Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135312e302f32342d3234203d3e2035363530.roa
File:                     34372e3136302e3135312e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          6Ceckw2dTO9Tyhkw+KeHEW0z91m6ZGrMMe62VCRGupk=
Subject key identifier:   9F:D7:65:A1:9E:09:E9:68:14:4E:24:73:12:66:4C:16:04:4E:E0:EA
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       6EC186458D26324D6870F47587AFBFEF04660F52
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135312e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:24:57 +0000
ROA not before:           Thu 02 Nov 2023 11:19:57 +0000
ROA not after:            Thu 31 Oct 2024 11:24:57 +0000
asID:                     5650
IP address blocks:        47.160.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c1:86:45:8d:26:32:4d:68:70:f4:75:87:af:bf:ef:04:66:0f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Nov  2 11:19:57 2023 GMT
            Not After : Oct 31 11:24:57 2024 GMT
        Subject: CN=9FD765A19E09E968144E247312664C16044EE0EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5a:51:27:b4:5d:7b:a1:6b:69:f8:d0:87:75:
                    ce:ab:22:43:89:4b:77:e2:9f:9e:b0:d1:56:d5:e1:
                    ea:a5:80:af:69:ac:12:a4:58:ff:e7:8e:9f:d9:0f:
                    9b:da:0c:a9:f4:1d:53:65:18:0f:c3:e6:ae:70:c5:
                    41:4d:5c:47:f2:2c:4e:c9:52:f6:38:56:ae:50:c1:
                    03:65:a4:0d:76:6c:ac:8a:6e:f8:71:af:88:e1:01:
                    c8:43:51:04:2d:23:d0:0b:63:8f:02:df:f8:e1:be:
                    e4:f0:4c:37:69:04:1d:02:15:f4:ed:df:8d:13:a9:
                    8e:f2:87:93:b7:57:3c:82:dc:42:3d:06:98:d6:df:
                    09:d4:b2:c7:17:51:5f:5a:95:07:bd:4a:f2:bf:0b:
                    e0:1d:2b:70:6c:85:ec:ac:50:be:df:3f:70:05:65:
                    5c:96:6f:14:80:74:27:3a:0c:5a:fc:f8:3d:78:5b:
                    30:a5:9c:2e:70:65:64:90:d0:8b:11:56:a9:6a:f2:
                    1a:6d:09:79:c1:8b:26:1f:a5:38:35:46:18:98:d5:
                    79:f2:ea:0b:4f:33:b8:f4:47:5c:ae:80:9d:57:5d:
                    b5:b8:ef:cd:22:e3:0b:a2:e0:e6:a7:16:f6:8f:4e:
                    08:23:ba:71:3d:29:b5:bd:26:a4:ff:50:69:07:8b:
                    be:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D7:65:A1:9E:09:E9:68:14:4E:24:73:12:66:4C:16:04:4E:E0:EA
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135312e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.160.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:d5:3f:9a:21:8b:34:93:ea:8f:07:bb:fd:c1:5d:33:d2:37:
         1e:ac:b0:0d:13:c6:c3:bf:c8:e0:17:68:15:80:e6:4b:8b:43:
         e4:6a:0a:ee:cb:56:e3:07:8c:90:1b:22:49:e6:50:09:d7:2f:
         c2:64:4e:27:3d:b6:e9:82:c6:d0:1a:8a:97:d3:22:eb:e7:43:
         9d:64:0c:4d:d9:fe:9c:55:ea:96:cb:f9:fd:5a:0b:86:ac:5d:
         16:2d:8b:c0:06:94:50:90:8b:ad:1a:1c:07:1b:8f:f9:f7:af:
         5f:f5:05:85:97:a4:56:44:f5:dc:f7:17:57:c2:46:e9:c3:78:
         3b:ea:0f:b4:80:61:29:b1:0e:c1:4b:b5:e5:2f:23:5e:5d:e7:
         ce:e0:fc:e1:6e:a5:dd:9d:59:9e:af:36:07:3a:10:aa:9e:de:
         f2:73:fc:e6:17:3b:04:0b:65:79:0f:c5:de:f2:f1:5d:67:a9:
         6d:97:f5:f4:0b:35:f9:8c:13:b5:b3:94:de:e4:9b:d9:18:f4:
         54:8e:8a:40:cc:47:5f:33:ab:80:9b:aa:cc:ca:fa:16:cd:78:
         c6:e3:26:e3:d0:e3:24:c7:14:1a:ed:6b:5c:13:cb:be:c9:07:
         93:08:a0:8d:50:bb:11:8f:52:3e:99:dd:7d:1a:68:96:4b:8f:
         f3:35:d5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:37 2024 by rpki-client on console-ams.rpki-client.org