Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3131362e302f32322d3232203d3e2035363530.roa
File:                     34372e3134332e3131362e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          1w02lYKdvgVHSaHtQ4XiADktsbXbmoP+a4TLTNk4TBc=
Subject key identifier:   C5:C5:9F:CC:86:A6:34:9F:29:2B:CB:72:89:83:CD:0E:98:82:42:B1
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       2302C0F9B947C956800637D8F68161D5946136C2
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3131362e302f32322d3232203d3e2035363530.roa
Signing time:             Thu 22 Feb 2024 05:08:55 +0000
ROA not before:           Thu 22 Feb 2024 05:03:55 +0000
ROA not after:            Thu 20 Feb 2025 05:08:55 +0000
asID:                     5650
IP address blocks:        47.143.116.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:02:c0:f9:b9:47:c9:56:80:06:37:d8:f6:81:61:d5:94:61:36:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Feb 22 05:03:55 2024 GMT
            Not After : Feb 20 05:08:55 2025 GMT
        Subject: CN=C5C59FCC86A6349F292BCB728983CD0E988242B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:da:c1:c4:d7:60:3c:c2:b3:05:11:22:7d:fc:
                    fd:9f:02:b2:76:42:a9:91:1d:91:ee:43:f6:90:2f:
                    e6:a2:31:c6:a0:c9:3c:a5:19:d9:2b:f1:5a:4c:f3:
                    61:13:83:cf:9e:3c:fc:a4:8d:9a:0d:e2:27:f8:b7:
                    94:e5:7c:11:d2:92:f4:4c:1c:99:25:06:59:33:7d:
                    59:64:61:92:9d:6d:e5:34:ee:35:c3:f5:93:2b:a5:
                    c2:36:74:93:08:94:61:3c:bc:b4:5a:bc:73:0b:6e:
                    04:69:64:ee:ce:15:4b:5f:04:b2:c9:1f:86:b0:8e:
                    35:d4:01:ca:86:d2:7c:b3:64:9e:85:0b:9d:92:41:
                    0c:52:c2:44:ca:58:5b:d3:ae:e0:4a:8a:a8:38:74:
                    4a:3f:73:6f:35:6a:52:a7:46:ea:a9:e0:2a:06:d1:
                    43:58:44:d6:17:28:fe:18:dc:03:25:33:9e:02:91:
                    39:bb:a7:3b:a8:ea:1f:02:50:c4:cd:f2:a3:17:45:
                    0a:ea:87:13:5c:88:95:58:5f:0c:60:7e:21:b7:fa:
                    16:c6:ed:ef:bc:35:54:56:fc:6e:ab:c3:c9:00:7e:
                    39:79:ca:d6:52:0f:6e:c2:2e:ab:15:d2:ed:cd:c3:
                    04:8d:09:77:56:b4:5c:f4:80:fd:4f:e2:ac:8b:71:
                    d5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C5:9F:CC:86:A6:34:9F:29:2B:CB:72:89:83:CD:0E:98:82:42:B1
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3131362e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.143.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:49:55:de:70:d0:81:e9:41:8b:1e:29:9f:38:00:a1:24:0d:
         32:42:be:b0:f4:1f:31:9b:f5:e0:e4:23:37:e8:da:23:a9:3a:
         de:48:bc:1c:c6:e0:06:8b:dc:a0:4f:a8:e7:d2:5d:02:91:a3:
         f0:5e:24:e7:3f:1f:d2:ae:b6:3c:83:d7:a4:99:78:34:7a:b4:
         b6:d4:8a:db:a0:cf:b0:36:91:c9:77:b9:31:ef:68:35:e0:63:
         be:31:ab:11:f6:83:61:e3:13:50:f3:60:3e:38:15:f8:23:62:
         39:b2:e7:5b:b3:af:ff:71:1c:43:ea:8d:08:aa:19:69:be:3a:
         92:b6:51:6c:9d:97:94:62:6f:b4:d1:48:23:46:d1:23:5f:b1:
         b5:64:17:4e:af:b1:50:85:29:22:c7:37:da:3d:30:38:ec:7b:
         bc:10:3e:80:28:f6:5b:f2:7a:4c:ff:9a:6d:b3:39:45:b4:6f:
         38:4a:44:aa:e2:6c:e9:18:80:5d:82:33:00:a8:02:24:aa:31:
         b9:9f:42:99:7a:ba:77:a0:77:89:f5:4c:e0:48:d6:30:b6:74:
         2a:2d:55:5b:ed:20:3a:47:b6:3a:29:8d:31:ee:08:f0:1b:20:
         80:13:25:a8:27:f3:58:3e:2e:bc:98:5f:3b:5e:3f:32:ad:b7:
         f0:4c:d8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:37 2024 by rpki-client on console-ams.rpki-client.org