Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3134312e302f32342d3234203d3e2035363530.roa
File:                     34372e3136302e3134312e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          P5zrV+leOWLgPjyOL9tJ0/kzesOVg9l9r6RQZhBwp/M=
Subject key identifier:   53:CC:8C:0C:A7:6F:40:B2:F7:45:2C:5A:C9:76:55:FB:D7:DA:2E:80
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       1EBE2A11015CC836A006A9D9288C9E604CC2604D
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3134312e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:22:55 +0000
ROA not before:           Thu 02 Nov 2023 11:17:55 +0000
ROA not after:            Thu 31 Oct 2024 11:22:55 +0000
asID:                     5650
IP address blocks:        47.160.141.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:be:2a:11:01:5c:c8:36:a0:06:a9:d9:28:8c:9e:60:4c:c2:60:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Nov  2 11:17:55 2023 GMT
            Not After : Oct 31 11:22:55 2024 GMT
        Subject: CN=53CC8C0CA76F40B2F7452C5AC97655FBD7DA2E80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b3:69:dd:ac:f0:1b:f1:64:68:0a:63:a2:22:
                    62:97:1e:72:33:6c:e0:73:4e:2e:c3:6c:6c:76:fe:
                    44:66:d3:98:29:2e:e8:02:6e:17:0a:65:2b:16:a7:
                    dc:74:0f:70:e7:c7:28:b5:5e:31:5c:4d:a6:e0:e7:
                    78:ff:5c:eb:2e:3f:af:2c:bd:6c:cd:f7:b5:d9:28:
                    72:69:c4:58:55:c4:2f:1e:49:2b:eb:53:c9:1a:a8:
                    e9:c4:cb:44:af:17:f5:e7:40:dc:69:b6:f3:26:1b:
                    68:a9:94:18:03:5d:7b:0f:76:6f:5e:ce:cb:39:94:
                    6e:99:29:42:e3:c5:b7:9d:94:8c:82:bb:62:85:19:
                    3f:ef:2f:1b:87:d6:31:20:78:dc:8f:b7:9a:d2:2a:
                    eb:0c:ba:ae:e4:e5:c3:65:c0:63:e6:a7:17:a9:d0:
                    42:aa:64:13:4c:28:53:96:b6:82:d8:df:f9:dd:e7:
                    14:76:ac:3f:80:6c:98:43:fe:44:4b:4a:f4:f9:27:
                    57:9d:df:e2:c2:92:d7:31:75:78:74:4a:64:54:4c:
                    35:22:b1:7c:bc:b2:25:ac:e8:34:ca:72:ce:27:25:
                    50:04:43:14:1d:23:79:f2:2f:cd:20:fa:a0:dc:a3:
                    6b:0f:07:7b:d7:c5:36:bf:53:7c:ef:bf:e1:41:87:
                    4a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CC:8C:0C:A7:6F:40:B2:F7:45:2C:5A:C9:76:55:FB:D7:DA:2E:80
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3134312e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.160.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:c2:ef:f0:62:aa:3d:e7:27:b3:27:73:85:5f:55:99:dc:a2:
         f5:d5:2b:a0:a0:85:b8:c9:85:1e:db:8e:74:48:2e:56:17:61:
         93:64:cb:48:11:dc:04:86:59:de:72:68:20:0d:e3:78:cc:b9:
         7a:28:5c:f1:5a:0e:8e:3b:f6:0d:84:77:48:70:db:23:58:5e:
         a4:3f:29:8f:bf:26:01:46:36:89:a6:dc:3e:93:8b:e8:b1:c9:
         9c:e4:b1:00:ce:e0:bd:3e:01:61:47:e5:68:29:1b:82:f5:dd:
         34:a6:4a:41:25:6b:6e:6c:db:3f:4d:62:c3:ac:83:e4:61:c5:
         a5:2e:a9:cb:5c:98:f8:59:07:ee:bb:7a:c3:35:29:30:c3:cc:
         e7:6d:b0:fd:ae:c7:c3:e7:f7:fb:5b:c4:5f:56:3b:eb:e4:87:
         a1:b3:ab:64:ca:ae:a4:52:37:f4:cc:dc:d9:0a:fe:5c:ed:93:
         de:23:cb:df:12:64:c8:d8:6e:c7:d3:e9:75:f6:47:74:12:99:
         7e:9a:e8:50:0f:da:ee:fb:e4:f9:71:bb:e9:94:08:0c:92:ba:
         17:78:b0:ea:a3:af:86:e4:22:74:1f:37:6e:56:fe:5a:4b:52:
         0c:73:11:22:00:c9:37:29:fc:d9:2f:7d:de:53:f0:0d:9e:9e:
         53:88:ea:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org