Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e203436353733.roa
File:                     34352e3133352e3136312e302f32342d3234203d3e203436353733.roa (raw, json)
Hash identifier:          X0NnHNEpHcI4daVfUedqB++efUY+vTzP1Te7EcRF+10=
Subject key identifier:   79:0B:04:CC:40:8F:9E:58:C3:B0:A0:34:94:20:4C:B2:7F:10:2E:D3
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       716B154670D2C1C7DAAC1E587BBE55713843AC66
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e203436353733.roa
Signing time:             Mon 28 Nov 2022 11:10:30 +0000
ROA not before:           Mon 28 Nov 2022 11:05:30 +0000
ROA not after:            Mon 27 Nov 2023 11:10:30 +0000
asID:                     46573
IP address blocks:        45.135.161.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:6b:15:46:70:d2:c1:c7:da:ac:1e:58:7b:be:55:71:38:43:ac:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Nov 28 11:05:30 2022 GMT
            Not After : Nov 27 11:10:30 2023 GMT
        Subject: CN=790B04CC408F9E58C3B0A03494204CB27F102ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:82:c1:f0:e6:59:de:be:7e:06:e0:1a:3d:d7:
                    37:80:d0:6b:10:30:43:0f:c9:bc:23:a9:79:5c:2d:
                    6b:fd:e5:5b:20:7c:f5:07:82:0e:0e:8d:f0:28:e2:
                    af:46:46:56:5c:8c:4a:19:92:33:9d:0f:c3:0b:1e:
                    e8:a1:27:6b:c6:2b:e9:35:4b:2c:2c:7a:fb:c2:f4:
                    15:de:b2:52:f3:1e:bc:04:08:80:6b:b5:0b:53:91:
                    a9:7c:d0:a1:32:77:20:a8:9f:00:c1:d3:dc:b1:61:
                    41:d5:50:76:c6:9e:32:b7:f0:42:ba:91:e9:9c:1f:
                    ae:62:43:d4:d7:29:61:27:7e:04:ef:46:5a:cc:00:
                    7e:be:4e:12:7a:72:26:5d:a5:43:3f:01:57:44:09:
                    41:07:50:a9:1d:b5:7e:a2:98:9a:23:fe:d8:39:b6:
                    84:28:8c:36:d0:c4:7e:56:b6:0e:94:b0:01:4a:a1:
                    37:6a:d6:81:e7:0a:29:22:8e:40:47:54:9a:bc:4a:
                    0d:7e:71:c9:8e:cb:85:73:7a:36:5c:18:62:d8:04:
                    f3:81:b1:e2:30:40:3a:ab:6c:e7:b4:3d:28:b1:ec:
                    8c:91:54:64:ae:43:8b:08:1c:a6:a3:eb:89:e3:e0:
                    dc:5c:65:c1:d5:dd:ba:46:ee:1c:84:71:9d:72:e0:
                    8b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0B:04:CC:40:8F:9E:58:C3:B0:A0:34:94:20:4C:B2:7F:10:2E:D3
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e203436353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:71:40:ea:7d:c8:94:f6:13:f5:51:f7:2e:79:0f:d1:47:1f:
         3e:67:14:41:43:50:81:39:d6:cf:71:bf:84:5e:cf:d4:57:ef:
         12:34:8a:6c:81:65:20:16:ea:6f:a2:c0:4c:5d:e7:a3:1d:12:
         04:fd:13:c5:c1:7b:dd:f5:17:d5:71:c3:2d:b7:c4:90:ad:a3:
         59:c2:f3:8b:06:dc:0d:33:95:1f:8a:45:c3:2e:aa:82:db:ff:
         0a:5d:f0:9b:86:d8:bc:74:bd:41:61:53:15:a1:fb:57:5d:8d:
         fc:fa:8a:29:18:70:3d:45:5e:7b:87:28:74:c2:91:25:a5:96:
         b9:40:2e:60:03:5b:7b:7d:f1:cf:52:79:14:e6:2a:32:a1:9b:
         a5:1c:bf:bf:74:ea:57:0e:41:37:f4:9e:a9:e1:1c:94:4d:0d:
         fa:25:25:c3:7e:1f:eb:fa:0b:8a:8c:13:90:73:5a:72:ee:72:
         2b:cc:38:85:97:91:9b:42:62:f7:6b:3a:5d:57:78:61:3f:b4:
         49:17:39:4b:36:56:4a:83:12:8e:43:30:b2:bd:b5:bb:3a:0d:
         27:d6:24:b3:b7:c6:44:0a:e9:7b:ac:68:07:fb:ad:77:ec:36:
         34:ad:70:ef:80:93:4a:8d:80:0f:38:9f:fe:0d:1a:e9:d1:b1:
         c8:f4:36:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:20 2023 by rpki-client on console-fra.rpki-client.org