Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3231392e302f32342d3234203d3e2035363530.roa
File:                     34372e3138392e3231392e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          jBteD3gTAR6JPPgsxrMRiacvxSKAOYL3y52hQzcqmbE=
Subject key identifier:   3B:81:C9:5A:85:52:B6:25:B5:87:9D:95:F8:22:76:F0:E3:66:6B:88
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       60A017908A70A94A7ED239F04DF00DE30D294D7F
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3231392e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:32:40 +0000
ROA not before:           Thu 02 Nov 2023 11:27:40 +0000
ROA not after:            Thu 31 Oct 2024 11:32:40 +0000
asID:                     5650
IP address blocks:        47.189.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a0:17:90:8a:70:a9:4a:7e:d2:39:f0:4d:f0:0d:e3:0d:29:4d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Nov  2 11:27:40 2023 GMT
            Not After : Oct 31 11:32:40 2024 GMT
        Subject: CN=3B81C95A8552B625B5879D95F82276F0E3666B88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a9:c2:2b:50:e3:14:28:07:2b:47:77:33:aa:
                    4c:92:4c:f4:78:fc:9c:f4:c1:84:06:50:65:2b:e5:
                    05:d7:b5:56:11:ed:29:65:df:af:a5:d1:3f:5a:f5:
                    17:d9:69:67:08:05:0f:f0:90:0d:df:82:7e:7e:ab:
                    90:45:a6:97:a8:28:be:2e:75:a8:f6:02:b8:46:fd:
                    e5:4a:66:4f:4d:7f:20:f4:a3:dc:0b:8c:2e:e3:8a:
                    bc:83:62:be:da:0a:08:b9:8b:a9:5a:ec:3c:f2:b0:
                    0a:5d:10:17:f8:a6:20:53:4c:37:49:29:c2:fb:c9:
                    28:da:0f:ba:52:1e:10:54:92:ac:7f:dc:92:f1:6f:
                    0a:e4:c1:c2:15:7d:f1:50:1d:06:16:d8:69:28:e1:
                    73:1c:74:dc:f0:95:89:af:95:a8:55:36:4a:56:5b:
                    46:7a:97:ec:8f:e1:42:af:cd:ee:66:06:23:b5:1b:
                    36:18:4a:c1:f0:96:13:ad:7c:32:5d:76:81:ae:57:
                    1d:32:87:3b:40:9e:03:64:8d:06:4e:af:16:c8:08:
                    a8:fb:a6:39:c6:e7:65:92:8b:f3:21:b5:d9:42:82:
                    64:c7:8e:0f:e3:09:8a:c8:e4:48:6e:8d:8c:a1:b5:
                    d7:ae:00:19:31:00:a3:b3:3a:57:64:64:78:4a:1b:
                    b6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:81:C9:5A:85:52:B6:25:B5:87:9D:95:F8:22:76:F0:E3:66:6B:88
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3231392e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.189.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:ec:a7:72:86:6b:d7:5d:4b:a5:19:2c:fb:d7:0d:dc:5a:39:
         65:8a:51:82:bb:3b:01:b9:da:6c:d5:58:f7:e6:fc:1e:a3:46:
         af:61:6a:c0:5f:39:3e:00:4d:c2:44:53:c4:09:64:9b:77:f2:
         28:2c:db:73:7a:a2:5e:38:36:26:82:bc:c5:06:ab:0b:34:5c:
         8e:27:a5:7a:49:19:0d:b6:74:ee:c3:eb:ab:02:40:ad:c5:5d:
         a2:9a:fd:3b:49:c9:30:e5:2b:b0:44:5e:d9:9c:0c:52:27:09:
         9b:c5:70:26:e7:a1:1e:66:a8:2b:d3:76:3e:fd:ea:7c:11:ab:
         93:21:b9:1e:6f:d0:7e:a6:07:e7:3f:d5:c3:d8:c8:90:31:06:
         7b:2e:7f:da:17:50:c8:68:db:23:12:c4:c3:84:1f:61:66:25:
         e5:e4:1e:a0:cb:00:b7:76:f8:f4:a8:e1:41:8f:fb:bc:45:69:
         64:ab:ae:66:a5:5a:f3:fc:bd:42:4c:e0:86:d5:a9:57:f7:c7:
         29:b1:ff:41:78:30:cf:af:f3:48:46:e4:d2:e6:18:a5:bd:96:
         bd:00:19:e1:89:82:4b:14:cd:db:56:d0:09:94:d4:44:2e:16:
         74:2d:b0:e4:2d:e7:c7:65:5f:cb:4b:df:1a:aa:9c:5b:30:0e:
         92:5f:1e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org