Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS206216.roa
File:                     AS206216.roa (raw, json)
Hash identifier:          qMgJalb38o6gRG+1UlCsqwA1tWmRACb1wS0iYZMCzhc=
Subject key identifier:   A0:B6:BB:F8:15:85:D5:9F:01:D7:E2:1C:94:05:28:7C:F9:F4:5B:EA
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       4384128E3A5614E721C6F0272C792774E3614A1E
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS206216.roa
Signing time:             Sun 03 Sep 2023 17:16:04 +0000
ROA not before:           Sun 03 Sep 2023 17:11:04 +0000
ROA not after:            Sun 01 Sep 2024 17:16:04 +0000
asID:                     206216
IP address blocks:        104.234.132.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Sep 2023 18:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:84:12:8e:3a:56:14:e7:21:c6:f0:27:2c:79:27:74:e3:61:4a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep  3 17:11:04 2023 GMT
            Not After : Sep  1 17:16:04 2024 GMT
        Subject: CN=A0B6BBF81585D59F01D7E21C9405287CF9F45BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5f:4d:92:40:93:f2:c8:76:9e:7b:87:44:72:
                    0a:d6:c0:2e:da:33:98:48:50:59:dd:cb:7f:a6:03:
                    db:2e:65:11:17:04:43:ee:18:be:e0:be:6f:d8:60:
                    bb:2c:39:bb:8b:c3:e9:05:f3:3e:75:68:fc:d3:a2:
                    2f:43:a1:5d:ab:96:1c:80:7d:67:18:61:d2:3e:3f:
                    da:3b:c6:98:6d:43:62:2e:51:62:c8:7d:b9:40:c2:
                    3f:7a:41:42:ea:5a:11:ac:18:0f:36:c4:32:84:2c:
                    c0:15:95:73:7c:23:21:ec:3b:6e:20:6e:16:3a:77:
                    10:1b:70:5c:1f:68:9c:32:01:86:79:4d:86:f6:c6:
                    bf:27:dc:c2:90:83:05:2c:8b:42:f6:62:9e:03:ae:
                    08:53:bd:83:27:99:f9:e3:88:db:2d:86:17:be:c1:
                    12:28:20:3b:cf:cc:7e:58:09:29:fc:85:50:8d:48:
                    82:38:5c:6d:77:05:fc:fc:5e:30:51:94:90:4a:29:
                    5e:9b:10:40:31:71:8f:68:f8:59:ca:21:97:db:62:
                    ad:d0:6a:69:fa:20:fa:22:8b:85:c4:b5:40:5b:35:
                    4e:53:ad:24:31:5e:39:8c:12:69:77:c8:83:ea:77:
                    18:bc:84:60:b4:69:84:41:f2:a3:4f:63:bd:76:bf:
                    c7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B6:BB:F8:15:85:D5:9F:01:D7:E2:1C:94:05:28:7C:F9:F4:5B:EA
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS206216.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:b0:92:64:0a:6d:3c:42:de:6b:ae:f5:8c:59:99:d2:98:fe:
         c6:dd:8f:1a:2c:b0:37:2e:72:83:79:82:e4:6f:4d:a5:61:b4:
         d4:75:89:ad:e3:10:09:b0:3f:79:72:be:18:4d:a2:e0:a5:78:
         00:83:f7:55:43:5e:30:cb:47:c7:f3:be:63:9d:0e:2d:ad:11:
         04:1a:8a:db:a9:a7:7f:c6:8c:cb:56:c5:1c:41:c6:18:b6:d6:
         b7:40:9e:84:9a:92:9e:f2:39:d8:6b:0b:43:7e:75:59:c6:1f:
         83:89:2f:49:a9:1b:a8:fd:35:87:be:0b:01:ed:ac:5e:4b:ee:
         15:be:09:f4:26:9c:e2:6f:55:a3:44:40:92:42:b2:ae:04:8d:
         6e:8a:a5:ba:15:ee:08:25:06:e0:8b:28:ea:b2:5e:fd:4c:19:
         fe:82:fa:9b:e0:bc:ed:69:6e:a8:2e:15:ec:47:fd:11:45:d9:
         1e:5c:0a:9b:bf:9e:a8:9f:6c:28:e9:b8:6e:b4:70:e0:78:d2:
         6f:6c:7f:0a:8d:f1:fa:ea:f7:25:a4:97:73:af:96:eb:0b:d7:
         8f:f2:a3:1b:bb:92:f3:e8:de:89:45:95:f9:48:8f:84:41:b1:
         90:0f:86:31:1c:cf:3b:c9:64:65:52:92:4f:9a:ac:6c:36:45:
         70:e8:14:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:33 2024 by rpki-client on console-ams.rpki-client.org