Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3138342e392e32382e302f32342d3234203d3e2035363530.roa
File:                     3138342e392e32382e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          ncqynDaSxcaks1IOxGEX7so/1AO1+Qxccmw1GQPVNM4=
Subject key identifier:   0C:A1:33:10:78:77:C7:58:DB:7B:FB:4F:62:CB:08:3B:75:D4:92:F4
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       1BEAC90604E0DEEB9BCF4AB20530A70074625050
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3138342e392e32382e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:44:20 +0000
ROA not before:           Thu 02 Nov 2023 11:39:20 +0000
ROA not after:            Thu 31 Oct 2024 11:44:20 +0000
asID:                     5650
IP address blocks:        184.9.28.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ea:c9:06:04:e0:de:eb:9b:cf:4a:b2:05:30:a7:00:74:62:50:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Nov  2 11:39:20 2023 GMT
            Not After : Oct 31 11:44:20 2024 GMT
        Subject: CN=0CA133107877C758DB7BFB4F62CB083B75D492F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:63:b3:30:59:b2:f6:13:5b:4c:0f:95:d5:f1:
                    94:41:6a:d5:f8:84:af:50:39:0f:55:38:c0:7c:29:
                    a4:d6:56:b0:9e:17:36:a3:f4:5c:ce:b5:89:1a:a3:
                    51:f5:c9:85:f7:ad:64:e9:83:bc:2f:5d:7b:fe:8f:
                    f8:eb:35:f8:52:f0:f2:ae:3d:2c:74:46:1a:1d:4b:
                    73:08:b5:2b:52:b4:86:86:46:2c:37:09:e2:92:09:
                    33:74:e1:e8:12:06:af:dd:a6:a5:15:59:6f:a9:47:
                    2e:25:5a:5e:7a:22:4e:4c:9f:7a:67:f9:aa:d4:83:
                    ae:83:ac:c0:f8:2f:dc:03:98:c8:b3:21:81:74:41:
                    70:1c:ff:f9:be:13:f6:0e:e5:5a:3b:30:f2:84:95:
                    27:2c:83:f0:cc:7f:ee:fa:cb:8a:87:28:33:9a:a8:
                    10:13:06:82:17:5f:32:bf:4f:70:fa:56:eb:90:3a:
                    07:3a:8c:50:4b:69:b6:7b:bd:03:93:bf:84:e4:23:
                    bb:d8:32:c8:9f:4d:8e:d9:bf:a0:ed:25:8d:51:4d:
                    a7:bb:ad:59:ff:31:0e:a2:95:98:48:26:5e:7f:80:
                    8d:f3:ee:18:7d:80:ec:3e:7a:82:54:ba:08:2f:6a:
                    09:33:c9:90:60:bd:c1:07:3c:3c:27:8d:18:46:e7:
                    0e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A1:33:10:78:77:C7:58:DB:7B:FB:4F:62:CB:08:3B:75:D4:92:F4
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3138342e392e32382e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.9.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:e3:13:90:e1:03:03:67:cb:4d:38:97:f5:e0:60:43:db:03:
         9a:d5:a5:f0:10:11:7b:c1:d3:65:39:98:8f:4c:e0:71:1f:50:
         0c:3e:7d:3a:5b:12:b4:9c:7c:4d:c6:6c:13:e5:99:07:fa:06:
         39:64:4a:7e:6e:b9:5b:8e:0e:a0:a8:d3:72:1c:50:ba:a3:c8:
         33:a0:5b:60:2a:5a:76:4a:51:d7:54:8b:2b:f3:22:2a:bd:e2:
         60:f0:9a:e2:be:f9:58:9f:dd:c5:d7:92:fe:69:71:8c:f2:1e:
         42:fd:37:b3:06:d5:02:ce:76:ff:61:d6:29:8e:38:6b:26:45:
         2d:6a:81:21:20:5d:35:31:c2:5b:fb:fa:9b:99:78:d0:94:ee:
         98:8c:f6:08:5f:c5:77:48:52:8f:0c:9c:b9:00:4d:a6:1c:80:
         e2:e5:86:bf:52:75:99:63:d9:9e:2c:88:7e:cc:56:05:ac:33:
         4a:4d:87:8e:e9:9d:b9:10:97:3b:aa:95:d3:f9:71:ee:ad:67:
         67:6a:cb:5c:4e:0a:fe:80:37:93:34:eb:65:e4:45:81:2e:4c:
         35:aa:4d:0c:e6:6f:7d:c4:0d:f9:59:19:c1:b3:aa:97:07:bb:
         e2:74:ae:cc:6c:5c:f9:73:02:9d:fb:03:ed:23:95:26:71:f3:
         54:cc:22:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:44 2023 by rpki-client on console.sobornost.net