Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131342e302f32342d3234203d3e2035363530.roa
File:                     3137322e3130382e3131342e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          pNegAR6B4UFRNqoe3mW/jZMOfq2zXH04m/kCe03xGzo=
Subject key identifier:   64:D2:5A:4A:ED:92:51:59:6C:CA:6B:D4:D2:03:3B:CA:67:F2:76:7D
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       527D67D493173266D47218399BF3ADAF4A914B5F
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131342e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:41:19 +0000
ROA not before:           Thu 02 Nov 2023 11:36:19 +0000
ROA not after:            Thu 31 Oct 2024 11:41:19 +0000
asID:                     5650
IP address blocks:        172.108.114.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7d:67:d4:93:17:32:66:d4:72:18:39:9b:f3:ad:af:4a:91:4b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Nov  2 11:36:19 2023 GMT
            Not After : Oct 31 11:41:19 2024 GMT
        Subject: CN=64D25A4AED9251596CCA6BD4D2033BCA67F2767D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8e:da:bd:73:fe:7a:33:7a:3c:55:13:70:19:
                    2a:bf:64:c6:62:45:58:07:13:97:f5:e1:4e:15:2a:
                    e8:f4:17:ab:f8:1e:0e:76:b2:e9:ac:97:bc:f5:b1:
                    58:c2:70:84:b4:eb:b1:ab:1a:cc:25:cf:5f:95:4f:
                    f8:c0:5f:6f:64:77:30:c9:eb:ae:46:67:b1:2a:a0:
                    b5:9c:6e:d5:7d:05:93:2e:73:b5:ed:19:41:df:62:
                    45:4e:05:7f:9d:26:24:c8:7d:2a:4a:4c:02:e1:b1:
                    40:20:56:b2:bc:a3:ad:c8:52:91:47:26:cc:68:d9:
                    94:8c:bc:1e:98:1d:84:b5:76:bd:2f:ca:58:2d:33:
                    4e:a9:36:5b:84:af:ba:97:8a:bd:e3:af:af:06:e9:
                    c4:c0:47:9a:c7:27:1d:7b:3d:c7:d2:37:a9:b9:46:
                    fe:78:02:24:00:e5:dc:12:7e:36:4b:af:13:46:2d:
                    38:8f:83:03:5c:c1:4d:3a:37:18:61:7d:db:87:32:
                    a5:25:61:01:8a:70:24:89:21:15:a2:5a:e9:3b:4f:
                    6b:44:8e:4b:9a:87:fd:aa:ad:11:81:ee:c9:89:1b:
                    1a:ee:eb:d8:8a:b9:be:28:cd:b3:4f:7b:f8:af:0a:
                    da:d3:a9:7d:21:69:bc:95:f6:56:a1:fa:43:63:92:
                    39:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D2:5A:4A:ED:92:51:59:6C:CA:6B:D4:D2:03:3B:CA:67:F2:76:7D
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131342e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.108.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:88:91:da:c6:18:a1:ae:f2:95:d0:7d:ad:5d:06:18:2b:3c:
         02:a6:3e:34:cd:12:d3:91:78:34:24:32:25:bf:45:d7:06:f4:
         b6:c5:99:6b:d9:97:cd:e1:d0:78:a8:30:2a:0b:86:65:87:2d:
         ec:75:e8:98:8f:94:65:d2:96:72:30:23:bb:05:f0:12:c8:af:
         c2:c5:4b:4f:75:d1:7b:31:6a:3f:b2:f7:bb:5e:3f:76:92:91:
         5b:29:77:45:c0:ea:c9:0d:32:14:20:87:81:8b:8c:a2:f2:72:
         e9:32:ca:37:ed:28:bd:9f:48:a4:9d:37:c6:85:91:3a:e8:e2:
         f4:47:6d:f5:6c:16:54:8f:5a:28:25:8f:31:75:16:eb:62:4e:
         56:b6:60:f2:0b:75:12:09:b4:a2:9d:11:15:e5:9a:b8:3e:30:
         0d:53:7a:81:50:2d:7b:f7:b2:17:3d:9c:2a:b6:10:f9:7b:45:
         6a:7e:07:16:2a:68:06:41:0f:2d:22:b1:e9:e9:55:0b:f3:b9:
         b2:2b:0a:e0:56:4b:5c:37:6d:69:e3:7c:17:4e:b3:16:51:b5:
         15:db:71:c7:1d:f5:20:92:9d:e0:f1:60:1c:61:15:b9:9d:23:
         a0:a4:29:d8:74:98:15:fe:e8:17:0c:56:14:8f:b3:7e:73:e5:
         38:fe:0b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org