Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3139352e302f32342d3234203d3e2035363530.roa
File:                     34372e3138392e3139352e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          CkmvJkG8aLLC99FILgW0l56voKDK5ChvmG9ki8nqLMs=
Subject key identifier:   F5:BE:8B:05:D1:D8:FC:E7:5C:4E:8B:6A:9C:E8:D1:F2:D1:33:1D:BE
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       4771B6D31E5E8A6F1BA238B4026453E37F56054B
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3139352e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:29:22 +0000
ROA not before:           Thu 02 Nov 2023 11:24:22 +0000
ROA not after:            Thu 31 Oct 2024 11:29:22 +0000
asID:                     5650
IP address blocks:        47.189.195.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:71:b6:d3:1e:5e:8a:6f:1b:a2:38:b4:02:64:53:e3:7f:56:05:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Nov  2 11:24:22 2023 GMT
            Not After : Oct 31 11:29:22 2024 GMT
        Subject: CN=F5BE8B05D1D8FCE75C4E8B6A9CE8D1F2D1331DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7b:99:c9:a1:d9:08:e5:fa:c6:5b:6e:e8:6b:
                    a8:9e:8f:2c:a6:e5:d6:b4:68:c6:8b:56:9a:40:69:
                    79:2e:b4:4c:ed:c0:31:84:5d:7d:4a:3d:e7:27:7f:
                    40:60:70:29:fb:2c:6d:19:e2:cb:0b:ec:55:e3:94:
                    5d:98:a5:35:6d:4d:dc:fd:98:fb:ca:23:78:fd:96:
                    9e:37:c0:e6:4f:7b:6a:dc:c2:45:ea:f7:f4:42:90:
                    1e:f8:47:60:74:31:32:a4:1e:1f:05:af:de:3c:cf:
                    06:f3:7f:b2:60:53:b9:14:ab:50:03:92:b3:06:31:
                    df:02:82:86:2c:18:db:e4:a4:97:32:70:b5:9e:ad:
                    5a:17:7e:02:f3:c9:a1:bf:94:dd:66:41:f1:db:25:
                    33:c1:a7:d5:aa:bb:17:21:8c:a4:e7:44:4c:a5:20:
                    1a:5f:0b:15:8d:0b:18:b4:26:81:e0:b5:46:be:88:
                    d9:4e:51:30:3d:21:ee:07:78:06:e4:ef:85:16:78:
                    97:3c:7f:9b:d8:84:15:7a:a4:80:7d:f8:c7:eb:be:
                    f8:43:81:80:6a:cd:9c:60:7c:a8:00:70:35:19:a1:
                    66:8b:41:02:f1:40:e9:08:cc:21:8d:19:83:dc:fe:
                    67:bb:55:af:20:25:a0:2f:e7:c0:2b:4c:bb:ab:c7:
                    4a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BE:8B:05:D1:D8:FC:E7:5C:4E:8B:6A:9C:E8:D1:F2:D1:33:1D:BE
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3139352e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.189.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:3c:43:2f:10:2f:04:5f:b4:f3:75:55:6a:62:31:56:e3:f2:
         a7:ef:28:05:f3:30:af:9e:6e:d1:b3:04:02:7a:99:6c:25:db:
         f3:ba:e8:a2:84:7b:49:13:f7:90:f3:11:11:be:24:ad:90:42:
         ce:c5:77:2c:eb:a2:ec:57:b6:aa:80:c3:d5:f0:e5:0c:77:d1:
         95:b4:36:e0:01:81:34:bc:35:a7:29:dc:fc:4e:37:00:88:97:
         3a:f8:3a:e4:47:be:5b:cc:23:38:fb:83:9a:c1:06:ad:c0:b6:
         08:3f:8d:e1:05:9a:7e:68:a7:44:26:5c:45:a4:69:c5:1e:3f:
         f8:dd:a6:c1:7a:b4:3c:da:08:bb:27:d8:5e:df:8a:80:ad:72:
         d6:b4:34:64:b3:e2:4f:73:cc:79:a5:b6:ef:4c:ae:6f:a0:c0:
         b3:fc:82:dc:7d:20:28:dc:02:b4:0f:89:13:0d:43:14:a4:d5:
         11:5e:1a:19:25:ee:2a:19:08:a8:57:a6:06:c3:0f:d8:6b:f3:
         82:02:d9:d0:8e:b0:f6:96:ff:09:3c:cf:94:1e:7e:fa:0e:0f:
         2f:03:73:d0:47:e6:45:94:25:c7:7b:29:2d:9c:87:e6:47:68:
         82:db:17:58:d0:f3:0e:70:60:3e:af:0d:0e:7b:b8:79:6f:5e:
         13:05:ee:a8
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUR3G20x5eim8boji0AmRT439WBUswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmMwZDY3MmFlOWRiZTg4MTM1ODkzZTNkYzE5YTg4NWEw
Njc4NTlmZGFlNjY4ZDVhNzcwHhcNMjMxMTAyMTEyNDIyWhcNMjQxMDMxMTEyOTIy
WjAzMTEwLwYDVQQDEyhGNUJFOEIwNUQxRDhGQ0U3NUM0RThCNkE5Q0U4RDFGMkQx
MzMxREJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHuZyaHZCOX6
xltu6Guono8spuXWtGjGi1aaQGl5LrRM7cAxhF19Sj3nJ39AYHAp+yxtGeLLC+xV
45RdmKU1bU3c/Zj7yiN4/ZaeN8DmT3tq3MJF6vf0QpAe+EdgdDEypB4fBa/ePM8G
83+yYFO5FKtQA5KzBjHfAoKGLBjb5KSXMnC1nq1aF34C88mhv5TdZkHx2yUzwafV
qrsXIYyk50RMpSAaXwsVjQsYtCaB4LVGvojZTlEwPSHuB3gG5O+FFniXPH+b2IQV
eqSAffjH6774Q4GAas2cYHyoAHA1GaFmi0EC8UDpCMwhjRmD3P5nu1WvICWgL+fA
K0y7q8dKTQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFPW+iwXR2PznXE6Lapzo0fLR
Mx2+MB8GA1UdIwQYMBaAFMsIhtIESKZjx89cThl5rG952wUgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzIv
Q0IwODg2RDIwNDQ4QTY2M0M3Q0Y1QzRFMTk3OUFDNkY3OURCMDUyMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzQ2YmYxZjAzLTJlYmQtNDA1ZS1hNWI3LTYyYmRmM2Q3ZGJlNi9iYzBk
NjcyYWU5ZGJlODgxMzU4OTNlM2RjMTlhODg1YTA2Nzg1OWZkYWU2NjhkNWE3Ny5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8yLzM0MzcyZTMxMzgzOTJlMzEzOTM1MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAvvcMwDQYJKoZIhvcNAQELBQAD
ggEBALc8Qy8QLwRftPN1VWpiMVbj8qfvKAXzMK+ebtGzBAJ6mWwl2/O66KKEe0kT
95DzERG+JK2QQs7FdyzrouxXtqqAw9Xw5Qx30ZW0NuABgTS8Nacp3PxONwCIlzr4
OuRHvlvMIzj7g5rBBq3Atgg/jeEFmn5op0QmXEWkacUeP/jdpsF6tDzaCLsn2F7f
ioCtcta0NGSz4k9zzHmltu9Mrm+gwLP8gtx9ICjcArQPiRMNQxSk1RFeGhkl7ioZ
CKhXpgbDD9hr84IC2dCOsPaW/wk8z5QefvoODy8Dc9BH5kWUJcd7KS2ch+ZHaILb
F1jQ8w5wYD6vDQ57uHlvXhMF7qg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org