Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3137332e38342e31342e302f32342d3234203d3e2035363530.roa
File:                     3137332e38342e31342e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          NKRn2OnLTfZfQ4GzRz0in8dDOAwQBzMTHewAFgLN298=
Subject key identifier:   75:A6:D6:7E:D5:CD:3C:46:1F:DA:E6:2C:21:AC:87:74:8C:42:93:A2
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       64928C19ADACAC4FB627B6BB3FCB7704E14A10B8
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3137332e38342e31342e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:43:49 +0000
ROA not before:           Thu 02 Nov 2023 11:38:49 +0000
ROA not after:            Thu 31 Oct 2024 11:43:49 +0000
asID:                     5650
IP address blocks:        173.84.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:92:8c:19:ad:ac:ac:4f:b6:27:b6:bb:3f:cb:77:04:e1:4a:10:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Nov  2 11:38:49 2023 GMT
            Not After : Oct 31 11:43:49 2024 GMT
        Subject: CN=75A6D67ED5CD3C461FDAE62C21AC87748C4293A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5c:2d:d9:60:48:0a:cd:68:ec:b4:3d:bf:f0:
                    d8:a2:ae:6d:07:74:21:ea:29:79:4d:92:f5:6a:b3:
                    90:66:81:ce:8c:15:bd:c6:2e:f4:ad:ec:13:10:aa:
                    15:d4:d2:00:ff:9a:ac:c8:18:ea:3a:a1:44:29:87:
                    c4:21:e7:4f:2c:51:50:58:c0:b6:c4:dd:f1:40:07:
                    41:00:b3:6a:b3:28:46:17:20:53:8f:ab:5f:32:1e:
                    76:36:ee:05:05:03:e7:87:4b:bd:b7:78:32:19:2f:
                    74:58:19:dc:fa:04:41:57:43:9b:ea:52:ea:97:84:
                    31:1d:b1:7c:81:1b:58:08:cd:87:04:5f:bf:4b:c3:
                    89:8a:42:2e:c2:40:fd:8f:3d:03:1f:d2:f3:df:02:
                    80:1b:27:05:b9:f0:1d:57:d2:56:b0:af:f9:98:88:
                    50:83:21:38:b8:df:de:90:d7:6b:6e:92:c6:11:c6:
                    38:40:7b:54:f2:19:81:24:79:b0:00:cc:f7:3b:2b:
                    83:94:25:1a:af:e5:bc:3b:c4:2d:38:da:4e:96:bc:
                    c1:f1:18:08:bf:36:f8:72:c4:5a:79:57:6c:a2:3b:
                    07:af:a9:c0:b1:40:ea:6f:7a:ad:e8:fe:2b:c7:39:
                    7b:4c:1f:cb:db:b1:bd:ce:0d:6f:8a:7f:f0:5a:46:
                    3e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A6:D6:7E:D5:CD:3C:46:1F:DA:E6:2C:21:AC:87:74:8C:42:93:A2
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3137332e38342e31342e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.84.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:a9:45:8f:22:dd:8d:56:79:a0:7b:ee:70:3c:78:d3:d2:0c:
         5f:5e:15:ae:e3:85:ab:5c:1a:8a:6e:ce:97:a1:a6:a5:79:9a:
         3f:3a:8c:0a:e7:1e:ba:5f:97:c2:db:51:eb:41:c7:c0:64:e2:
         ab:27:c9:a9:3e:b7:3e:53:a3:e4:e9:f5:91:8f:38:f0:cd:06:
         5d:31:bf:fa:e5:cf:e8:6d:03:1b:e0:09:8a:35:e3:08:48:e3:
         38:d0:e7:61:dc:4b:5d:fe:98:99:56:31:13:71:0f:56:3d:25:
         fe:47:1b:8c:15:57:89:62:29:1e:2c:1e:f4:65:72:c7:38:d5:
         49:45:f4:cd:d7:73:ab:1a:20:4c:92:38:37:c1:59:39:9b:9a:
         42:48:ce:50:fa:e5:1e:c1:98:12:58:27:c5:54:51:fe:56:17:
         e2:73:6b:85:d2:e5:c4:a3:c3:31:37:cf:26:7d:9c:75:48:5f:
         f9:b6:18:f8:04:eb:9a:0d:d8:52:6a:65:48:1e:7e:a2:0d:6c:
         8f:4e:4f:7e:28:04:3d:b1:75:4a:7f:04:8f:fe:1c:38:9d:a0:
         7c:75:de:dc:58:ff:a1:87:46:32:06:5b:36:ad:2a:60:e9:8b:
         0e:27:87:cf:8b:ae:10:56:5d:b8:05:db:30:ee:94:07:95:d5:
         75:8b:7f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:44 2023 by rpki-client on console.sobornost.net