Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3235302e302f32332d3233203d3e2035363530.roa
File:                     34372e3138322e3235302e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          F8J5AQx3oKlNvfCnOeDYKWMgGPCSfri5g8Nun/4UFxs=
Subject key identifier:   1D:73:48:17:7C:58:D0:8B:12:6F:F2:18:2D:67:D9:E9:0E:B3:41:05
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       5E3589415641DEAA96A964AC8D1EAD141595AB34
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3235302e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:14:49 +0000
ROA not before:           Tue 13 Feb 2024 05:09:49 +0000
ROA not after:            Tue 11 Feb 2025 05:14:49 +0000
asID:                     5650
IP address blocks:        47.182.250.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:35:89:41:56:41:de:aa:96:a9:64:ac:8d:1e:ad:14:15:95:ab:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Feb 13 05:09:49 2024 GMT
            Not After : Feb 11 05:14:49 2025 GMT
        Subject: CN=1D7348177C58D08B126FF2182D67D9E90EB34105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:30:a7:2a:3e:51:04:c0:9f:40:08:e7:5d:e2:
                    1e:fb:41:8b:6a:91:00:96:82:90:5f:9f:ef:68:45:
                    08:ab:b0:6b:28:7a:37:20:e6:46:2b:55:12:1f:da:
                    16:2f:83:6a:97:59:83:b7:e4:d1:39:41:df:50:1c:
                    ee:79:bf:ac:04:1e:bc:80:98:8e:9d:22:d0:8e:73:
                    e8:25:88:1a:bf:35:d5:bb:6f:1e:b7:9a:07:f5:8f:
                    cd:06:37:e5:20:d7:80:3b:5b:8c:54:0b:5c:61:92:
                    98:d2:a5:f4:31:55:33:19:5f:93:5a:ab:68:55:27:
                    ba:d4:d1:b0:46:ac:fc:48:09:ec:14:3d:d0:9b:58:
                    7c:8f:92:65:af:d0:9c:3e:8c:37:d1:5e:a5:30:7c:
                    4b:b2:71:fe:65:48:db:9b:f3:ee:06:ea:66:64:16:
                    4f:d3:cf:0b:ff:4a:e5:14:9c:a6:b6:b9:09:f7:ad:
                    d9:36:8f:0b:19:42:60:d2:45:96:b3:23:c6:7b:72:
                    a1:3e:5e:d9:e6:d4:84:5f:ee:05:74:00:ea:f1:d2:
                    3d:de:a9:0c:06:0d:e7:13:6a:12:e6:c7:46:6a:9d:
                    34:1b:aa:bb:7b:65:26:71:7b:3c:a8:ea:6a:a4:35:
                    fe:1c:ec:47:10:3e:01:43:3d:7b:3a:66:e5:dd:76:
                    8a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:73:48:17:7C:58:D0:8B:12:6F:F2:18:2D:67:D9:E9:0E:B3:41:05
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3235302e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.182.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:8b:5b:90:69:bb:78:51:d2:44:2c:d4:34:90:af:bb:af:4b:
         0c:37:b5:52:fb:16:cb:f1:96:ea:6c:95:40:10:20:c4:39:af:
         cf:5a:58:0f:76:c9:f8:f3:8e:ff:59:9e:f2:08:2c:eb:f9:90:
         1d:9a:e5:cb:22:08:56:99:ad:4a:cf:56:96:92:99:23:f4:c5:
         14:97:e2:c4:40:ca:2f:e0:d0:31:d9:8e:f4:3b:9f:c5:7f:c5:
         2d:0a:97:f8:f8:60:ea:18:da:ec:ca:05:32:b0:29:8a:e4:b6:
         6c:8f:05:05:6a:5d:a9:d5:4a:e7:e5:a2:15:f4:bf:b8:b0:df:
         b7:cb:f2:9c:e1:e0:50:d2:e7:56:3a:bb:eb:69:b1:be:57:6e:
         d0:ae:50:97:ed:a6:31:b9:08:95:00:50:8a:9a:2e:00:4f:9d:
         fb:c1:e2:97:65:22:9f:68:55:64:4d:5f:40:32:73:2e:93:6f:
         e5:48:d4:f8:e3:80:74:ea:a1:36:70:f7:37:48:ef:88:dd:13:
         3b:1a:d1:90:2b:09:4d:44:16:02:36:cb:71:83:33:8c:75:34:
         7b:5e:03:a6:a3:b2:f7:2b:24:26:1c:ed:b8:45:88:ea:9c:c5:
         e4:41:f7:65:cd:e9:8e:20:a0:1b:af:c2:a6:cb:ad:4e:de:e0:
         a3:65:89:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org