Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131372e302f32342d3234203d3e2035363530.roa
File:                     3137322e3130382e3131372e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          dFy2PzVkF0g3noNY/15goyveG3J1ESygesYK/1HdEFo=
Subject key identifier:   49:A8:33:F2:50:00:9C:05:B7:B0:7B:EA:7B:99:94:B4:39:C0:49:64
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       44A9A676E1E62DCDB9F9C566E64EEB1F567D914F
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131372e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:42:01 +0000
ROA not before:           Thu 02 Nov 2023 11:37:01 +0000
ROA not after:            Thu 31 Oct 2024 11:42:01 +0000
asID:                     5650
IP address blocks:        172.108.117.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a9:a6:76:e1:e6:2d:cd:b9:f9:c5:66:e6:4e:eb:1f:56:7d:91:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Nov  2 11:37:01 2023 GMT
            Not After : Oct 31 11:42:01 2024 GMT
        Subject: CN=49A833F250009C05B7B07BEA7B9994B439C04964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:27:3c:a4:b0:f3:aa:87:23:7e:27:14:ac:dd:
                    bb:ea:68:a3:c7:b3:d8:30:c6:4c:0a:9d:a1:ca:d5:
                    f2:78:53:d5:78:34:8c:07:de:26:24:6f:3b:c9:e7:
                    df:66:56:30:ae:9c:db:5b:13:62:f1:d5:db:c6:dc:
                    30:56:ae:ab:25:04:df:9d:ee:0a:80:de:2e:13:17:
                    2f:81:43:33:e1:77:2c:83:aa:cb:a8:16:c3:a3:c2:
                    aa:a8:73:9f:dc:09:75:e6:e1:de:93:21:dc:f6:73:
                    c0:41:86:37:27:71:31:1e:a9:9a:03:5a:d4:8a:ea:
                    43:a6:30:39:a9:72:5c:a6:a1:9e:ba:98:4d:6a:1c:
                    83:4f:1f:ef:36:ed:cf:51:bb:4e:41:2c:4a:35:24:
                    9e:93:d9:c1:56:86:54:8f:25:13:c9:7e:47:2f:bd:
                    00:cd:63:f1:19:33:e0:ed:98:56:e5:49:95:8d:ea:
                    63:d1:a4:7c:07:95:40:15:aa:4c:7c:2d:1d:ce:29:
                    14:29:b3:09:7e:8f:4e:45:9b:fa:32:f4:dc:ad:9b:
                    3e:6b:c9:64:35:dd:00:09:11:fd:94:3a:80:eb:e2:
                    4d:84:2a:59:37:d9:bf:2a:d0:d3:31:0d:cf:e3:ce:
                    86:6c:28:de:74:fc:a3:7e:fe:93:64:d1:9e:5f:af:
                    52:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A8:33:F2:50:00:9C:05:B7:B0:7B:EA:7B:99:94:B4:39:C0:49:64
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131372e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.108.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:11:9d:22:8a:0d:f8:70:41:1b:14:f4:33:d3:46:ea:e5:c0:
         df:49:3d:da:69:2c:96:38:0e:18:5c:f4:7e:b9:10:f3:ed:fb:
         51:cb:70:8a:99:7a:9c:b8:88:94:38:8b:68:b3:1e:3d:d5:37:
         a8:36:04:af:3f:39:a5:71:a8:64:06:24:22:68:4f:3a:d2:41:
         70:3e:98:7a:59:7b:7c:c3:67:e5:eb:6c:27:05:be:e3:d9:90:
         4e:ef:28:68:a2:dd:6e:2d:39:05:dd:04:bd:0e:6d:3a:8d:dc:
         e4:28:52:dd:2b:83:29:03:1f:a3:de:80:84:5b:4a:e8:5d:be:
         7d:f6:3f:57:52:54:05:d9:48:c5:29:0c:76:cf:50:33:3c:c7:
         12:1f:6a:d3:39:9a:1c:fb:74:cc:72:e4:7c:e1:13:c4:d1:90:
         95:73:14:1c:66:c8:52:f5:de:e3:15:d9:69:3d:33:06:be:5b:
         ef:10:16:b2:93:93:d6:f0:49:e6:d1:e1:97:96:99:79:13:0e:
         4b:5e:bf:22:ba:c4:1e:9e:5f:8e:c8:ec:a2:6a:13:e7:98:8a:
         ec:43:f0:4c:d6:6b:39:21:50:fc:6a:cc:6d:fd:ed:0b:db:16:
         ed:9a:11:4b:c5:10:05:89:cb:ae:a0:5f:3d:53:ec:d4:f4:47:
         18:56:df:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:35 2024 by rpki-client on console-ams.rpki-client.org