Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS132335.roa
File:                     AS132335.roa (raw, json)
Hash identifier:          mjwj0yziPYIdYxGDUBkXiNyfh5Yfpu9EcOUTRPp/llA=
Subject key identifier:   A5:7F:B8:E1:C1:06:80:A7:54:3E:E1:79:09:C8:F9:98:70:64:0D:9D
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       512A5BF2D884F015C7C43D0CBE1E8B510D8CEE58
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS132335.roa
Signing time:             Sat 27 Apr 2024 04:55:04 +0000
ROA not before:           Sat 27 Apr 2024 04:50:04 +0000
ROA not after:            Sat 26 Apr 2025 04:55:04 +0000
asID:                     132335
IP address blocks:        104.234.174.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 19 Oct 2024 00:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:2a:5b:f2:d8:84:f0:15:c7:c4:3d:0c:be:1e:8b:51:0d:8c:ee:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr 27 04:50:04 2024 GMT
            Not After : Apr 26 04:55:04 2025 GMT
        Subject: CN=A57FB8E1C10680A7543EE17909C8F99870640D9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9a:88:0a:f8:2c:ba:6a:7d:b8:d0:bb:33:0c:
                    42:49:a2:49:c0:5b:95:81:53:00:c5:35:b2:f0:78:
                    f1:f1:7d:2f:9f:05:3a:a5:69:58:ce:f8:2c:8a:4a:
                    9a:98:27:1a:5d:88:9d:61:f5:35:7a:38:6b:2b:3b:
                    5d:2d:28:e0:da:03:6b:fa:12:41:26:61:84:9e:b0:
                    92:58:60:cc:db:df:36:14:c9:e5:68:26:ed:5b:9c:
                    7d:9a:91:4a:5c:03:b0:7b:c1:ff:fe:e8:c5:87:1d:
                    05:7f:7a:b6:ba:5d:fa:74:37:7e:58:af:9d:99:0e:
                    7c:35:98:08:af:5a:2f:d1:9e:84:ff:7f:45:4a:89:
                    fd:e7:d2:eb:c8:42:65:82:44:41:d3:43:6f:00:2e:
                    e8:9f:88:a5:8e:69:df:e6:d5:fc:c7:da:98:91:53:
                    3f:24:a5:41:b2:8f:d3:0b:ce:aa:a8:82:a2:0b:9c:
                    9f:84:57:b0:9a:be:b0:fc:b2:0a:bb:c7:20:8a:89:
                    c1:22:70:21:40:50:5e:82:42:7a:05:4b:8c:46:f0:
                    eb:7f:cf:46:fd:0a:9d:f5:f6:df:73:64:b5:02:0d:
                    b6:a5:2e:60:ca:45:c9:9d:0d:b3:f0:d4:8b:aa:a9:
                    19:08:15:80:b3:af:4d:a0:8a:88:79:ed:aa:a5:e4:
                    2f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7F:B8:E1:C1:06:80:A7:54:3E:E1:79:09:C8:F9:98:70:64:0D:9D
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS132335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:7b:b6:74:2d:ac:cf:5d:8d:4d:d3:41:96:d6:f1:77:49:8a:
         42:74:3c:05:57:de:20:54:23:65:6a:d4:17:a2:29:59:15:ad:
         28:86:23:b0:be:8a:30:14:8c:45:26:9d:b7:8d:90:bb:81:5c:
         7e:94:0d:2f:88:d8:8b:70:06:5e:e1:35:b0:40:01:18:85:6b:
         4b:13:26:c6:93:ae:a0:c2:b7:7e:07:1c:64:ec:b5:0b:eb:73:
         22:6b:56:f9:7a:4a:0a:6b:bd:cf:bb:69:88:ba:fe:f2:a3:d3:
         1a:e9:a7:7e:08:f7:71:5c:ff:de:2a:83:ad:83:eb:3c:30:cb:
         30:07:d3:62:a5:7a:4e:ba:d9:d5:a7:f4:e7:b7:f8:f1:15:c0:
         a8:05:21:60:be:a2:4e:a2:5d:d7:fc:1f:2e:f7:3a:4b:a9:41:
         25:4a:67:0f:6a:c0:1a:24:10:eb:5b:e1:ea:e7:3c:1a:c1:c8:
         29:4c:21:99:ab:a4:bf:4d:11:e4:06:8d:e3:d0:23:b2:b4:b4:
         9e:a5:46:46:77:7d:4c:7f:4d:54:f3:ef:0d:aa:ab:42:58:18:
         54:45:06:69:10:4f:ca:53:9e:83:79:fe:98:2b:64:42:bf:a4:
         c5:4a:b5:0c:7f:f9:86:05:ab:0b:7f:e0:60:a9:67:a6:b2:59:
         29:7f:5a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 01:34:18 2024 by rpki-client on console-fra.rpki-client.org