Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3234312e302f32342d3234203d3e2035363530.roa
File:                     3137322e39352e3234312e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          zLuq8ws3x9c4XS4IAdr2o7u4EFbqTnZxKm5HDX2d3mQ=
Subject key identifier:   E6:3B:FF:10:B3:43:74:65:38:A5:79:D3:33:F6:95:18:2F:96:B0:81
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       3CD64D852D3DBD3DDBBADAF92F79EA2CD114F0E7
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3234312e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:38:33 +0000
ROA not before:           Thu 02 Nov 2023 11:33:33 +0000
ROA not after:            Thu 31 Oct 2024 11:38:33 +0000
asID:                     5650
IP address blocks:        172.95.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d6:4d:85:2d:3d:bd:3d:db:ba:da:f9:2f:79:ea:2c:d1:14:f0:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Nov  2 11:33:33 2023 GMT
            Not After : Oct 31 11:38:33 2024 GMT
        Subject: CN=E63BFF10B343746538A579D333F695182F96B081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:eb:77:d2:87:74:7a:d7:a6:db:2f:5f:9e:52:
                    6d:52:54:09:01:0c:3a:a7:87:b7:cc:08:6b:5d:0c:
                    7e:9f:9c:54:3d:38:2e:bb:dd:3f:e7:7f:86:4c:e0:
                    b0:82:55:aa:33:6e:16:7a:68:64:3e:62:bc:0d:a2:
                    c9:2e:82:8c:60:1b:8e:15:a6:da:d5:38:ff:9b:ba:
                    09:58:b5:0f:66:a7:bc:a4:07:3f:2a:ea:5d:99:22:
                    9f:b6:68:c1:4c:f7:dd:de:70:05:e2:f4:08:bb:bb:
                    a5:ef:37:63:d6:fa:6f:66:3d:37:dd:6f:a8:f5:f2:
                    7c:cc:05:26:fc:82:5a:73:78:f0:dd:ce:31:db:57:
                    ab:93:a7:99:73:84:9f:52:b6:54:ce:99:5c:f1:da:
                    0e:51:a8:d3:09:6b:0b:07:c8:4c:d0:81:cd:8f:83:
                    7b:e4:49:a2:52:ae:79:39:16:c1:cf:e9:71:07:0f:
                    0f:72:d7:42:96:82:bc:a9:96:66:12:19:1b:fe:98:
                    b2:dc:46:89:d0:7b:ef:f6:6c:c1:68:e9:0d:08:f9:
                    69:39:3b:8a:41:2c:2b:5f:d4:8e:5c:c2:01:74:a5:
                    a1:65:a3:7b:9c:fd:35:b3:bb:91:eb:d3:ea:fd:d3:
                    fb:27:63:d3:bd:26:06:e0:cd:95:92:fe:cd:bb:77:
                    e4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3B:FF:10:B3:43:74:65:38:A5:79:D3:33:F6:95:18:2F:96:B0:81
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3234312e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.95.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:7a:01:c5:e1:58:a3:ea:64:de:eb:30:06:d6:b7:77:7a:63:
         b6:d9:89:21:dd:87:72:2e:22:27:2a:93:d9:62:8e:9e:09:cf:
         92:d9:7b:62:c1:f5:3d:ac:19:22:25:b0:5b:29:5b:3c:ac:40:
         4e:92:37:a2:0a:47:2e:e0:97:5b:9a:e4:12:5d:6f:d3:9d:2e:
         78:5c:4f:90:f8:0c:d4:cc:09:41:25:6f:3f:82:4a:4a:fa:ce:
         71:6a:b3:46:17:72:63:5a:ae:35:8a:71:1a:07:21:f9:39:e6:
         e6:85:55:49:dd:8d:0d:78:a6:09:4d:f1:4b:57:25:aa:dc:53:
         67:b2:1b:e3:89:7d:28:ef:9f:b2:ca:dd:49:48:25:47:15:bc:
         42:05:b9:d9:b0:f2:7f:81:45:97:8c:65:48:5b:81:4c:00:f6:
         00:c2:f3:71:bf:e1:2b:b0:76:18:a4:14:6a:66:c6:8e:f2:a7:
         60:86:f7:0a:f9:99:93:9f:02:12:11:a4:38:55:6d:af:7e:62:
         ab:18:5b:dc:be:22:82:29:d6:b3:6b:8d:ee:2b:b6:63:43:11:
         12:10:22:62:a8:8c:e2:4a:75:0e:e6:08:8e:42:3d:65:f5:77:
         0b:a3:2b:b4:c2:e3:cf:7a:f6:af:03:1f:0e:ff:bf:1f:c3:3f:
         36:26:b4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:37 2024 by rpki-client on console-ams.rpki-client.org