Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3133342e302f32342d3234203d3e2035363530.roa
File:                     34372e3136302e3133342e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          idfGtaHWGSjb0FLpgWgoDn9Kx62YOFNZW6FYFTBsgH4=
Subject key identifier:   17:14:33:81:96:0E:0C:0E:FE:BA:44:08:4E:1F:8A:45:2B:FB:D8:18
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       6B6E3D5B2B3060A3BA92FAA89DCC10A9D0678912
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3133342e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:20:24 +0000
ROA not before:           Thu 02 Nov 2023 11:15:24 +0000
ROA not after:            Thu 31 Oct 2024 11:20:24 +0000
asID:                     5650
IP address blocks:        47.160.134.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6e:3d:5b:2b:30:60:a3:ba:92:fa:a8:9d:cc:10:a9:d0:67:89:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Nov  2 11:15:24 2023 GMT
            Not After : Oct 31 11:20:24 2024 GMT
        Subject: CN=17143381960E0C0EFEBA44084E1F8A452BFBD818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:33:29:b1:f0:9b:ab:f2:4b:cc:6d:45:f5:86:
                    19:c8:7f:fe:65:ae:34:80:fe:b4:1a:05:a6:0c:dc:
                    ff:87:b6:99:50:76:7e:52:11:3d:06:bf:11:86:94:
                    25:d0:4e:0b:fd:fd:72:73:38:9b:a4:46:7e:71:6e:
                    49:d0:29:c0:03:32:36:60:37:e0:84:14:49:4f:18:
                    7d:7a:8b:93:74:df:de:48:48:eb:05:90:e8:43:55:
                    6b:53:c6:c6:5f:0d:3a:46:92:cf:d5:c3:e8:91:f7:
                    4f:38:d7:46:65:0f:96:8e:72:4a:2d:62:8d:cd:25:
                    25:7a:5f:a7:0b:f0:7f:11:2a:4c:0f:18:bb:4c:69:
                    18:a1:51:88:43:1c:7f:c9:4d:d7:11:77:4b:ac:34:
                    15:8b:ee:90:f9:14:11:c2:a7:fb:9f:9b:31:8c:eb:
                    0e:9a:0e:6f:a6:e4:24:a0:fc:6a:b0:ba:cc:92:b6:
                    b5:4d:ba:15:f3:54:ca:d8:6a:6b:d6:5b:aa:0c:c1:
                    76:bb:76:12:3c:1b:4a:cd:d1:79:8d:fa:de:32:84:
                    3b:5a:58:14:35:9f:c7:38:37:46:66:18:f1:d6:3c:
                    96:03:0e:4c:69:a0:99:45:e3:64:87:5d:d5:04:4d:
                    a7:fe:35:0e:64:4c:7c:d4:29:a9:3a:8e:24:bf:41:
                    60:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:14:33:81:96:0E:0C:0E:FE:BA:44:08:4E:1F:8A:45:2B:FB:D8:18
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3133342e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.160.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:2d:da:6d:2f:56:96:e3:e0:b2:ba:0d:e8:91:f6:fa:6b:45:
         66:b3:21:3c:ed:5a:ef:d5:b2:cd:d8:9b:05:34:15:d0:d7:b6:
         21:35:1d:cd:3f:2d:fc:c9:bd:cf:24:ed:2d:31:9d:49:72:4d:
         47:5e:3b:74:6d:64:aa:ba:d6:a9:0f:c2:ff:61:1a:8b:dd:89:
         99:29:43:78:c4:3e:a4:da:c6:f4:b5:b7:c6:c3:ce:9d:c3:04:
         8d:c9:30:33:48:6c:91:7f:06:b0:30:67:b7:70:01:e4:bf:6e:
         0b:2c:16:bc:ef:15:65:00:1f:20:0c:b6:2b:fa:ee:4e:7a:92:
         94:b0:a4:bb:de:fc:5b:ac:ff:5d:0f:b5:a3:f5:6b:8a:dc:d1:
         b6:23:c4:3f:89:da:b4:d9:fe:be:a6:35:ac:71:b8:ba:72:14:
         3f:97:3e:17:10:c0:2f:33:8c:09:e0:23:66:03:65:da:f5:22:
         02:68:78:f1:81:14:35:0a:4f:52:7a:af:29:db:3c:1f:2b:09:
         e9:33:a1:01:c2:de:30:9e:85:fd:26:a8:15:22:58:fd:9f:46:
         5c:19:e7:e8:00:ea:b1:07:c9:44:54:d4:e5:ac:ce:05:aa:74:
         1e:cc:16:19:18:50:6d:9e:6b:76:0d:d5:82:c0:e6:ee:4f:4c:
         25:2c:be:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:37 2024 by rpki-client on console-ams.rpki-client.org