Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135322e302f32342d3234203d3e2035363530.roa
File:                     34372e3136302e3135322e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          986VLUkQ6FvOoZVVu7bF/SVoCTSy7wErL6+Zd2TsEUA=
Subject key identifier:   52:33:37:8E:C7:1D:2A:D1:0C:97:B2:4B:E2:C3:5D:08:52:5A:C2:8C
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       75F843C0FE3929776A27D86DF6C0206B08DB1A95
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135322e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:25:15 +0000
ROA not before:           Thu 02 Nov 2023 11:20:15 +0000
ROA not after:            Thu 31 Oct 2024 11:25:15 +0000
asID:                     5650
IP address blocks:        47.160.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f8:43:c0:fe:39:29:77:6a:27:d8:6d:f6:c0:20:6b:08:db:1a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Nov  2 11:20:15 2023 GMT
            Not After : Oct 31 11:25:15 2024 GMT
        Subject: CN=5233378EC71D2AD10C97B24BE2C35D08525AC28C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:52:a9:c8:08:04:bc:c3:0e:4e:3e:a3:63:33:
                    8e:4f:8e:fc:02:88:98:31:31:87:6b:aa:df:f2:7e:
                    e5:b8:93:d3:a8:fb:3d:94:b8:26:c2:56:1f:8d:44:
                    4f:62:70:ab:4f:87:3f:6e:7d:ea:39:44:8f:79:c5:
                    9a:0b:b8:d6:aa:88:23:a3:42:b5:62:5e:0d:ae:84:
                    a8:3e:e8:c9:bf:ff:04:97:d9:26:ac:b2:d6:16:64:
                    a6:4a:8d:bc:5e:4f:9e:4b:0a:db:d9:7a:8b:b3:ef:
                    b2:df:b4:58:88:89:f7:98:5e:cf:01:48:dd:ad:e2:
                    cd:b0:84:c3:89:0d:d2:61:84:34:ae:7b:48:73:8f:
                    2c:f6:63:2b:97:73:5e:ef:83:40:f0:52:f8:07:de:
                    1f:57:a9:f0:df:d0:98:21:15:47:76:a4:71:86:2c:
                    f6:98:e7:87:d4:e1:58:9a:6f:06:8e:9f:d3:22:97:
                    3d:54:58:e0:0c:2b:d1:ee:de:63:6f:cd:fa:a2:c5:
                    e6:0b:d5:2a:1b:5d:16:f2:12:58:89:c9:07:22:89:
                    01:83:68:d8:92:ef:cd:60:5c:f2:fe:40:3f:7f:f6:
                    3d:d9:ac:48:4e:89:57:6f:6a:c8:7a:b7:36:76:71:
                    9a:00:ec:a7:02:64:54:c9:20:22:54:cd:8f:a4:9b:
                    55:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:33:37:8E:C7:1D:2A:D1:0C:97:B2:4B:E2:C3:5D:08:52:5A:C2:8C
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135322e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.160.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:f3:4d:c7:f0:50:ee:48:40:bc:1d:4e:df:fa:6a:26:50:e7:
         b4:17:58:d8:32:9d:5b:70:b5:1b:d6:ef:93:a0:be:aa:f2:35:
         ea:95:a8:c3:bc:ee:af:73:50:a1:47:a8:19:00:e7:5d:c7:1c:
         5e:5f:da:80:c8:0a:5e:70:20:97:73:4f:4e:b3:a0:24:26:1e:
         f3:20:48:df:03:ab:80:35:e1:31:c3:3d:76:54:4d:21:f2:d9:
         f6:2d:0c:e1:59:68:43:d1:27:a4:bf:69:c3:7a:75:39:3e:26:
         7e:38:57:81:6a:89:07:a5:25:fb:9f:c8:20:34:e1:62:bc:7a:
         30:cb:42:e0:c6:cc:f4:57:2e:d4:c1:61:d7:0a:3d:bc:60:53:
         11:dd:d4:0d:e9:3c:38:eb:a9:45:89:54:09:06:b3:ce:9e:b6:
         6a:f0:08:4e:ab:f5:85:03:1a:8f:ff:18:53:32:9d:92:02:dd:
         de:c6:bd:3e:27:eb:d5:d2:6a:36:af:56:1f:23:f3:52:ce:32:
         91:a5:15:1c:6e:3a:4f:a3:2e:20:97:3f:62:e7:fd:8f:6c:15:
         03:32:b9:88:0e:36:a3:ba:bf:c5:1a:02:ab:8a:b0:4c:94:e5:
         10:7e:9a:43:f8:89:92:3b:f4:07:03:67:22:2e:2e:80:e6:6e:
         a8:15:12:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org