Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3231382e302f32342d3234203d3e2035363530.roa
File:                     34372e3138392e3231382e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          BYg6+oXhEID9ZOo2qjfPkqb8Zo62RE/sAVS+NTP9rQk=
Subject key identifier:   60:4B:42:76:5A:68:ED:79:67:38:8A:F1:65:25:9F:07:63:1C:07:6E
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       5A533DB497215F528CE83CC281B75DE3FD5DB163
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3231382e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:32:30 +0000
ROA not before:           Thu 02 Nov 2023 11:27:30 +0000
ROA not after:            Thu 31 Oct 2024 11:32:30 +0000
asID:                     5650
IP address blocks:        47.189.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:53:3d:b4:97:21:5f:52:8c:e8:3c:c2:81:b7:5d:e3:fd:5d:b1:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Nov  2 11:27:30 2023 GMT
            Not After : Oct 31 11:32:30 2024 GMT
        Subject: CN=604B42765A68ED7967388AF165259F07631C076E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1b:f0:6f:e5:7f:f7:a9:05:ca:45:49:e7:f2:
                    31:9d:3b:c3:2d:e0:ae:96:01:0b:e3:9c:2d:2e:3d:
                    5c:95:b5:d8:4b:08:b2:14:e8:59:cf:04:ef:27:65:
                    90:fe:86:ab:79:59:a9:77:ef:f3:35:6f:65:ff:29:
                    6d:6b:32:df:dd:fe:51:8b:06:f9:ed:c8:ad:75:09:
                    71:be:19:93:fb:00:0b:43:96:24:39:36:07:d5:1c:
                    e8:aa:9c:15:8c:5d:e0:64:d2:ac:7b:53:1f:89:e9:
                    0a:d8:d8:71:41:44:41:80:29:ed:f1:68:15:de:a3:
                    bc:30:23:74:33:a1:86:81:ff:fc:c4:44:e8:7b:3b:
                    1c:2a:f2:77:ec:1d:92:b8:2a:8c:d0:f4:bf:88:c9:
                    e9:ea:43:98:c0:bb:b9:2b:52:8f:cb:a0:de:63:80:
                    a0:fd:3e:83:6c:d4:44:1c:32:92:e1:20:85:d1:3a:
                    4a:bb:0b:33:20:a7:b6:a7:10:97:a6:5a:22:7d:1b:
                    6e:ad:ea:2e:33:de:09:71:b2:2a:2c:d5:bb:78:14:
                    ba:ba:d6:05:39:0c:fb:ea:c5:c6:0e:e3:f0:d6:70:
                    5b:2a:48:c9:6a:4c:99:4b:c6:0f:ef:8e:94:4d:e8:
                    b6:7b:e8:54:be:b4:c2:f9:7d:14:ef:4c:02:18:5f:
                    07:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4B:42:76:5A:68:ED:79:67:38:8A:F1:65:25:9F:07:63:1C:07:6E
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3231382e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.189.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:0f:70:ba:a3:0e:bf:75:59:0c:33:8f:11:7c:c3:89:8e:5f:
         35:c9:6f:4e:8c:7c:c5:00:d0:ad:80:04:46:b3:b6:8c:11:4f:
         00:9d:72:d9:87:16:97:1e:7b:f9:28:98:b8:e7:86:40:e6:66:
         f0:98:47:07:a7:e2:3f:2a:9f:e9:19:f2:f4:cc:59:27:9c:03:
         60:8f:09:d7:06:61:d2:6a:ce:44:54:fe:a4:01:df:08:81:8e:
         08:a7:e2:fd:ae:3a:5a:fd:4b:ec:9b:66:4d:30:ee:71:48:50:
         c4:fe:2a:8d:f1:85:7e:45:ad:02:55:ce:51:1b:17:bb:07:49:
         09:9d:93:c3:cb:8e:86:69:1a:aa:35:aa:ec:1e:bc:a6:47:1a:
         9a:14:b7:47:0f:90:2e:e0:d9:92:0a:8a:5d:d7:31:cd:1a:43:
         94:50:e8:44:b4:81:c2:01:28:f5:22:ca:3e:94:b1:b4:af:14:
         14:87:c1:39:9a:c5:42:29:54:4f:12:44:1c:1c:3e:d7:a9:0a:
         b3:fd:f4:8a:ca:c0:29:8f:4c:e1:78:ed:70:cf:e1:0e:56:50:
         df:60:35:1d:f2:9d:d4:12:40:ee:eb:fd:e9:4f:1d:b0:3f:05:
         4f:2c:4c:76:53:68:a5:15:8d:f4:d0:4f:1b:9f:50:71:a3:cc:
         4e:97:93:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org