Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS202400/0/36342e34392e32382e302f32342d3234203d3e20393435.roa
File:                     36342e34392e32382e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier:          hsycv6Ku+LBTShneewa+WYjaTe0ulIs+oIY0Uzurk20=
Subject key identifier:   EF:05:67:C9:6D:EC:1D:69:F8:5A:9F:17:BD:1B:66:2C:60:23:5A:B6
Certificate issuer:       /CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Certificate serial:       12B4600BAEE61D35E018C6FC0F9FE1464EFEAFA3
Authority key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject info access:      rsync://rpki.co/repo/AS202400/0/36342e34392e32382e302f32342d3234203d3e20393435.roa
Signing time:             Thu 05 Sep 2024 01:44:05 +0000
ROA not before:           Thu 05 Sep 2024 01:39:05 +0000
ROA not after:            Thu 04 Sep 2025 01:44:05 +0000
asID:                     945
IP address blocks:        64.49.28.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 03 Oct 2024 20:10:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b4:60:0b:ae:e6:1d:35:e0:18:c6:fc:0f:9f:e1:46:4e:fe:af:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
        Validity
            Not Before: Sep  5 01:39:05 2024 GMT
            Not After : Sep  4 01:44:05 2025 GMT
        Subject: CN=EF0567C96DEC1D69F85A9F17BD1B662C60235AB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:00:b8:a7:f4:60:24:1b:7d:28:b4:41:83:94:
                    1c:d8:11:4e:7b:1f:ef:ed:6c:a9:dd:96:ca:05:c0:
                    30:b0:e6:d7:55:4e:bb:08:84:fe:2b:08:3e:82:e3:
                    5a:c5:e1:04:b2:0f:f4:74:56:47:80:b2:9b:12:b6:
                    2f:e6:89:2b:80:da:33:04:df:c2:57:78:1c:13:a7:
                    3d:ce:63:fc:a7:b1:2f:03:41:7f:42:8f:bb:1a:6d:
                    f9:f3:7e:6a:2f:de:58:4d:af:7d:d4:d6:3c:92:32:
                    6a:55:a2:fe:fd:e4:80:79:b6:67:8d:29:72:35:2c:
                    35:3a:d5:87:f4:aa:44:70:87:6e:6d:da:4c:0a:cb:
                    28:8e:9f:fb:48:4d:18:b5:4a:62:f2:65:0f:36:14:
                    03:8a:d0:a4:03:55:ea:f9:ab:69:8f:83:ad:0d:82:
                    7b:3c:74:5b:16:a1:7b:ba:0e:03:1f:25:24:4e:f3:
                    a3:59:6d:33:64:55:db:9a:c1:dc:53:3b:31:ab:03:
                    dc:31:b0:49:80:16:0e:31:97:ca:a4:ef:72:70:82:
                    4c:df:da:c3:9f:2c:aa:a2:c5:49:06:84:60:9d:03:
                    29:ef:7e:5e:62:b5:12:dc:78:d2:4d:07:c6:5d:65:
                    3d:28:3e:53:ee:e6:54:2a:8c:44:ed:24:b5:29:a1:
                    06:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:05:67:C9:6D:EC:1D:69:F8:5A:9F:17:BD:1B:66:2C:60:23:5A:B6
            X509v3 Authority Key Identifier:
                keyid:B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/0/36342e34392e32382e302f32342d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:14:00:83:e4:82:62:ec:a4:0a:bf:a2:05:cc:c0:0e:52:9c:
         9f:18:6e:59:7c:a2:ff:42:ec:e3:94:3e:0e:08:a0:1e:44:1b:
         56:8d:5f:d8:90:c1:45:86:80:49:9d:41:c9:d7:6d:bd:65:98:
         9e:00:19:19:4f:e5:e1:a3:e3:06:fd:61:e6:b4:c3:f6:28:4e:
         38:e3:6a:d6:67:92:09:8e:b7:5b:a4:19:21:6c:fd:eb:0f:93:
         fe:fd:f6:85:29:84:6d:7c:8e:ae:a4:ac:fb:2d:c1:c8:72:13:
         6f:54:e6:52:a6:8f:ec:e8:b9:7b:18:99:f4:dc:13:7c:1d:b9:
         e8:75:24:57:81:55:f8:40:54:62:05:cf:65:ee:59:f3:91:35:
         13:f6:bd:dc:f9:95:e8:33:96:6e:70:d5:db:a4:92:82:3b:c2:
         ef:97:2f:0c:15:6b:f0:27:80:8c:c1:f9:da:2d:02:78:b7:d2:
         ec:60:55:02:c1:86:92:83:04:ba:c9:0b:12:00:c0:75:0c:34:
         04:41:9e:ff:a5:9f:e1:a3:4c:72:5b:71:4e:b4:3e:94:23:af:
         5a:61:73:03:1a:cc:62:f0:90:5f:87:fa:bb:d1:22:a6:89:42:
         45:8d:24:fd:19:41:31:41:ee:0f:4c:02:43:92:a6:dd:57:d4:
         e5:48:5b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 23:28:34 2024 by rpki-client on console-ams.rpki-client.org