Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS46450.roa
File:                     AS46450.roa (raw, json)
Hash identifier:          OLPJUveDDR0z3KU5eEbyVyl04luwSkYlZcrYf3IqUek=
Subject key identifier:   A8:75:7F:30:36:58:00:0B:BD:0C:7C:CC:DA:E0:E6:E3:1D:11:78:45
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       5AAC3CAE41E2E93C9E938F6F5B995102BCAC7177
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS46450.roa
Signing time:             Tue 27 Aug 2024 00:01:59 +0000
ROA not before:           Mon 26 Aug 2024 23:56:59 +0000
ROA not after:            Tue 26 Aug 2025 00:01:59 +0000
asID:                     46450
IP address blocks:        104.234.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 00:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ac:3c:ae:41:e2:e9:3c:9e:93:8f:6f:5b:99:51:02:bc:ac:71:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug 26 23:56:59 2024 GMT
            Not After : Aug 26 00:01:59 2025 GMT
        Subject: CN=A8757F303658000BBD0C7CCCDAE0E6E31D117845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ad:06:17:b7:cb:dc:9e:49:54:06:34:74:0a:
                    0b:5f:92:75:87:17:84:06:b0:49:71:60:43:cc:6e:
                    96:8f:e3:e6:ea:91:8f:e9:7d:68:e9:b7:90:85:d4:
                    10:fb:a8:c4:30:bb:db:82:46:6b:da:63:f9:b6:16:
                    8a:e5:a3:f3:df:59:21:97:ee:ac:29:a0:e4:7e:37:
                    07:fc:7f:28:dd:61:40:c9:9e:7d:57:83:24:d4:92:
                    f0:d9:22:85:ca:8c:60:23:95:3e:be:e7:40:95:ab:
                    5c:92:cb:71:ed:73:ef:c4:cc:d5:de:5f:fc:b5:9b:
                    3c:a6:ba:fc:56:f0:88:c8:be:99:25:34:8b:e3:1f:
                    93:34:38:3a:09:43:41:77:ac:fd:bc:eb:af:84:35:
                    ed:a6:ce:1d:cf:e3:7c:52:e3:76:38:dd:f2:95:8b:
                    9c:58:06:6f:fc:b6:96:d9:cd:97:be:65:f2:e4:6a:
                    74:ce:59:10:37:49:c4:53:21:61:be:82:b8:fb:69:
                    bf:8e:1b:f5:b7:fd:ba:27:d2:a1:05:2c:c8:9e:e5:
                    49:77:2c:c9:f1:0f:64:94:61:84:08:a8:34:f0:5a:
                    07:bd:2f:27:68:58:9e:bb:02:a1:e0:48:d1:d6:0b:
                    e0:3b:e4:33:e0:b9:c5:88:2f:03:58:37:06:9c:8d:
                    c4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:75:7F:30:36:58:00:0B:BD:0C:7C:CC:DA:E0:E6:E3:1D:11:78:45
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS46450.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:06:b2:4b:9a:76:46:8c:6d:c7:f2:4e:f9:3c:1c:f2:0c:49:
         31:64:cb:f3:d4:d9:37:76:dc:05:78:2f:10:3a:9d:88:ba:68:
         eb:e5:dd:77:fe:09:87:91:92:5d:ab:84:de:00:ac:fb:20:0f:
         46:68:6e:4b:07:cb:c2:60:af:72:bd:5e:fb:f5:12:bb:d2:29:
         24:e0:be:71:54:c2:63:36:a7:05:a2:46:3e:85:8d:56:c9:b6:
         ff:ed:af:c6:b0:c5:b1:81:f3:a8:28:24:1f:76:f7:cb:22:fe:
         d5:b5:65:a3:dc:ea:82:ef:0c:d2:46:62:5f:43:a5:85:53:36:
         64:cf:2a:4e:a9:27:7d:e7:61:2b:c6:c9:79:d1:5d:9e:5c:d2:
         4e:58:de:85:d0:42:b3:77:18:d6:96:f6:08:1d:df:9b:a9:1f:
         ca:5a:73:4f:7d:2c:53:46:40:1d:ca:9a:fc:89:17:af:3e:33:
         89:1d:e6:ea:11:89:a1:8e:20:64:a3:cf:0d:c0:a7:3c:cb:c8:
         94:e3:d5:02:9f:f4:90:eb:88:ee:8e:1b:55:d2:29:42:25:72:
         a3:85:62:e0:04:21:c3:18:ed:89:ee:98:6e:2d:9f:ff:9e:eb:
         aa:bb:e2:8d:c0:93:27:fa:f9:b2:8d:ab:28:cb:97:f7:29:61:
         a5:c9:19:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 01:59:56 2024 by rpki-client on console-fra.rpki-client.org