Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230382e302f32332d3233203d3e20323132323338.roa
File:                     3130342e3235342e3230382e302f32332d3233203d3e20323132323338.roa (raw, json)
Hash identifier:          OKByZMGP1DR6bBPkJ9xoBQDqRGsP0/oqgL3f558t2sU=
Subject key identifier:   6B:24:0F:2F:D5:92:9B:C9:4C:1F:56:FE:FC:B9:CD:C5:FD:5F:40:FD
Certificate issuer:       /CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Certificate serial:       5B8285D377066002EFC20B18D90C674B58EFD194
Authority key identifier: A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230382e302f32332d3233203d3e20323132323338.roa
Signing time:             Fri 06 Sep 2024 05:41:28 +0000
ROA not before:           Fri 06 Sep 2024 05:36:28 +0000
ROA not after:            Fri 05 Sep 2025 05:41:28 +0000
asID:                     212238
IP address blocks:        104.254.208.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 06 Oct 2024 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:82:85:d3:77:06:60:02:ef:c2:0b:18:d9:0c:67:4b:58:ef:d1:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
        Validity
            Not Before: Sep  6 05:36:28 2024 GMT
            Not After : Sep  5 05:41:28 2025 GMT
        Subject: CN=6B240F2FD5929BC94C1F56FEFCB9CDC5FD5F40FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e0:b3:ee:5a:89:af:f7:af:d8:37:d1:0f:8a:
                    25:de:2d:c3:24:04:fd:4d:88:af:f1:f3:69:2e:3f:
                    cf:8e:d5:ec:8b:22:7d:1e:54:94:5d:1d:c2:7a:83:
                    08:26:76:a1:17:9f:09:aa:85:a5:9d:5b:31:9a:1d:
                    d7:b2:4c:97:8d:e5:74:a8:1f:48:7e:eb:d2:f5:60:
                    56:ba:62:19:04:aa:97:59:bf:41:99:34:e0:d2:75:
                    f7:46:75:b3:a0:0e:ba:a5:39:50:a3:54:6c:44:3e:
                    40:1d:24:47:9a:d8:ee:7d:99:a1:e2:cb:d6:b5:a9:
                    bc:68:9b:66:67:bd:79:7a:8e:4c:b9:9e:13:6d:67:
                    b3:2a:0d:84:55:34:f6:74:60:cd:b1:5d:3c:91:4e:
                    64:ec:7f:50:89:cb:15:c3:cd:fd:c6:d8:0d:5d:28:
                    85:81:1b:b5:eb:b1:51:0a:f0:6d:20:2c:80:c2:0a:
                    98:0b:0a:c3:cc:48:99:a9:20:61:b0:dd:bd:25:6b:
                    77:66:3f:91:2b:7a:6e:ce:98:d8:b3:1d:a1:4a:73:
                    e1:2c:35:21:5c:20:65:0f:7a:30:e6:ae:f1:2c:1f:
                    ce:3e:14:1f:75:2a:ed:01:84:a7:40:01:77:bd:87:
                    90:49:ca:3f:b8:9b:5e:48:66:ec:98:b5:ed:e3:0b:
                    da:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:24:0F:2F:D5:92:9B:C9:4C:1F:56:FE:FC:B9:CD:C5:FD:5F:40:FD
            X509v3 Authority Key Identifier:
                keyid:A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230382e302f32332d3233203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:71:8c:b1:a9:52:d4:93:e9:93:6f:4c:f9:f1:31:9c:83:67:
         48:c2:71:1f:d0:5e:b8:4c:13:cc:35:5e:1e:91:2a:b9:09:7a:
         7e:4d:58:10:65:9d:85:23:5c:3d:74:82:88:74:52:58:69:f1:
         03:27:b7:23:9b:91:49:1f:5e:10:8f:cb:d7:00:bb:12:d2:70:
         78:34:90:10:d7:e6:9f:29:6c:b0:8b:eb:b6:d9:71:8c:1e:7a:
         e4:4d:de:09:b4:34:44:4b:6c:14:6e:b9:38:a7:e8:c4:4d:76:
         8a:86:3a:66:2b:08:ef:63:2c:b7:ed:50:01:86:bf:ea:ec:1f:
         42:62:eb:6a:4b:7e:1e:40:55:e2:f1:5b:0e:52:20:70:ae:ad:
         16:1f:0e:ac:fc:84:be:17:36:ad:79:cc:56:79:e4:1b:85:dc:
         1b:61:c6:22:fa:44:82:c4:f0:6a:64:b5:0e:9c:42:66:c2:b9:
         33:49:e9:57:45:79:2c:5b:1f:73:17:45:e1:1c:4f:89:d8:7b:
         89:bb:be:45:f6:d5:4b:31:79:73:9a:c1:71:51:a4:e5:40:a3:
         ef:6e:6c:d9:45:41:2a:38:c0:de:f7:f3:2d:47:cc:71:b0:69:
         72:4d:28:26:3f:93:11:fb:43:7a:ed:34:c8:d5:36:4e:cb:81:
         a2:0d:d0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 04:25:35 2024 by rpki-client on console-fra.rpki-client.org