Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3233312e302f32342d3234203d3e2035363530.roa
File:                     3137322e39352e3233312e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          geNuYfdkv0ilBjz0/RoRgeo+5sURulN0l4CONZraw2Y=
Subject key identifier:   E4:85:D5:B0:EA:90:69:8C:68:97:3C:C3:93:B1:3C:4A:4B:46:A1:71
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       59108FD70B4220437264B6FA6D577558907F6CAA
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3233312e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:38:11 +0000
ROA not before:           Thu 02 Nov 2023 11:33:11 +0000
ROA not after:            Thu 31 Oct 2024 11:38:11 +0000
asID:                     5650
IP address blocks:        172.95.231.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:10:8f:d7:0b:42:20:43:72:64:b6:fa:6d:57:75:58:90:7f:6c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Nov  2 11:33:11 2023 GMT
            Not After : Oct 31 11:38:11 2024 GMT
        Subject: CN=E485D5B0EA90698C68973CC393B13C4A4B46A171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:60:b2:7a:7a:0b:f9:2d:ee:9e:d1:11:71:f7:
                    00:27:c5:78:66:42:4b:0b:8d:eb:39:d0:03:64:0a:
                    05:f5:c1:f1:b8:ad:e1:11:d1:74:5f:00:23:34:4c:
                    87:eb:99:ec:a5:c6:bc:b4:0a:2f:d6:16:37:78:41:
                    48:71:a8:eb:9c:ff:23:4f:08:97:00:0c:7b:f2:d5:
                    af:30:54:79:7e:8e:32:d9:e4:8a:9d:fb:8d:dc:7f:
                    84:ac:c2:e5:dd:1c:c0:9f:ff:cc:1c:ff:d9:ce:ff:
                    04:dc:e6:eb:f2:28:ec:26:39:3d:20:fe:4a:b6:d9:
                    6a:0d:5b:b6:96:13:d8:ee:a1:dc:0b:da:fa:0c:48:
                    8f:b0:10:6c:4e:b9:0e:4f:38:9a:f4:db:dc:ae:2b:
                    a6:38:30:d0:37:b7:87:2f:f3:ab:a6:42:2c:33:d1:
                    63:4f:20:58:e0:db:4e:be:a7:0b:01:83:bd:a1:dc:
                    87:fc:2d:f5:83:05:a3:07:57:ae:13:d0:8e:d6:dd:
                    26:59:a1:63:21:b2:66:e3:8d:d3:67:46:6d:fd:f0:
                    08:87:42:ff:20:7b:46:63:60:77:cf:e3:a1:10:40:
                    61:40:a8:94:2f:d2:75:89:89:cc:99:c3:a8:e3:68:
                    99:20:14:f1:16:b5:74:57:ec:6c:d3:4b:63:69:8e:
                    5a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:85:D5:B0:EA:90:69:8C:68:97:3C:C3:93:B1:3C:4A:4B:46:A1:71
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3233312e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.95.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:40:12:d0:9d:b7:b4:48:f0:31:61:9c:5a:e8:02:30:39:7f:
         40:9d:d6:18:ca:3d:fb:3a:96:9c:10:8b:76:bc:84:9e:7f:2e:
         69:ac:d6:02:3b:6f:32:77:fc:a1:3a:d3:c3:98:8c:45:7a:f1:
         82:bd:44:96:f0:f5:9f:57:66:ad:b0:7f:aa:a0:79:9d:f8:79:
         bc:6a:df:33:59:2f:8f:f7:d9:1a:02:fc:c0:cf:9d:f0:1b:e3:
         41:de:09:d0:b8:4e:57:57:f5:df:7d:b3:97:45:ff:ea:f3:c4:
         42:96:73:65:e1:bd:12:db:b4:64:42:c1:d4:d1:9c:6f:48:cc:
         13:f0:cd:08:24:3f:4a:06:06:79:05:4c:a5:da:0d:76:ca:1e:
         eb:32:33:24:4a:f8:df:99:5a:96:38:69:e9:9d:a0:f5:d8:a2:
         31:9e:2b:8f:37:ce:59:62:0d:a4:4b:76:4d:37:4d:da:29:53:
         04:42:6c:98:28:80:9b:ef:71:09:5b:60:7e:5f:e6:8a:71:e6:
         d0:5a:4c:36:fb:36:02:ab:2f:1f:77:29:f7:de:dc:db:23:9d:
         78:6b:93:7f:ca:5c:bd:93:35:a9:e0:6e:11:c0:21:29:ed:3d:
         5c:e5:0c:b9:66:d1:e0:63:60:66:41:46:3c:1b:3a:c4:98:9b:
         9b:ca:c0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org