:18:54:10:52:27:00:
         b6:e4:6a:87:53:57:3a:7c:f2:7f:05:a5:1c:e5:bb:33:db:7b:
         ba:f4:a7:b4:cd:9e:d3:83:44:85:f2:8a:01:8d:7d:5a:e6:d1:
         80:2b:86:45:ef:13:3d:21:0e:19:9b:7d:45:a3:fc:29:91:94:
         e9:2f:c2:27:33:56:68:a3:b5:72:94:b2:a8:d4:c2:2b:f7:e0:
         c1:cb:bb:b6:1c:8e:83:d4:c8:7c:26:7c:22:9d:3d:c1:44:9c:
         9a:db:db:8c:b8:63:ec:4e:be:3a:73:f1:f3:ec:35:e5:01:cf:
         7c:23:f0:99:30:7c:48:c8:da:14:7d:d1:92:2c:55:06:3f:be:
         f9:fd:ea:a8:d1:66:44:1c:55:f1:3c:bc:6b:bf:5c:a1:72:0c:
         9e:bd:8b:d2:80:20:4e:76:5e:d9:1d:29:90:2e:a8:35:5e:03:
         9c:1a:e3:4f:2c:c8:95:e4:02:05:9d:f4:3c:5a:f6:f8:de:3c:
         84:8c:02:4f:13:e3:9a:e5:21:cf:87:12:17:5b:f9:f5:48:31:
         4e:1b:48:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:52 2023 by rpki-client on console.sobornost.net