Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3132362e302f32342d3234203d3e2035363530.roa
File:                     34372e3134332e3132362e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          oH6qD7AAWfMKvhfsSmrZ+GmHspNEHErnHTyVg1p+lZ8=
Subject key identifier:   F4:DD:DA:F9:C6:2D:FE:8A:E5:4C:7C:FD:D9:5F:61:2A:F5:E3:0D:8D
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       185CA799432066B8CF29AA5E7D1F6325E78AB595
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3132362e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:18:55 +0000
ROA not before:           Thu 02 Nov 2023 11:13:55 +0000
ROA not after:            Thu 31 Oct 2024 11:18:55 +0000
asID:                     5650
IP address blocks:        47.143.126.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5c:a7:99:43:20:66:b8:cf:29:aa:5e:7d:1f:63:25:e7:8a:b5:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Nov  2 11:13:55 2023 GMT
            Not After : Oct 31 11:18:55 2024 GMT
        Subject: CN=F4DDDAF9C62DFE8AE54C7CFDD95F612AF5E30D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:ed:bf:64:f2:5f:0d:43:b5:4a:87:bb:68:
                    ae:57:61:09:5f:e1:23:b1:d3:47:59:bd:e8:3e:3b:
                    5e:c5:b8:cc:6a:ec:fb:d5:2b:1b:ff:e4:c9:1b:ee:
                    ef:c6:2d:e9:f3:7a:e5:a9:5d:68:fd:9e:9b:6b:05:
                    d9:b5:52:b6:e2:11:14:35:75:fb:e7:4d:f8:e2:78:
                    6d:ba:f1:e3:1c:22:60:1d:23:09:da:80:07:67:2c:
                    4e:d7:ad:93:74:76:5a:e5:39:53:55:c6:5d:a5:d2:
                    e3:64:9f:cd:84:d3:f3:6e:30:8a:f1:ef:cd:f7:35:
                    78:d8:02:ea:87:fc:f3:2a:70:3e:9d:13:7d:86:d1:
                    b6:f8:97:0f:ad:9c:dd:65:d7:79:f8:e1:75:2c:0b:
                    8d:cd:76:b8:0e:29:f3:81:ba:72:f9:b0:81:a2:21:
                    97:97:cb:1d:da:95:d5:70:61:86:30:e3:0e:19:06:
                    1b:5d:3b:0d:39:b2:0d:ba:6f:5c:04:53:7d:1a:17:
                    ad:61:2b:37:ad:e6:1e:09:fe:f2:d1:b1:93:be:e3:
                    06:30:81:42:d8:37:cc:f8:9e:5a:65:c9:fe:92:03:
                    4f:a3:55:c0:4d:8f:10:fe:63:02:2c:72:50:28:7d:
                    30:22:0c:9e:d9:e5:08:d4:da:fc:2e:56:3c:63:76:
                    91:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DD:DA:F9:C6:2D:FE:8A:E5:4C:7C:FD:D9:5F:61:2A:F5:E3:0D:8D
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3132362e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.143.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:c4:3c:47:d7:6c:35:a9:e4:9c:08:86:66:13:5d:51:01:90:
         1a:84:8c:14:89:74:3f:f2:9d:04:0e:cf:df:a2:86:18:75:e7:
         31:1f:77:13:75:7c:f2:a0:2c:09:3a:8e:cc:39:f9:f4:13:46:
         8c:1f:49:ba:77:d8:34:38:82:d3:56:5c:b8:6d:3c:1d:cc:81:
         15:98:e9:c3:7b:fb:54:3d:d5:0c:45:8d:b6:11:6e:57:d4:ad:
         28:99:b3:af:fa:41:f6:31:a7:e2:a2:b0:ea:32:cf:ad:6d:88:
         ca:d8:af:1d:a8:23:3c:a0:ef:ae:ac:88:f2:e8:66:14:44:03:
         bb:27:0f:69:51:32:7f:37:71:63:e1:e7:2b:3c:21:49:08:b3:
         31:57:6b:28:69:52:09:2a:40:0f:51:63:4c:e6:f2:c5:2d:02:
         f3:85:3b:69:33:b0:1b:67:6d:87:4c:e6:39:00:28:7c:80:3e:
         a0:21:34:d5:24:52:ff:4b:5e:8e:76:f2:b0:20:b8:f0:62:38:
         02:21:a7:b2:b4:9e:86:2f:5a:83:b8:f0:ad:06:4a:50:fa:af:
         84:db:6d:61:a0:5f:d4:6e:99:2a:f2:cf:c3:5c:0e:23:85:d9:
         b2:c2:27:04:dc:b9:bb:01:24:4e:54:d1:d5:05:27:e2:86:3f:
         56:8e:12:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:37 2024 by rpki-client on console-ams.rpki-client.org