Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3139392e302f32342d3234203d3e2035363530.roa
File:                     34372e3138392e3139392e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          gzUvz7qm2Ud4bW0EnmDSxw4yFlNZb4bef9jkeSW+KLs=
Subject key identifier:   27:1D:16:39:52:6E:D9:2C:81:48:FF:E0:5C:33:E3:32:4F:07:76:A8
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       44E26CF333B075F4269F8A283F094E4ED05D20C7
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3139392e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:30:04 +0000
ROA not before:           Thu 02 Nov 2023 11:25:04 +0000
ROA not after:            Thu 31 Oct 2024 11:30:04 +0000
asID:                     5650
IP address blocks:        47.189.199.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e2:6c:f3:33:b0:75:f4:26:9f:8a:28:3f:09:4e:4e:d0:5d:20:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Nov  2 11:25:04 2023 GMT
            Not After : Oct 31 11:30:04 2024 GMT
        Subject: CN=271D1639526ED92C8148FFE05C33E3324F0776A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:78:3d:1d:83:7c:45:66:0f:c1:9c:ec:75:
                    52:3b:42:8d:fa:5c:f5:e8:4c:91:0c:01:37:2e:d3:
                    b8:ce:db:d7:44:ac:8a:eb:93:7d:1d:ab:21:99:8d:
                    65:88:42:e8:20:6d:80:ee:d3:55:39:0d:69:8b:bd:
                    06:59:2b:17:f0:c5:0e:22:74:ca:3f:9b:22:62:36:
                    09:99:e2:fb:e4:d1:f6:de:fa:fe:07:48:a7:a3:df:
                    d2:26:b1:be:bf:3f:0a:3e:84:f2:96:39:eb:73:01:
                    34:dd:06:86:a0:b9:4a:1e:a9:af:79:5a:5d:de:cb:
                    18:e7:da:01:cc:f5:d3:c6:c6:6d:18:17:18:3e:da:
                    5b:6f:3b:34:a2:c7:cd:3c:63:06:b7:3d:76:f7:24:
                    7b:82:e9:6c:44:e7:7f:ac:17:a1:ba:f4:ef:f2:8c:
                    0d:c6:ca:88:ff:51:73:34:3c:51:f4:d3:67:35:3a:
                    1c:43:a9:55:bf:aa:c0:91:a4:6a:1c:61:58:85:af:
                    4f:a0:40:d8:91:b4:98:6b:29:f2:fd:b7:96:e6:25:
                    e9:b1:7a:89:26:90:cf:e9:ea:2c:c4:8d:dc:b5:a9:
                    c0:be:48:11:a0:c5:e4:81:20:27:19:43:cc:41:c8:
                    4c:c8:b9:93:2b:4a:f1:53:c1:7c:b8:1f:d7:30:92:
                    3e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1D:16:39:52:6E:D9:2C:81:48:FF:E0:5C:33:E3:32:4F:07:76:A8
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3139392e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.189.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:fe:90:50:f7:9f:be:27:a7:5b:83:e7:61:2b:de:b3:7e:f4:
         34:68:09:11:8a:af:59:a8:a5:22:be:42:bd:91:26:8f:6a:77:
         2b:02:05:92:e0:3b:ca:6e:e3:b5:e9:a7:e1:89:a5:c3:f2:3b:
         2f:da:07:0c:20:89:0b:e4:5e:8b:5a:35:06:4a:92:87:b8:26:
         30:8e:2d:53:eb:a7:39:69:cc:c4:fd:f6:4f:54:1c:48:c2:45:
         e7:42:7f:c5:73:25:dc:b5:e6:80:0c:be:5f:bc:1a:df:31:e3:
         3e:87:57:19:ed:21:aa:a4:3e:9f:28:97:b7:c2:1a:e5:22:57:
         c2:df:f3:3f:74:86:ec:2e:2a:74:1c:64:69:4e:e1:dd:51:f7:
         6d:43:ba:bd:45:d8:ad:da:ba:a7:dc:ac:83:64:d5:b9:f4:4b:
         4f:4f:5b:ed:2c:af:77:31:18:c2:29:76:94:eb:b0:65:61:d8:
         4b:7e:5a:fd:72:7e:2c:bb:c7:df:b3:0f:d9:de:60:02:93:36:
         71:cf:80:58:e7:93:32:f9:a9:a8:bb:a9:67:7a:1e:4d:3c:80:
         84:08:05:a8:91:06:27:a5:b1:c0:c5:0e:43:65:f3:2b:dc:15:
         f6:1d:ad:20:4b:8c:07:bb:b4:a2:65:ef:2c:2e:82:25:c2:27:
         8d:89:ac:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org