Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3133352e302f32342d3234203d3e2035363530.roa
File:                     34372e3136302e3133352e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          STd9qWwLIAW1yeWU4iMqmwcklxzc5nFtUKZw4QtNOww=
Subject key identifier:   86:03:5B:E2:8F:84:4F:6F:7E:A1:46:BA:C9:A5:A0:6B:77:E5:43:95
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       6E982A602A59CA61DE2F241F1037BD8932CD981D
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3133352e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:20:50 +0000
ROA not before:           Thu 02 Nov 2023 11:15:50 +0000
ROA not after:            Thu 31 Oct 2024 11:20:50 +0000
asID:                     5650
IP address blocks:        47.160.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:98:2a:60:2a:59:ca:61:de:2f:24:1f:10:37:bd:89:32:cd:98:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Nov  2 11:15:50 2023 GMT
            Not After : Oct 31 11:20:50 2024 GMT
        Subject: CN=86035BE28F844F6F7EA146BAC9A5A06B77E54395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:02:50:f1:af:ea:98:06:ce:ed:c9:17:dc:ba:
                    ef:53:35:31:02:89:23:f8:20:5f:47:78:8c:1c:b9:
                    f8:ff:9d:86:6c:55:ce:02:94:a1:71:c4:d5:31:8a:
                    6d:3f:be:70:4b:ec:4b:aa:e4:89:cf:91:dd:9e:27:
                    f3:bf:dc:73:98:8f:8a:39:97:3f:1f:e5:7b:c5:65:
                    b5:47:f6:5e:cd:e8:64:a5:f1:9b:ff:8b:4e:ce:b7:
                    b8:42:11:31:44:72:6b:53:d9:8e:f0:3f:61:1c:95:
                    2c:be:b2:ac:87:35:0a:ac:4e:63:f3:7f:13:c7:3c:
                    36:2d:9a:e4:56:3a:49:be:8f:fb:a7:c5:94:c3:f2:
                    e7:7e:03:a6:ec:c7:71:58:9c:18:e6:73:1b:ff:19:
                    f8:f4:7f:29:00:e1:28:e8:d2:37:c7:92:d5:e2:fe:
                    1e:4e:43:9e:14:c4:ca:f0:de:87:76:96:30:0b:a9:
                    ac:f9:ff:ec:bf:ba:91:d6:f3:41:5b:3b:93:1a:3b:
                    72:03:e4:67:08:b9:7b:c2:4d:e2:de:8f:70:9d:40:
                    db:e7:36:1c:74:4a:0c:3e:ed:4b:2a:c2:7b:b0:1d:
                    58:2c:49:2f:e4:65:b8:d9:5b:a8:ca:69:00:01:06:
                    b3:5b:c4:bb:5b:1e:79:61:6a:1f:21:fd:66:eb:33:
                    79:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:03:5B:E2:8F:84:4F:6F:7E:A1:46:BA:C9:A5:A0:6B:77:E5:43:95
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3133352e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.160.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:ef:9c:b9:83:4d:3c:65:ad:84:d4:19:5f:7a:29:7b:15:cb:
         6f:62:cb:3f:a4:20:77:1a:47:e4:46:7b:18:b4:e1:e9:be:07:
         29:c5:ce:ce:af:84:82:0b:4d:85:d6:e9:71:ca:0a:9c:7d:fe:
         56:d9:5d:69:77:67:9a:dd:47:6f:2c:4c:2e:0b:de:1f:69:15:
         55:4d:cf:4a:bd:b3:b7:e0:74:99:2c:82:0a:7f:63:95:98:48:
         62:3b:81:96:ed:b8:97:d2:7a:5a:1b:e3:35:b4:9e:5e:0c:c0:
         6d:f3:ea:9d:39:39:e3:40:9c:f2:1c:d3:f1:0d:9c:d4:2d:86:
         b1:8f:b8:83:3b:1b:75:db:48:00:11:6b:44:21:89:93:5a:ea:
         2c:c7:9f:d6:6a:59:64:bd:cb:1f:19:91:76:b5:9a:fb:66:3d:
         15:f0:38:2f:da:23:69:f0:d5:3f:58:0f:a4:a4:9f:53:4c:67:
         9a:da:29:e2:94:89:78:25:08:33:84:f1:90:f4:ef:28:a7:80:
         48:0c:59:26:f1:21:94:1a:46:6e:51:ba:4c:9d:88:17:9d:b6:
         9b:b0:d0:5d:f9:1e:21:d3:07:3e:0e:13:8d:8c:22:74:0f:a8:
         12:58:83:e7:5c:4f:bb:f8:68:53:f4:d1:8d:5b:e8:b7:63:c3:
         cd:d2:65:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:37 2024 by rpki-client on console-ams.rpki-client.org