Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3230342e302f32342d3234203d3e2035363530.roa
File:                     34372e3138392e3230342e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          nhgYJkHXaCWOVwsa1ty3N3ks1AZWfaZeTQ58JZL/wZM=
Subject key identifier:   16:8E:6A:48:00:4F:E3:80:96:79:8F:2C:D0:2C:30:85:CD:93:F4:49
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       4EA0D79B731E3A8264775E77FFF53E1F79FAF371
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3230342e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:30:52 +0000
ROA not before:           Thu 02 Nov 2023 11:25:52 +0000
ROA not after:            Thu 31 Oct 2024 11:30:52 +0000
asID:                     5650
IP address blocks:        47.189.204.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a0:d7:9b:73:1e:3a:82:64:77:5e:77:ff:f5:3e:1f:79:fa:f3:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Nov  2 11:25:52 2023 GMT
            Not After : Oct 31 11:30:52 2024 GMT
        Subject: CN=168E6A48004FE38096798F2CD02C3085CD93F449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f3:a9:77:5b:35:87:13:7f:c2:f7:57:2e:48:
                    6b:b1:a0:3f:3a:34:a0:09:b9:95:5e:10:cc:39:d9:
                    1e:f3:08:bd:70:d5:cc:e3:3a:0c:07:e0:5b:6a:88:
                    fe:09:2c:0f:c5:e2:15:15:78:96:78:33:45:a2:7a:
                    86:23:d0:66:65:b6:ac:52:d2:da:38:59:81:6f:35:
                    1b:c4:da:af:cd:73:ef:d2:3e:72:c2:7a:c2:d7:56:
                    a8:eb:f1:5f:4b:e1:06:8a:b0:85:2a:7c:21:92:99:
                    b1:6d:13:e8:d7:25:d1:22:9e:78:75:6d:58:fc:d0:
                    70:de:47:6e:67:ea:7d:f7:6f:32:6e:2b:df:75:5c:
                    78:da:4b:b5:0e:b0:4e:1c:a8:fd:05:1c:b0:a2:72:
                    91:d8:13:a4:1b:25:b9:54:66:a7:b3:d7:ca:f9:dd:
                    3a:ba:5a:4c:aa:31:e0:b5:84:f6:ee:8e:43:a1:1a:
                    93:44:fa:9c:b2:c2:56:5a:9e:29:ca:ba:7b:5a:fe:
                    ab:81:d5:dd:3e:ef:8b:1d:bc:3e:d9:a6:6c:a7:0e:
                    0f:f8:29:10:b4:18:a5:a1:02:a7:a8:c3:ee:e0:a2:
                    64:e4:bd:6c:af:6b:ae:1e:11:21:29:9f:79:7f:4c:
                    fb:e9:4f:c4:04:e5:f5:97:26:f4:60:d0:55:8a:33:
                    27:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8E:6A:48:00:4F:E3:80:96:79:8F:2C:D0:2C:30:85:CD:93:F4:49
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3230342e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.189.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:89:4c:e2:16:de:b1:a9:5e:45:46:05:b5:16:3c:58:b5:90:
         0e:2e:b5:7a:08:68:f5:27:d2:54:50:84:ab:82:b6:89:fd:71:
         82:cf:89:30:49:61:dd:29:e3:2c:50:8b:b2:df:5f:89:6b:80:
         8b:e5:ba:70:84:11:72:77:bd:e7:c6:20:7d:93:d3:6b:24:d6:
         d0:bf:e9:19:ed:7d:d0:8d:b2:71:0e:83:2e:8d:9f:f9:d6:88:
         3d:90:6e:28:10:40:be:94:b8:5e:61:3a:b9:95:cc:a5:e9:c9:
         4d:9c:a4:2d:63:f6:69:3e:2f:bf:3e:dd:07:01:20:21:43:22:
         7f:98:5a:2c:80:a2:bd:23:73:dd:b4:93:fd:ae:47:82:47:9f:
         68:fd:af:aa:06:d1:ad:db:8e:a4:81:6d:f6:78:ed:b0:33:62:
         72:f8:53:c4:92:cd:3d:de:5e:02:f0:af:99:53:60:56:22:55:
         c8:b3:65:f9:1f:6e:e7:b1:62:85:3a:f4:c2:20:37:a3:eb:07:
         29:af:79:ac:4b:48:08:06:ea:93:7d:05:0d:ec:d1:e5:da:99:
         34:4b:52:5a:f1:6a:ac:13:62:61:97:16:84:a4:d2:14:96:a6:
         d8:b9:04:95:c9:a6:5e:63:be:62:43:6b:f7:b4:9f:55:28:9b:
         f8:c0:13:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:35 2024 by rpki-client on console-ams.rpki-client.org