Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3232382e302f32342d3234203d3e2035363530.roa
File:                     34372e3138322e3232382e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          0weUAsZfUcyEpZpZvbAu7nLLAgR+h+7IM+a9gq+Qnz8=
Subject key identifier:   AD:1D:36:98:14:2C:D7:37:FA:05:60:74:63:78:80:F5:30:37:41:DC
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       2605B98A3FA703D04049DAEED9359E396414DA7C
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3232382e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:27:53 +0000
ROA not before:           Thu 02 Nov 2023 11:22:53 +0000
ROA not after:            Thu 31 Oct 2024 11:27:53 +0000
asID:                     5650
IP address blocks:        47.182.228.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:05:b9:8a:3f:a7:03:d0:40:49:da:ee:d9:35:9e:39:64:14:da:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Nov  2 11:22:53 2023 GMT
            Not After : Oct 31 11:27:53 2024 GMT
        Subject: CN=AD1D3698142CD737FA056074637880F5303741DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:78:00:a0:d2:19:8e:25:8e:59:8a:fd:1c:e5:
                    5e:b6:63:78:6f:bf:dd:b2:15:03:2a:2f:d2:d3:5a:
                    7f:13:15:f2:3d:e9:0d:e4:bb:15:76:31:48:3a:bc:
                    21:6b:d4:47:2f:bb:9e:cb:bc:4e:82:5c:67:4e:17:
                    c3:7e:16:37:76:c9:be:d0:f8:c3:68:1f:a5:58:4f:
                    6d:4b:1b:dd:f7:e6:4b:6b:91:2f:a1:15:df:94:a7:
                    43:ec:99:93:7b:b2:10:5c:06:54:da:1b:1b:32:9d:
                    25:d9:97:0f:81:d9:d6:bd:3e:a1:f6:ea:30:ad:9d:
                    00:39:61:39:f5:d0:c0:b1:3b:f2:77:9d:c8:14:45:
                    40:af:97:8a:ec:19:a6:a4:ba:bd:9f:d3:87:2b:14:
                    02:bc:2d:2f:7a:a5:cc:bd:d6:9f:30:a8:2b:4f:c9:
                    b3:a8:7d:cb:88:03:e4:c2:72:ee:b1:34:8f:2c:6d:
                    f0:ac:18:65:f6:85:a5:9e:46:b7:6d:d9:bc:d5:6b:
                    51:8e:86:33:91:4e:9a:3b:ac:14:bd:96:f4:f9:ef:
                    27:44:70:85:2e:5a:e8:d6:db:03:77:00:6d:e6:60:
                    9f:ec:6e:4d:21:54:fe:4b:6f:18:91:f4:46:6d:ed:
                    35:fd:10:1c:dc:05:d6:87:d7:b5:f9:4c:ff:7d:ca:
                    ff:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1D:36:98:14:2C:D7:37:FA:05:60:74:63:78:80:F5:30:37:41:DC
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3232382e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.182.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:fe:15:8b:7b:8a:c6:c4:24:f0:87:f7:89:13:89:5c:cc:a2:
         90:98:7c:e7:56:48:d7:ad:7e:fb:c1:eb:1d:a2:6b:5f:0c:df:
         be:22:ef:da:f4:dc:b9:66:c3:10:6e:21:1e:49:cc:81:f8:a4:
         0f:89:b4:6f:8e:75:d6:27:a5:80:b1:9c:93:cb:1d:0f:f4:18:
         a2:7b:32:fc:72:10:25:63:34:0c:02:3b:46:b5:25:ea:fb:50:
         17:14:a2:3e:67:3c:a5:83:eb:9f:05:61:ec:c3:a2:2c:83:e9:
         a2:48:59:32:56:1f:29:bc:ad:a3:8d:07:d5:ef:bc:c0:d7:1d:
         1c:bd:11:ab:aa:4a:69:2d:0d:46:c6:62:24:d5:a6:38:94:2d:
         1b:be:8a:04:bf:54:6e:cb:38:b9:d1:a7:6d:18:cd:1f:bf:7d:
         bd:3e:8a:1e:09:61:60:37:fd:26:9a:20:32:c9:0f:aa:b3:c3:
         1b:e8:8f:90:f4:c6:39:9f:bd:73:f8:a9:d2:c2:ff:31:a4:90:
         85:07:13:fb:fc:6d:ae:c3:8f:15:14:5c:af:e3:d6:22:1c:2a:
         a2:ae:c8:eb:91:3b:8a:8b:30:3a:68:9d:5c:b0:63:f0:f0:88:
         52:e7:43:19:80:44:8a:95:ba:eb:88:1c:1c:aa:c5:f2:67:6c:
         27:91:2a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:35 2024 by rpki-client on console-ams.rpki-client.org