Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3230312e302f32342d3234203d3e2035363530.roa
File:                     34372e3138392e3230312e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          KPbERDELPiMkcW+FfYhNXm/LDK6b+XDSeBVviSnwZeU=
Subject key identifier:   90:A4:10:8D:BF:16:B9:0E:1F:8F:21:D8:58:C7:14:B4:84:3E:D5:94
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       7CB55C332837A9F2DBBE5E8998AA4A0F1529256A
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3230312e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:30:21 +0000
ROA not before:           Thu 02 Nov 2023 11:25:21 +0000
ROA not after:            Thu 31 Oct 2024 11:30:21 +0000
asID:                     5650
IP address blocks:        47.189.201.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b5:5c:33:28:37:a9:f2:db:be:5e:89:98:aa:4a:0f:15:29:25:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Nov  2 11:25:21 2023 GMT
            Not After : Oct 31 11:30:21 2024 GMT
        Subject: CN=90A4108DBF16B90E1F8F21D858C714B4843ED594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1d:33:ae:9b:ab:09:e8:23:20:3c:af:30:77:
                    78:93:82:74:be:61:bd:ad:f6:1e:0e:65:9b:19:29:
                    6a:a4:f7:8d:69:ae:1b:1f:80:f7:aa:ed:7c:e7:4e:
                    db:53:f0:88:fe:8f:05:6a:ab:01:82:18:de:8e:a5:
                    be:c2:6e:d4:c4:8b:55:e0:06:73:7e:0b:d7:a0:d3:
                    8f:a6:72:ee:bd:af:f4:ae:fb:ef:03:f2:bc:db:d3:
                    da:e3:86:b4:0d:7c:1a:26:c2:e5:24:9c:f4:51:78:
                    f9:e5:3b:ca:a2:ef:d3:b9:0b:c9:ad:57:77:5c:e7:
                    da:13:f8:a9:9f:38:0e:c5:8d:e9:de:1d:3b:be:e1:
                    1a:78:17:0d:a9:04:40:c9:20:3d:f8:c7:65:a4:86:
                    e4:33:89:54:e3:d2:e4:42:a3:4b:72:aa:0d:c2:51:
                    18:a6:fc:9f:a7:fe:97:ff:f5:7f:65:6c:30:44:a1:
                    17:f7:32:3e:cd:8c:78:60:99:53:35:3f:d3:20:44:
                    93:50:2a:b5:b2:38:07:69:c5:05:70:8b:67:de:9f:
                    d9:e0:b2:ea:f7:73:e7:2c:fd:3a:8b:36:29:de:5e:
                    67:76:a8:3b:97:28:7a:34:20:5c:9c:69:cf:f3:46:
                    c2:1c:3a:5e:3c:cc:dc:6d:bc:c5:3d:d8:7e:dc:d0:
                    fc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A4:10:8D:BF:16:B9:0E:1F:8F:21:D8:58:C7:14:B4:84:3E:D5:94
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3230312e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.189.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:16:e3:5a:a4:01:ce:52:9f:1e:e1:6f:84:ee:54:dc:a3:c4:
         64:a7:d9:b8:fb:1e:c4:05:8d:4d:5a:bf:9a:fa:e7:0f:b0:e7:
         9e:a5:02:a4:a3:d0:ed:17:f2:a5:d7:6f:cb:d5:0b:7e:1e:68:
         b5:20:9e:c1:f3:62:ce:46:2e:7f:ce:96:2d:cd:89:8a:a4:c0:
         9b:4d:1d:ce:6f:49:33:cf:d0:d1:51:7d:11:59:50:68:d5:dd:
         6f:71:dd:0d:3e:41:50:d8:7d:ca:f5:d7:5e:81:b6:bc:2b:ab:
         df:03:af:e0:93:30:4a:30:ae:ad:55:8a:74:02:63:09:49:00:
         1e:e7:1c:5d:2e:50:ab:ae:e0:67:dc:9d:23:13:02:94:04:68:
         3c:55:2c:b1:1f:8c:62:97:49:da:73:44:17:e4:7c:1a:34:cd:
         a3:e2:b3:cb:8b:42:a6:03:72:aa:a2:96:60:5b:eb:71:1a:56:
         9b:a4:d9:fd:85:e9:52:df:08:05:da:7c:4f:48:46:fc:71:2a:
         5f:1e:ce:20:d3:7f:73:92:2d:ed:dd:0a:20:e3:55:50:5a:00:
         bf:ae:42:84:42:e0:42:11:31:24:70:fd:3f:67:47:1c:f7:e6:
         69:36:83:76:b1:d6:da:41:b8:ba:4f:2c:d6:85:f1:e1:8e:e9:
         c0:62:8e:d0
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUfLVcMyg3qfLbvl6JmKpKDxUpJWowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmMwZDY3MmFlOWRiZTg4MTM1ODkzZTNkYzE5YTg4NWEw
Njc4NTlmZGFlNjY4ZDVhNzcwHhcNMjMxMTAyMTEyNTIxWhcNMjQxMDMxMTEzMDIx
WjAzMTEwLwYDVQQDEyg5MEE0MTA4REJGMTZCOTBFMUY4RjIxRDg1OEM3MTRCNDg0
M0VENTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh0zrpurCegj
IDyvMHd4k4J0vmG9rfYeDmWbGSlqpPeNaa4bH4D3qu18507bU/CI/o8FaqsBghje
jqW+wm7UxItV4AZzfgvXoNOPpnLuva/0rvvvA/K829Pa44a0DXwaJsLlJJz0UXj5
5TvKou/TuQvJrVd3XOfaE/ipnzgOxY3p3h07vuEaeBcNqQRAySA9+MdlpIbkM4lU
49LkQqNLcqoNwlEYpvyfp/6X//V/ZWwwRKEX9zI+zYx4YJlTNT/TIESTUCq1sjgH
acUFcItn3p/Z4LLq93PnLP06izYp3l5ndqg7lyh6NCBcnGnP80bCHDpePMzcbbzF
Pdh+3ND8eQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFJCkEI2/FrkOH48h2FjHFLSE
PtWUMB8GA1UdIwQYMBaAFMsIhtIESKZjx89cThl5rG952wUgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzIv
Q0IwODg2RDIwNDQ4QTY2M0M3Q0Y1QzRFMTk3OUFDNkY3OURCMDUyMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzQ2YmYxZjAzLTJlYmQtNDA1ZS1hNWI3LTYyYmRmM2Q3ZGJlNi9iYzBk
NjcyYWU5ZGJlODgxMzU4OTNlM2RjMTlhODg1YTA2Nzg1OWZkYWU2NjhkNWE3Ny5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8yLzM0MzcyZTMxMzgzOTJlMzIzMDMxMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAvvckwDQYJKoZIhvcNAQELBQAD
ggEBABMW41qkAc5Snx7hb4TuVNyjxGSn2bj7HsQFjU1av5r65w+w556lAqSj0O0X
8qXXb8vVC34eaLUgnsHzYs5GLn/Oli3NiYqkwJtNHc5vSTPP0NFRfRFZUGjV3W9x
3Q0+QVDYfcr1116Btrwrq98Dr+CTMEowrq1VinQCYwlJAB7nHF0uUKuu4GfcnSMT
ApQEaDxVLLEfjGKXSdpzRBfkfBo0zaPis8uLQqYDcqqilmBb63EaVpuk2f2F6VLf
CAXafE9IRvxxKl8eziDTf3OSLe3dCiDjVVBaAL+uQoRC4EIRMSRw/T9nRxz35mk2
g3ax1tpBuLpPLNaF8eGO6cBijtA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org