Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3132392e302f32342d3234203d3e2035363530.roa
File:                     34372e3136302e3132392e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          CCNocdZ9ebHbQFuSzthm8AhVQG9+KhdGe8Eom2v4bFQ=
Subject key identifier:   8A:0D:76:79:21:2E:26:0D:F2:EB:22:C2:D3:C0:18:1F:CF:5D:C3:94
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       1EEBEF9651080F22123BC119E42E2CB58B48DF5E
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3132392e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:19:19 +0000
ROA not before:           Thu 02 Nov 2023 11:14:19 +0000
ROA not after:            Thu 31 Oct 2024 11:19:19 +0000
asID:                     5650
IP address blocks:        47.160.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:eb:ef:96:51:08:0f:22:12:3b:c1:19:e4:2e:2c:b5:8b:48:df:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Nov  2 11:14:19 2023 GMT
            Not After : Oct 31 11:19:19 2024 GMT
        Subject: CN=8A0D7679212E260DF2EB22C2D3C0181FCF5DC394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:e7:20:f4:a5:d4:01:97:72:1c:11:a3:02:
                    1a:d2:26:0a:36:9a:04:b0:de:fe:79:c7:14:00:c5:
                    91:89:3b:c8:ee:f8:c0:fc:63:1b:f2:f7:1a:2f:8c:
                    77:a1:f4:5c:3d:29:14:66:8f:a7:d8:ae:36:36:4b:
                    a2:03:ab:19:4b:61:1e:30:a2:e8:a9:43:05:98:4b:
                    b4:6a:b6:ab:bf:53:83:d9:04:fe:04:e1:df:dc:b8:
                    d5:b8:20:e7:74:59:3c:ac:d3:c1:92:fd:18:96:62:
                    d1:b2:35:5d:7f:fe:05:c0:64:9b:97:73:38:5f:dc:
                    2a:6e:68:79:a6:96:45:3b:fe:be:54:e1:54:ac:d1:
                    74:09:96:2f:4d:10:aa:d8:6f:c9:74:95:ee:a6:4a:
                    b6:be:c1:39:4d:a5:94:0b:f0:79:5d:15:cd:e2:28:
                    64:d9:10:01:56:0e:4e:e0:ba:82:42:f1:c6:23:38:
                    d8:bd:ef:d5:39:04:8d:98:34:6a:62:e8:e1:e6:ac:
                    a1:ef:95:d5:6f:c8:6c:d4:ee:e5:61:c4:3c:6d:ca:
                    72:55:48:b7:6c:de:77:28:8e:e6:f1:f1:96:f3:48:
                    5f:ee:a3:9c:38:fe:f3:e6:9c:a5:d9:12:23:1e:a8:
                    92:22:63:bb:19:8a:4d:c1:f3:d0:65:db:54:4f:fd:
                    c5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0D:76:79:21:2E:26:0D:F2:EB:22:C2:D3:C0:18:1F:CF:5D:C3:94
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3132392e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.160.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:8f:4b:82:84:e2:60:ae:54:b6:94:94:90:64:08:dc:6a:2b:
         71:01:a8:07:52:ec:42:c8:ea:b0:0d:ee:76:b0:ff:4e:d4:51:
         5c:27:1f:a6:c8:cf:d2:10:00:3d:54:b8:d8:7e:65:61:3e:5b:
         2c:93:b0:23:b0:58:bc:9b:0c:42:52:31:74:85:00:04:e5:32:
         db:ba:77:30:50:9b:cc:de:f3:dc:85:1f:07:d0:b2:5b:77:a7:
         61:ad:e7:67:91:74:13:aa:0b:47:ee:52:92:8c:74:ec:1b:04:
         eb:91:68:1c:54:66:dc:cf:5f:1c:de:6a:0f:97:65:a6:a0:12:
         63:db:55:b7:5e:6c:26:50:9d:03:7a:71:b4:d5:b5:7e:5b:d1:
         7a:59:c3:b9:e6:28:52:58:89:9e:fa:3a:c5:c0:54:0d:bb:a3:
         04:16:5f:a9:c0:e2:49:9c:38:27:2d:96:23:46:53:34:9c:2c:
         ed:ae:d6:95:ce:c8:10:f3:55:9c:ca:22:cf:9a:1b:32:e5:ef:
         2f:a7:d1:ed:38:05:4b:5d:fc:af:2f:a7:24:d4:f4:9b:51:19:
         53:13:1c:a4:4c:74:b7:b8:c3:70:42:bb:29:e5:f6:c5:0d:ba:
         a3:a7:67:21:b8:89:aa:70:14:39:62:71:ba:75:bc:f1:88:f1:
         7c:27:68:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:37 2024 by rpki-client on console-ams.rpki-client.org