Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3133332e302f32342d3234203d3e2035363530.roa
File:                     34372e3136302e3133332e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          Xvvv67TrXJ5dDKALxjO6aEgFHD0TyJCBMGZb8qSoS6E=
Subject key identifier:   1F:EE:99:CD:69:4B:9F:F5:24:F8:21:8F:7A:74:53:EE:D0:BD:8C:05
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       5699576062FC7E4FE58A64BE2412D5C7E8BFF269
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3133332e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:20:14 +0000
ROA not before:           Thu 02 Nov 2023 11:15:14 +0000
ROA not after:            Thu 31 Oct 2024 11:20:14 +0000
asID:                     5650
IP address blocks:        47.160.133.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:99:57:60:62:fc:7e:4f:e5:8a:64:be:24:12:d5:c7:e8:bf:f2:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Nov  2 11:15:14 2023 GMT
            Not After : Oct 31 11:20:14 2024 GMT
        Subject: CN=1FEE99CD694B9FF524F8218F7A7453EED0BD8C05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b6:b7:9e:5f:cd:4c:ca:07:b0:45:40:ac:17:
                    35:b6:d4:f4:a0:c1:7d:bc:9c:f7:66:01:f8:6c:df:
                    d6:4d:d5:10:02:41:51:16:13:a6:87:ad:ac:f6:fe:
                    8a:df:90:30:b8:0b:0c:80:0f:ab:c5:26:17:41:82:
                    2a:67:48:d8:51:bd:22:cf:f3:1d:de:ce:0f:69:23:
                    a3:d8:fe:a5:ed:d1:b3:9c:eb:e1:5a:27:29:7a:79:
                    7b:47:77:c4:6a:e8:0e:fb:f0:5a:ed:da:c7:d3:81:
                    72:66:d8:b9:10:e4:07:d2:15:c4:11:86:d8:c3:82:
                    4c:15:24:fb:18:77:ef:56:dc:cb:71:dc:5f:e5:cf:
                    ee:cc:be:6a:46:02:37:bb:39:69:a2:c9:97:44:df:
                    22:de:5e:2c:89:30:f3:e8:d0:79:34:61:e4:b5:c1:
                    9f:e8:fc:b6:d0:29:72:59:dc:47:87:2a:5c:94:2a:
                    8a:e3:72:af:fa:69:7d:60:42:81:db:3f:f3:c2:27:
                    81:a4:9d:7d:92:05:6c:5b:77:7f:b2:68:9c:c4:68:
                    cb:7f:85:96:38:3f:06:82:f0:46:a3:5b:4e:8e:a7:
                    7a:2f:a2:df:5f:b7:c6:06:5c:ca:39:c1:d2:c8:48:
                    6b:66:d8:09:f4:af:7e:cd:26:c7:28:36:05:1e:51:
                    59:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EE:99:CD:69:4B:9F:F5:24:F8:21:8F:7A:74:53:EE:D0:BD:8C:05
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3133332e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.160.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:6d:36:d6:de:bb:27:79:da:69:61:a0:4e:0b:03:e8:17:3e:
         84:a1:ba:4b:7a:00:10:5a:d0:89:6e:43:63:d1:92:2f:cc:90:
         1a:3a:3b:ac:3f:62:42:22:e1:6f:7d:05:57:b5:8a:64:3d:4c:
         7b:a7:fe:2b:a7:49:48:90:52:2e:29:ba:ea:48:08:b4:59:2f:
         9a:b7:41:d3:34:e1:7e:3e:c9:1c:0c:61:d9:56:88:a4:2b:8c:
         ae:88:07:d3:69:35:66:a8:f6:27:da:9c:80:a5:5c:8e:71:bd:
         2b:e3:4b:d2:31:13:18:5c:1c:a8:80:1f:61:78:8b:80:6e:d3:
         a6:fc:98:cb:22:b0:d8:7f:0f:31:ee:00:f2:27:d3:ea:57:38:
         f7:79:29:2c:3a:3e:e4:4f:70:3b:a1:67:de:b3:c2:05:12:0e:
         f3:11:b0:9e:b4:61:38:a2:35:97:eb:05:34:ab:4b:f0:51:38:
         a4:73:fb:49:c0:c8:bf:a6:4b:ac:81:6b:40:8b:22:57:9a:7f:
         f4:60:55:16:11:81:5c:6a:d2:3c:4f:0a:3e:a5:22:e7:9c:45:
         ba:b2:f8:1b:ea:df:37:7a:6b:5e:2e:71:38:08:3b:ba:d2:67:
         8e:b7:96:41:d3:d0:fe:0f:8f:7e:02:f4:55:da:14:04:b4:92:
         d2:53:33:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org