Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3133362e302f32342d3234203d3e2035363530.roa
File:                     34372e3136302e3133362e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          zCp9X7W6d/sg9IAmK9ixOMjjae3fE8e+kJccfjcBAx4=
Subject key identifier:   83:99:1A:EA:7C:52:75:E9:89:59:83:78:0C:BA:B2:44:6F:33:45:29
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       1389ADCFCF80A3F4280E40DA481510262732B54C
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3133362e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:21:02 +0000
ROA not before:           Thu 02 Nov 2023 11:16:02 +0000
ROA not after:            Thu 31 Oct 2024 11:21:02 +0000
asID:                     5650
IP address blocks:        47.160.136.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:89:ad:cf:cf:80:a3:f4:28:0e:40:da:48:15:10:26:27:32:b5:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Nov  2 11:16:02 2023 GMT
            Not After : Oct 31 11:21:02 2024 GMT
        Subject: CN=83991AEA7C5275E9895983780CBAB2446F334529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dc:dd:24:a1:49:66:d8:dd:aa:15:5e:fd:f1:
                    d1:c3:f5:fe:9c:c5:d8:3f:68:1f:c0:c3:9b:71:32:
                    d0:12:0b:c3:be:a9:8f:d4:35:ee:e7:04:08:3f:e4:
                    d4:63:90:46:f7:04:10:6c:32:77:11:b0:a0:88:af:
                    bd:97:ba:58:d0:45:71:fa:6b:59:40:ee:5e:51:11:
                    14:cc:07:d0:44:94:35:91:cb:cd:e6:b5:d6:5c:79:
                    1b:fa:b1:92:38:7e:55:f1:22:4e:a2:64:31:78:59:
                    27:9b:ca:9b:f6:34:f7:72:0b:fd:a3:dc:2e:0a:b7:
                    db:96:ba:07:7b:04:9a:91:e3:52:87:dd:50:5a:2f:
                    ac:e9:5c:2e:3b:23:1f:22:70:8d:e0:ed:e4:4b:b9:
                    9e:23:3f:4e:ed:9a:0a:24:9b:0e:b9:c5:49:50:4d:
                    5c:ea:07:8d:dc:57:ec:54:66:17:1e:f9:e7:3a:08:
                    36:d7:84:d1:5d:53:64:9d:11:fc:76:a9:66:5d:03:
                    ae:71:f9:df:14:34:c7:0e:1b:51:23:50:3d:a7:be:
                    1f:b6:5d:7c:d5:f8:ad:02:25:11:08:ad:e8:2d:c9:
                    3f:50:5e:00:20:1f:5e:dc:1f:40:a6:bc:28:3b:f8:
                    60:e1:05:70:c3:b2:b3:1a:7c:d6:3f:62:56:7c:9b:
                    66:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:99:1A:EA:7C:52:75:E9:89:59:83:78:0C:BA:B2:44:6F:33:45:29
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3133362e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.160.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:85:90:b9:1e:ed:92:b5:64:ca:96:72:c7:44:e7:02:a4:80:
         9b:c4:c6:81:23:5f:b3:7e:d4:69:fb:1f:b7:e5:46:6a:ed:ee:
         1e:48:61:5f:65:ca:e1:fa:b4:c1:a5:eb:25:cb:70:18:8a:85:
         21:7a:09:51:38:c8:40:0a:8a:fa:2a:4e:ca:0e:da:fc:d2:22:
         ff:f1:fe:6f:57:96:a1:bc:96:a0:f3:dd:96:b6:a0:b7:d5:af:
         58:a1:3c:d0:16:0d:2e:ea:71:6d:c9:77:97:eb:e8:b9:48:c5:
         cf:6e:f7:c2:5e:d0:b5:30:cb:46:b9:89:15:ea:fa:80:fb:6b:
         05:35:82:c9:25:62:38:f7:28:13:e2:af:ce:13:5b:bf:72:4c:
         a3:e5:64:49:0e:6c:56:82:6a:e0:b5:43:cf:f7:60:3c:a7:c4:
         db:a5:50:f8:60:38:b8:fb:c6:be:d1:40:22:8d:c7:8e:9a:a7:
         89:1e:fe:b7:90:a1:5e:80:9c:3e:f9:5d:d2:3a:82:d4:25:a2:
         c9:b4:58:63:b6:cc:7f:68:44:12:85:68:04:68:f3:de:78:67:
         bb:24:e8:16:6f:71:cb:d0:cf:c5:d3:00:63:89:fb:03:e9:45:
         bf:04:8e:c5:dd:df:0b:19:aa:57:bb:bb:51:ba:f9:41:51:b0:
         bb:df:a0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:37 2024 by rpki-client on console-ams.rpki-client.org