Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230392e37342e392e302f32342d3234203d3e2033353933.roa
File:                     3230392e37342e392e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier:          dzce4ElholwKRmIbAC2O/HRCi0fowN67GVKTJJKXV24=
Subject key identifier:   CC:E4:D5:7D:34:D3:46:EF:D2:AD:0F:B3:F0:C5:ED:A7:AE:58:99:B1
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       623717D79868BBC8BBFFC2C0C9F1C1F87290ED26
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230392e37342e392e302f32342d3234203d3e2033353933.roa
Signing time:             Thu 26 Oct 2023 05:00:03 +0000
ROA not before:           Thu 26 Oct 2023 04:55:03 +0000
ROA not after:            Thu 24 Oct 2024 05:00:03 +0000
asID:                     3593
IP address blocks:        209.74.9.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:37:17:d7:98:68:bb:c8:bb:ff:c2:c0:c9:f1:c1:f8:72:90:ed:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Oct 26 04:55:03 2023 GMT
            Not After : Oct 24 05:00:03 2024 GMT
        Subject: CN=CCE4D57D34D346EFD2AD0FB3F0C5EDA7AE5899B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:b4:16:82:24:3e:af:81:eb:e8:c7:d2:e6:
                    47:6e:2d:22:c3:1b:34:04:eb:a0:0e:6e:2f:d2:7d:
                    e8:3c:e0:bc:49:2c:c2:40:cc:e8:81:32:e4:b0:51:
                    2c:20:71:65:d9:2b:ce:df:20:e6:e7:7b:bd:8f:5d:
                    16:14:87:56:9b:6f:eb:1b:b0:73:45:af:45:a3:19:
                    60:2b:6d:87:52:60:42:2b:49:30:ef:0e:43:c6:ce:
                    ba:e1:8f:94:71:e1:34:84:c8:bd:05:62:c8:b9:0f:
                    52:72:db:8d:69:8b:42:ae:00:47:32:6a:31:48:2b:
                    c5:82:b8:f0:e7:36:6c:11:73:e9:ef:0b:29:b7:7f:
                    77:57:7c:bf:0b:57:93:f4:f3:b3:b0:29:6d:88:f5:
                    03:2e:30:a1:c9:02:6f:cd:be:06:b6:c4:47:91:e3:
                    17:b2:3e:99:50:c9:09:76:8e:ba:da:4f:76:ad:a4:
                    c0:26:be:33:04:45:04:2c:64:21:a1:81:27:b0:72:
                    4c:72:92:5c:1b:84:3c:38:35:9c:87:78:56:5d:da:
                    4a:73:ab:4f:f9:71:8c:c4:2a:bb:89:b9:3b:f3:08:
                    c3:8d:9b:22:a1:fb:64:b9:17:97:45:45:a8:9b:dd:
                    54:4f:db:cf:f3:d5:c3:24:44:41:48:35:0d:4f:23:
                    70:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E4:D5:7D:34:D3:46:EF:D2:AD:0F:B3:F0:C5:ED:A7:AE:58:99:B1
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230392e37342e392e302f32342d3234203d3e2033353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.74.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:9b:43:4c:80:b6:6c:28:e5:d2:e5:e9:99:d3:29:34:67:f0:
         b7:41:4d:8b:ee:4e:e1:af:d8:a2:0e:70:e0:49:bc:3f:2c:19:
         3a:d2:7e:75:19:e8:c7:80:1d:d6:f5:3e:e4:37:36:c9:08:42:
         d3:bf:a5:85:a9:55:91:8b:ef:58:53:0a:43:61:bb:7c:99:36:
         fa:7d:b0:82:8f:2b:ad:2d:09:59:5e:ea:1d:ca:28:57:65:7f:
         d8:a6:f3:23:35:fc:c6:57:05:97:90:ca:ba:0d:c2:a5:5e:bd:
         7e:a9:07:10:75:e4:44:58:29:43:54:94:3c:f8:50:cd:aa:96:
         2a:ea:e3:1b:5e:9d:06:d3:26:bc:8b:69:cd:2c:b7:27:4f:61:
         b1:ab:a8:9f:f9:e4:3b:3f:0f:e1:42:eb:4f:99:33:e2:42:58:
         6d:e2:8e:a6:e0:8b:d3:a1:40:0a:9e:4e:41:12:de:e9:4d:67:
         d2:e8:57:32:7f:b4:54:2b:fb:03:7c:30:e6:7f:ec:05:62:0d:
         03:7c:b1:7b:37:68:48:11:ce:a2:11:1b:56:c3:49:fa:95:0b:
         bb:27:49:78:28:f2:93:6c:fc:e7:d7:dd:1d:81:82:70:4d:97:
         27:49:9a:90:0b:31:2b:b3:37:01:a9:25:ed:31:9f:aa:b8:70:
         29:a6:9d:d6
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUYjcX15hou8i7/8LAyfHB+HKQ7SYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2
MTZhYmU3NTVjOTMzODU3NzUwHhcNMjMxMDI2MDQ1NTAzWhcNMjQxMDI0MDUwMDAz
WjAzMTEwLwYDVQQDEyhDQ0U0RDU3RDM0RDM0NkVGRDJBRDBGQjNGMEM1RURBN0FF
NTg5OUIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5u0FoIkPq+B
6+jH0uZHbi0iwxs0BOugDm4v0n3oPOC8SSzCQMzogTLksFEsIHFl2SvO3yDm53u9
j10WFIdWm2/rG7BzRa9FoxlgK22HUmBCK0kw7w5Dxs664Y+UceE0hMi9BWLIuQ9S
ctuNaYtCrgBHMmoxSCvFgrjw5zZsEXPp7wspt393V3y/C1eT9POzsCltiPUDLjCh
yQJvzb4GtsRHkeMXsj6ZUMkJdo662k92raTAJr4zBEUELGQhoYEnsHJMcpJcG4Q8
ODWch3hWXdpKc6tP+XGMxCq7ibk78wjDjZsioftkuReXRUWom91UT9vP89XDJERB
SDUNTyNw0wIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFMzk1X0000bv0q0Ps/DF7aeu
WJmxMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv
Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw
OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzQvMzIzMDM5MmUzNzM0MmUzOTJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDMzMzUzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0UoJMA0GCSqGSIb3DQEBCwUAA4IBAQBN
m0NMgLZsKOXS5emZ0yk0Z/C3QU2L7k7hr9iiDnDgSbw/LBk60n51GejHgB3W9T7k
NzbJCELTv6WFqVWRi+9YUwpDYbt8mTb6fbCCjyutLQlZXuodyihXZX/YpvMjNfzG
VwWXkMq6DcKlXr1+qQcQdeREWClDVJQ8+FDNqpYq6uMbXp0G0ya8i2nNLLcnT2Gx
q6if+eQ7Pw/hQutPmTPiQlht4o6m4IvToUAKnk5BEt7pTWfS6Fcyf7RUK/sDfDDm
f+wFYg0DfLF7N2hIEc6iERtWw0n6lQu7J0l4KPKTbPzn190dgYJwTZcnSZqQCzEr
szcBqSXtMZ+quHAppp3W
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:44 2023 by rpki-client on console.sobornost.net