Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e33392e302f32342d3234203d3e2035363530.roa
File:                     34372e3134332e33392e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          WygKVLd72yTAMZAEhA/QGjF3XUXhyRILMj+o/qYjG58=
Subject key identifier:   4A:16:73:CC:31:BD:46:E5:92:83:C3:C9:97:85:2F:23:E0:B0:21:A2
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       4E80877D623292BD15999ED4ADABE0AA6F667CF6
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e33392e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:18:13 +0000
ROA not before:           Thu 02 Nov 2023 11:13:13 +0000
ROA not after:            Thu 31 Oct 2024 11:18:13 +0000
asID:                     5650
IP address blocks:        47.143.39.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:80:87:7d:62:32:92:bd:15:99:9e:d4:ad:ab:e0:aa:6f:66:7c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Nov  2 11:13:13 2023 GMT
            Not After : Oct 31 11:18:13 2024 GMT
        Subject: CN=4A1673CC31BD46E59283C3C997852F23E0B021A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ae:06:53:c7:a6:29:89:50:fe:48:bb:d3:cd:
                    2a:48:d3:2d:f4:bb:38:d5:48:e2:8f:45:dc:e7:01:
                    5c:da:03:a2:7e:fe:9b:9b:b1:3a:12:db:1f:51:7b:
                    b6:91:62:de:0c:54:4c:80:78:ac:98:3b:c6:6a:da:
                    46:1c:a5:21:ad:94:4b:3b:22:95:79:b0:8e:82:3a:
                    f0:a5:8a:2d:de:af:71:3b:59:81:fc:1a:5e:78:1d:
                    42:ec:2a:a7:1e:c6:c6:ab:ed:a0:0c:47:49:2e:a3:
                    65:80:62:b3:38:0b:2c:2b:99:65:52:18:44:34:ae:
                    80:cd:23:ea:9a:e1:9f:4e:57:75:71:f3:44:df:04:
                    52:33:10:86:0d:93:d2:7b:ed:3d:a0:ab:bc:5c:54:
                    81:1d:70:9c:2b:ba:5c:c7:25:37:d4:97:49:50:f0:
                    e9:c3:02:69:92:b5:d4:43:be:89:00:bc:da:a7:31:
                    40:e6:56:f8:78:28:f1:58:bc:7f:04:51:45:56:ef:
                    2e:1c:e5:1b:42:12:08:c6:04:d5:fe:63:9a:a7:ce:
                    af:f5:5a:7b:16:f5:77:54:05:81:66:2d:62:22:24:
                    48:af:71:ba:04:35:6f:e6:16:29:53:b3:2e:65:58:
                    da:26:19:66:e2:43:b9:52:89:3a:41:cb:65:81:fc:
                    4d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:16:73:CC:31:BD:46:E5:92:83:C3:C9:97:85:2F:23:E0:B0:21:A2
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e33392e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.143.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:b9:68:94:81:59:e0:03:a3:eb:c5:7a:2d:42:e2:7b:78:83:
         d5:c5:48:d6:74:a8:70:9e:83:10:c3:13:cc:ba:4d:72:49:d5:
         b1:da:3e:65:cd:d5:74:9b:a2:a9:52:7b:97:55:6e:4e:6b:09:
         61:0b:03:be:88:7a:8d:13:12:b8:fe:04:b5:5c:d4:22:59:61:
         16:12:89:d8:32:a6:f8:fc:bd:68:07:16:03:87:81:d6:70:a1:
         dd:42:f0:c1:ef:c4:3d:e2:b3:f2:09:8f:6a:71:01:29:35:fa:
         ee:ce:85:9d:6f:7d:c9:6d:64:1f:3c:26:fe:b6:5a:f8:f3:27:
         e7:0a:ab:0b:f8:00:0e:0b:05:e5:e5:91:22:06:72:2e:e3:3d:
         9a:63:f7:96:b7:78:6d:0e:b8:a0:f4:e6:02:ec:40:83:06:ad:
         96:46:60:e6:2e:3a:75:6a:4e:20:cd:b5:b1:9b:84:ef:d8:6e:
         9a:1c:1e:e6:36:df:58:7c:02:c9:e2:8f:0c:04:9e:53:1f:38:
         63:c1:1f:fb:9a:9d:c4:63:b4:6e:cc:ae:92:61:cd:32:85:5c:
         65:b1:87:30:8b:c8:23:75:0e:96:ff:f7:db:42:ff:36:69:57:
         cc:1e:a0:61:1f:08:a7:c7:c9:89:2e:6a:9d:37:b8:47:89:33:
         e1:6d:91:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org