Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131332e302f32342d3234203d3e2035363530.roa
File:                     3137322e3130382e3131332e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          pNzmIhum0/qdwWDsPsY8qYzFk3eRd075UTGU2ALKezk=
Subject key identifier:   A6:6B:08:ED:20:AE:B0:CD:5C:EE:09:00:13:B5:17:1A:BF:31:69:97
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       094381ED00585D639EDC531DD8FA29C61B5F086A
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131332e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:41:09 +0000
ROA not before:           Thu 02 Nov 2023 11:36:09 +0000
ROA not after:            Thu 31 Oct 2024 11:41:09 +0000
asID:                     5650
IP address blocks:        172.108.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:43:81:ed:00:58:5d:63:9e:dc:53:1d:d8:fa:29:c6:1b:5f:08:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Nov  2 11:36:09 2023 GMT
            Not After : Oct 31 11:41:09 2024 GMT
        Subject: CN=A66B08ED20AEB0CD5CEE090013B5171ABF316997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9c:9f:76:cf:60:65:44:cd:5f:18:93:59:e9:
                    a9:03:db:42:3a:84:4f:7b:96:c0:86:55:78:a3:f9:
                    bb:1e:32:12:a2:71:1a:55:6a:ef:59:78:22:46:21:
                    6c:9a:f9:e1:ac:85:71:f0:ad:20:74:b4:f7:f0:5d:
                    28:af:65:b3:eb:83:02:29:10:2a:21:c8:12:9e:93:
                    a6:07:59:1b:09:c6:50:bc:a5:36:99:5e:d1:55:63:
                    14:f6:e0:39:c4:e2:88:88:18:c1:fc:36:24:0f:56:
                    13:3a:0e:6f:c4:a1:3f:0c:c5:82:f9:48:8e:e6:9c:
                    d5:e4:9f:15:34:46:00:1b:b7:a2:08:11:68:52:c0:
                    52:f1:6d:f1:cc:40:b8:ad:e0:50:59:54:be:9b:4b:
                    a9:72:72:76:c9:e4:ba:fc:d6:da:25:ba:da:c4:7f:
                    90:f3:ba:2c:8d:9c:93:55:70:70:31:65:ac:73:ae:
                    d6:90:a1:14:86:dd:e7:08:8b:f5:a4:a5:d2:7e:8e:
                    e1:ec:54:25:97:04:f2:73:29:74:8b:64:cd:5b:f6:
                    08:2d:1a:92:b2:ff:b7:e9:69:36:8d:fe:74:2c:d6:
                    5a:02:2c:d1:0c:21:ca:d8:de:20:4b:2c:61:e4:a2:
                    2c:d3:a6:5c:7e:72:39:73:dc:44:91:e4:5d:a0:a4:
                    5b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6B:08:ED:20:AE:B0:CD:5C:EE:09:00:13:B5:17:1A:BF:31:69:97
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131332e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.108.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:8d:8b:f2:df:30:2e:5d:b4:6b:0f:39:a3:73:f7:ed:aa:3c:
         14:74:48:63:e4:f1:50:dc:03:db:c3:93:75:84:3e:27:fe:20:
         55:f1:fe:2b:f1:03:b0:21:dc:64:2b:9c:21:84:28:fe:0d:c2:
         f9:d9:68:33:04:d0:f6:4b:fc:27:db:e5:01:32:ff:4c:4d:af:
         2e:1b:4a:b0:79:4f:89:b0:4f:41:4e:d5:19:b5:33:8a:a9:a7:
         09:a6:6a:19:18:bd:57:73:ba:42:01:6f:d9:1b:af:76:31:5c:
         7d:76:f6:a9:d1:f6:4e:24:e6:2f:98:d8:5c:83:d5:b3:65:98:
         74:9f:9d:91:b3:b1:d6:6f:37:a3:6e:c2:b4:74:2c:f3:db:dc:
         29:7b:bf:ed:5e:d8:06:72:dc:79:a5:a2:a4:e8:89:72:53:26:
         42:dc:0b:e4:e4:86:de:85:8f:e1:25:50:c6:b0:57:c0:00:74:
         96:dd:2e:c6:b8:74:1c:03:f0:40:7f:90:22:33:2b:81:66:98:
         ad:d4:6f:ee:d1:cb:4c:5c:54:b8:3e:ab:80:80:67:05:ce:8b:
         1b:a7:d7:1e:07:af:e7:a9:b0:e5:c4:80:e1:cc:c5:b1:6f:6e:
         25:f6:7b:69:ee:e8:95:c9:6e:19:ed:a3:be:32:9f:6a:56:d8:
         f1:c4:eb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org