Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3132312e302f32342d3234203d3e2035363530.roa
File:                     3137322e3130382e3132312e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          /fZUdpxAJkQ+iy3YuNz+F3c1d3T8D82ga9qFZSTRfxg=
Subject key identifier:   B7:5E:CC:88:AA:16:B6:30:91:CA:CA:43:21:C6:F6:E8:68:99:FE:2C
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       285C901E90CF6FAA7C11E529292A9830C2F56652
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3132312e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:42:37 +0000
ROA not before:           Thu 02 Nov 2023 11:37:37 +0000
ROA not after:            Thu 31 Oct 2024 11:42:37 +0000
asID:                     5650
IP address blocks:        172.108.121.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5c:90:1e:90:cf:6f:aa:7c:11:e5:29:29:2a:98:30:c2:f5:66:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Nov  2 11:37:37 2023 GMT
            Not After : Oct 31 11:42:37 2024 GMT
        Subject: CN=B75ECC88AA16B63091CACA4321C6F6E86899FE2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e8:51:a7:5d:0d:be:6f:cc:da:c7:a4:fa:0c:
                    b2:b3:95:7b:a2:58:87:93:e6:fb:34:c6:48:3b:63:
                    d1:58:55:83:f5:2a:da:4f:fa:b9:ce:2a:e6:bf:a4:
                    a4:cf:f1:38:cb:15:fc:c9:f5:b6:6c:fc:67:1d:fb:
                    0b:67:00:ba:c3:f3:fd:af:44:a4:b3:80:14:30:e5:
                    54:bf:d1:6f:75:27:ac:8b:c6:69:6c:54:78:90:ea:
                    09:b4:03:87:74:b5:63:f3:1c:e0:0d:4f:20:9d:38:
                    9b:4a:31:03:9f:ac:26:b2:e1:a8:48:5d:87:5a:a1:
                    14:22:61:17:f9:e2:67:a1:86:70:84:19:b8:e5:4f:
                    c7:cb:f4:80:70:b4:c0:69:ad:09:a7:d9:9b:9d:cf:
                    7f:49:15:9f:ea:a1:db:a5:22:e8:1e:00:1a:fb:ca:
                    22:42:de:b6:b3:3e:be:cb:90:88:48:64:dc:95:5d:
                    c9:3a:0e:af:d3:11:47:df:87:ae:14:95:16:de:82:
                    b4:8b:5f:9f:ac:db:88:2b:69:78:b9:61:b1:ba:1d:
                    80:cd:76:d7:76:bd:99:57:9c:55:08:1b:a3:63:d8:
                    3a:75:f8:d0:01:de:15:5d:cf:21:64:30:c8:24:36:
                    1b:a4:65:5d:97:7f:4b:bf:86:26:75:ed:a9:e8:62:
                    4d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5E:CC:88:AA:16:B6:30:91:CA:CA:43:21:C6:F6:E8:68:99:FE:2C
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3132312e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.108.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:c1:ef:99:6c:39:1b:da:a8:ae:95:64:92:89:d2:00:09:6f:
         6a:89:17:de:9c:1d:0e:8d:17:bd:dc:0f:2e:82:4f:02:d6:7f:
         d8:08:26:25:49:42:b4:20:ee:be:0a:83:4f:2f:1b:1d:64:52:
         01:ef:a2:a9:b3:43:ae:fb:8b:e4:df:c4:57:b5:8d:34:fc:a9:
         3c:44:9b:45:57:a1:ff:be:0e:66:22:0a:2f:53:89:fd:83:83:
         2a:ab:a8:bc:86:e9:d5:d4:21:64:91:73:c7:84:90:ad:41:47:
         59:83:a7:d8:86:66:3b:2e:0e:ae:35:ef:dd:ca:32:8e:91:86:
         8d:0b:9a:a6:86:ff:a5:6b:37:ad:61:f2:21:83:e1:5c:09:39:
         df:fa:c1:f4:b3:b7:55:55:cb:a5:f8:0c:64:5f:30:6b:09:e1:
         fc:26:36:5d:74:b9:3e:a6:6f:48:1a:8d:9e:82:24:40:3c:c7:
         d9:1c:ec:c8:97:a6:38:c6:ed:76:74:96:d0:00:cf:fd:0e:c0:
         ec:72:1a:1e:d5:ab:2d:2d:26:23:69:9f:0d:0f:58:bb:33:90:
         da:a5:9d:4f:79:17:7f:33:50:ae:11:1e:d0:98:5d:77:d4:cc:
         9c:f2:49:73:76:bb:ca:84:cc:56:c4:73:be:be:76:a3:46:05:
         1a:43:7f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org