Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3230302e302f32342d3234203d3e2035363530.roa
File:                     34372e3138392e3230302e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          ANxHMN85CUPWmV1WXYQ19XBsFLCSsz0oCcvc3QI0qNg=
Subject key identifier:   DB:21:20:22:66:B6:14:52:42:9C:05:57:04:4F:BC:58:4B:BB:E7:9C
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       62A2A82B9ADFF2A1FCBCF2DA8F511A478AFB0F7A
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3230302e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:30:12 +0000
ROA not before:           Thu 02 Nov 2023 11:25:12 +0000
ROA not after:            Thu 31 Oct 2024 11:30:12 +0000
asID:                     5650
IP address blocks:        47.189.200.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a2:a8:2b:9a:df:f2:a1:fc:bc:f2:da:8f:51:1a:47:8a:fb:0f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Nov  2 11:25:12 2023 GMT
            Not After : Oct 31 11:30:12 2024 GMT
        Subject: CN=DB21202266B61452429C0557044FBC584BBBE79C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:12:05:0b:ee:19:e9:51:f6:3a:4f:ab:a5:45:
                    95:d0:b7:17:13:c7:28:43:ac:3c:d8:5a:7e:dd:0d:
                    df:21:1e:ee:5c:77:13:af:22:7b:1c:9c:2d:e2:a9:
                    cf:46:28:c8:66:62:24:3d:9b:38:14:18:a2:f3:40:
                    b1:93:f6:1a:2a:e8:a3:19:2f:14:b1:f1:2d:56:60:
                    a6:59:8b:aa:3d:e9:f5:3e:b5:01:32:c8:2c:7b:fa:
                    d5:3d:57:4c:17:e4:f0:dc:b9:76:0e:0b:7a:02:d4:
                    d4:30:90:77:75:cb:55:bf:f1:45:13:70:d7:61:f0:
                    12:04:0f:80:be:33:d8:6f:2b:89:aa:6b:e1:af:aa:
                    12:b2:4d:6d:12:99:72:9b:f1:fd:70:12:4d:38:45:
                    e7:37:4b:97:db:b0:28:16:4e:69:61:f7:8a:82:54:
                    e0:28:28:58:22:6d:f7:e0:f7:84:d6:5f:c4:a3:f5:
                    a4:53:0b:0b:c9:3b:be:41:48:fa:a6:85:aa:ec:8a:
                    47:63:66:3e:3c:e0:a5:98:c9:a2:49:74:36:21:8b:
                    b6:18:22:91:59:41:d4:fe:1e:60:83:e2:e0:e1:ee:
                    a5:d2:1f:9c:c5:d7:e3:b6:cc:60:3c:9a:97:c9:56:
                    80:95:48:7f:91:c6:48:63:f4:a3:a4:7c:bf:1f:cd:
                    2a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:21:20:22:66:B6:14:52:42:9C:05:57:04:4F:BC:58:4B:BB:E7:9C
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3230302e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.189.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:5f:20:0e:07:7c:7c:26:93:49:a9:59:9a:6e:ab:f6:3e:03:
         22:cb:ae:30:77:f7:2f:cb:d9:55:6c:5b:18:a1:1e:9b:26:28:
         d3:74:04:a7:c6:41:84:93:eb:4b:23:b6:fe:53:94:22:d5:95:
         15:11:c9:81:83:e8:14:26:0a:77:cf:6c:2f:d5:3a:2b:b7:29:
         f2:45:cc:d0:34:5c:1e:15:48:be:76:2a:50:a6:d8:d4:9f:e6:
         dd:f0:9e:73:08:f8:24:f4:d1:e9:30:37:49:bb:11:66:a0:d2:
         15:1e:db:08:c7:50:59:42:ec:8c:d6:5e:ce:96:d7:72:9e:ad:
         aa:3c:84:2d:87:7d:23:67:63:3f:e1:d4:39:50:2c:a5:6b:c8:
         b2:a4:6f:aa:73:02:96:2a:74:09:28:50:ba:46:26:18:55:15:
         0e:79:12:18:8b:ec:d7:03:5c:05:16:be:01:76:5b:b6:2d:97:
         2e:36:d6:f4:d2:ab:5c:23:0a:b5:ff:98:60:48:0f:1a:39:23:
         17:a8:31:16:53:ff:a3:be:87:fe:73:6a:c2:67:3a:d0:c7:fc:
         a4:e5:da:6b:3d:0d:5a:03:b5:a1:7c:5b:c0:e2:f4:0f:90:d6:
         83:87:8b:4c:4d:b9:a7:62:58:2e:3d:d3:9a:66:97:6e:37:6b:
         bd:a3:78:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org