Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3231302e302f32342d3234203d3e203239383032.roa
File:                     3130342e3235342e3231302e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          LbcMXp/8aB1NaMDX3Q4YdUsVfAHebSiYAxXoA+PNNBk=
Subject key identifier:   70:5A:61:B9:89:45:4B:91:AF:70:D5:59:94:CB:16:52:38:EC:4C:C6
Certificate issuer:       /CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Certificate serial:       569201A7637B8AE9CE0DA36D31BCB0BC6B67E700
Authority key identifier: A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3231302e302f32342d3234203d3e203239383032.roa
Signing time:             Tue 18 Jul 2023 10:44:35 +0000
ROA not before:           Tue 18 Jul 2023 10:39:35 +0000
ROA not after:            Tue 16 Jul 2024 10:44:35 +0000
asID:                     29802
IP address blocks:        104.254.210.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 30 Jul 2023 08:13:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:92:01:a7:63:7b:8a:e9:ce:0d:a3:6d:31:bc:b0:bc:6b:67:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
        Validity
            Not Before: Jul 18 10:39:35 2023 GMT
            Not After : Jul 16 10:44:35 2024 GMT
        Subject: CN=705A61B989454B91AF70D55994CB165238EC4CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:be:de:9b:5a:66:8c:e1:9d:b5:ab:30:5b:
                    fe:e1:0f:3d:d7:d5:d0:f6:92:86:e4:cd:a6:0f:b3:
                    b5:d5:12:5f:c4:b4:1f:88:bc:58:11:75:48:04:ae:
                    05:ad:88:2f:92:33:22:cc:4a:be:9d:8b:1e:0c:e5:
                    15:62:37:e7:20:61:95:69:02:18:34:60:bc:09:4f:
                    37:71:52:44:20:f9:ac:6c:6f:eb:1c:8f:85:6e:74:
                    2c:27:cc:97:70:13:84:9b:8f:9d:42:e6:b1:3f:40:
                    eb:41:49:e7:ca:7e:1e:c1:4d:e7:59:01:ee:ac:23:
                    1f:fd:69:9e:33:57:83:50:86:fe:44:66:47:c4:ae:
                    43:69:12:3a:60:5b:22:aa:84:9f:4a:33:4c:1d:d1:
                    7f:ec:2d:27:5e:60:19:4d:bb:49:42:af:65:9f:00:
                    87:c2:3d:8c:f1:a6:b2:79:0c:fa:dc:3f:a2:62:c5:
                    54:fb:34:e3:9e:65:d8:98:df:6a:17:57:e0:c3:8c:
                    91:94:65:3a:11:0c:91:55:19:73:9f:b6:37:a8:6d:
                    29:8b:9e:50:18:dd:46:3b:6d:bb:a0:ba:2d:20:b7:
                    41:11:11:13:af:77:84:5c:ae:13:e9:8e:98:01:63:
                    88:3f:27:2d:db:f2:48:1e:47:ad:b1:40:93:1a:75:
                    1e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5A:61:B9:89:45:4B:91:AF:70:D5:59:94:CB:16:52:38:EC:4C:C6
            X509v3 Authority Key Identifier:
                keyid:A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3231302e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:5f:26:f2:c6:88:17:2a:e0:eb:6a:7d:6c:2a:a0:e0:59:00:
         74:1e:62:f8:8e:e3:35:d2:07:12:70:3d:72:e0:5e:e2:62:14:
         1d:12:84:79:da:6b:1a:99:af:50:4a:5c:22:92:27:04:8d:b6:
         81:d5:f5:99:85:bc:43:bb:b4:d2:d7:36:04:02:d7:1e:e5:4e:
         96:8a:01:d6:78:b9:09:ea:5b:7f:c7:32:d8:f6:d1:86:97:80:
         9b:e5:e5:6c:2f:d3:74:28:20:d4:11:d6:c1:31:e1:e7:ae:74:
         74:25:da:6b:09:f2:69:6b:46:ad:37:ca:b7:ff:70:ca:fd:3a:
         b3:df:9a:2f:59:0d:db:58:82:fc:d7:e8:af:bb:87:3c:c6:15:
         be:35:de:af:8e:2e:62:96:af:f4:ab:2f:c2:b5:ea:fe:5d:35:
         5d:b5:c7:e5:ff:6f:b4:9d:a5:5d:f3:99:c0:92:c9:cc:7e:7c:
         b7:8a:1b:d5:e8:8b:0f:0a:63:0f:e7:b4:7d:c0:63:a1:7a:ff:
         5b:aa:34:06:62:cc:c1:64:0b:4f:f2:97:29:10:16:fb:d7:36:
         1a:0b:05:c5:66:15:a7:17:36:f0:f3:99:7f:95:bb:05:0c:aa:
         39:d6:fe:a0:54:6e:70:e3:cc:68:9f:53:1f:e7:fa:52:5e:2d:
         d3:c8:62:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:44 2024 by rpki-client on console-ams.rpki-client.org