Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3133392e302f32342d3234203d3e2035363530.roa
File:                     34372e3136302e3133392e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          Fl8KIM7yPPSiXlC/tO4WfSqNPCOcFaQIUDzQyK97xQk=
Subject key identifier:   24:A3:D2:3B:6E:5E:C7:75:49:B9:9A:9B:11:C5:FD:C8:CA:EF:9B:0F
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       6C379F513B73F38A8D53594FB0BB4B0293F3B4F8
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3133392e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:21:52 +0000
ROA not before:           Thu 02 Nov 2023 11:16:52 +0000
ROA not after:            Thu 31 Oct 2024 11:21:52 +0000
asID:                     5650
IP address blocks:        47.160.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:37:9f:51:3b:73:f3:8a:8d:53:59:4f:b0:bb:4b:02:93:f3:b4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Nov  2 11:16:52 2023 GMT
            Not After : Oct 31 11:21:52 2024 GMT
        Subject: CN=24A3D23B6E5EC77549B99A9B11C5FDC8CAEF9B0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:74:4b:b1:1e:88:a7:f1:b1:d7:a4:68:33:f5:
                    11:38:2f:27:d6:10:b9:de:b4:a3:86:64:39:94:66:
                    87:13:cc:a8:27:20:93:5d:8e:a9:c9:18:ce:8c:71:
                    08:c5:ce:9d:2a:56:59:12:28:55:fd:4a:39:bb:f9:
                    34:cd:41:50:b6:a6:7e:fb:ae:20:ef:8b:94:e5:87:
                    a9:da:c8:e5:25:18:20:f5:c3:e3:63:67:9a:3f:c8:
                    28:03:c7:4a:57:7b:9e:5e:b6:89:c6:0e:d8:3d:1b:
                    a1:92:13:26:dc:d9:52:78:e0:63:9c:b6:49:95:35:
                    db:67:7a:73:bf:54:03:82:d4:5d:64:1f:89:4a:5a:
                    06:51:b0:6a:17:3c:24:00:ff:bd:d6:02:b4:90:a6:
                    f2:e8:42:9b:f4:bf:ec:cc:d0:b7:8a:e3:c8:e0:8c:
                    a6:da:a9:c4:70:6f:e7:76:8c:8f:fb:e8:ac:b6:d2:
                    88:94:65:2b:a2:1d:c0:d7:37:08:b6:33:03:22:a7:
                    1b:c5:6f:16:06:6d:44:c7:cd:e5:54:75:47:71:ea:
                    ae:56:f9:1d:eb:fa:33:34:03:20:a8:e8:6f:b3:06:
                    64:c0:a6:54:01:de:d7:ce:29:c3:84:d2:3c:4c:18:
                    d2:1d:bd:6b:84:d2:d1:a8:06:8b:7b:a9:f2:78:5d:
                    ab:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A3:D2:3B:6E:5E:C7:75:49:B9:9A:9B:11:C5:FD:C8:CA:EF:9B:0F
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3133392e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.160.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:12:4c:01:19:d5:dd:37:bd:82:82:8b:8c:04:aa:1a:68:b8:
         f9:a2:2b:78:24:a5:7f:3c:43:36:eb:5b:61:4e:c9:c8:bd:dc:
         ee:21:c3:8f:3b:3a:ea:1e:a4:3b:16:56:66:5c:7e:ad:69:3b:
         81:b8:b1:ce:9e:73:5c:8c:3a:2b:e2:61:b0:5c:6a:4c:b8:6e:
         6f:35:12:73:34:51:cf:76:36:e5:72:29:0c:0f:9c:60:52:70:
         69:00:96:3d:f5:99:cb:c7:ab:34:40:6a:fe:45:fc:54:b6:0c:
         20:2c:99:dc:2c:c4:b5:87:69:dd:30:ab:19:f6:5b:bb:f3:3a:
         aa:0a:b6:fb:98:76:a8:5b:6c:81:0d:38:fb:07:55:05:28:52:
         3e:ca:bd:17:ac:ee:a7:47:21:20:42:5b:48:62:79:c5:fd:e7:
         5e:9a:5f:5c:95:d9:e3:ca:57:78:7c:cd:3e:a8:e1:2d:09:b3:
         12:05:62:50:b3:12:3c:53:79:45:b4:99:4a:2a:2d:28:17:21:
         d7:73:3b:83:13:42:2a:9e:d0:16:01:ca:af:4d:41:ff:67:b6:
         66:fb:92:4f:45:14:63:96:b1:14:32:2b:dc:7c:14:8d:77:91:
         56:f2:60:e8:87:ec:7e:6a:5e:7c:d1:7e:29:37:84:5e:81:f7:
         ff:c4:c9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:37 2024 by rpki-client on console-ams.rpki-client.org