Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135352e302f32342d3234203d3e2035363530.roa
File:                     34372e3136302e3135352e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          T+4IXR41RaT7SpMQ+lTKEDvwdamcx/ao5pGvnIHlay0=
Subject key identifier:   3B:6F:B9:83:9E:9A:44:AF:EE:0E:32:D0:F9:98:30:F7:9C:D4:B9:24
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       25ABE3372C438C19BA618B8445DF064BA7F03704
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135352e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:25:48 +0000
ROA not before:           Thu 02 Nov 2023 11:20:48 +0000
ROA not after:            Thu 31 Oct 2024 11:25:48 +0000
asID:                     5650
IP address blocks:        47.160.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ab:e3:37:2c:43:8c:19:ba:61:8b:84:45:df:06:4b:a7:f0:37:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Nov  2 11:20:48 2023 GMT
            Not After : Oct 31 11:25:48 2024 GMT
        Subject: CN=3B6FB9839E9A44AFEE0E32D0F99830F79CD4B924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:03:65:93:c4:db:e7:db:84:8f:46:27:35:ca:
                    cd:ef:8d:e7:72:fa:5b:7f:28:9a:98:32:96:cc:f0:
                    96:3d:15:1f:1f:56:86:d6:c7:6d:dc:ae:db:ff:f3:
                    6f:3c:08:7e:b0:d4:52:6a:63:e3:cc:5e:fc:c8:5e:
                    e9:19:85:54:2c:d3:40:e5:f5:2d:74:f8:71:59:c6:
                    27:16:dc:b3:0a:87:fd:e3:95:f1:e3:f5:68:d4:84:
                    23:77:8d:86:87:7e:75:9d:92:47:b8:3e:11:18:3c:
                    e8:8a:43:90:29:1f:7a:7a:3e:2a:e3:23:2f:0c:93:
                    d4:e7:17:0f:d3:2d:a6:9a:a6:8a:0b:b8:2d:91:ad:
                    0a:d1:01:94:25:24:4b:25:41:84:42:51:18:04:4f:
                    fb:a8:a7:ed:e1:7b:76:dd:ba:96:15:05:44:af:02:
                    88:ff:7a:11:7f:39:18:6a:55:a2:5a:27:dd:2f:83:
                    db:ed:12:ad:cc:7d:5b:73:82:07:5d:d6:e9:f8:03:
                    86:cc:8d:67:19:36:72:c8:e2:49:bc:57:3c:4e:ff:
                    7a:f9:69:df:58:c4:5c:0c:b2:00:2c:1c:65:3b:28:
                    60:e0:01:db:8c:14:c4:aa:b9:a6:f9:50:f7:f1:52:
                    4c:6b:d9:50:4e:13:d9:d9:dd:7c:39:7a:f8:bb:5b:
                    aa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6F:B9:83:9E:9A:44:AF:EE:0E:32:D0:F9:98:30:F7:9C:D4:B9:24
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135352e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.160.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:b0:0d:33:2e:7e:87:66:4d:3f:5c:cf:90:22:6a:c2:80:ba:
         b9:10:93:e6:d7:4f:5d:76:d6:8b:df:61:0f:20:8d:cb:0d:60:
         fe:64:ce:8a:27:3e:49:d9:30:73:a0:e3:00:ed:8e:1c:e7:10:
         74:88:d7:e1:93:4e:ee:cb:de:b8:98:96:d7:bb:82:b2:8c:66:
         51:79:ec:f0:b9:41:8f:be:f4:25:a9:35:2a:3c:50:8c:df:01:
         e2:50:3f:7f:b1:b3:db:00:d0:dc:5a:3d:be:2b:54:cd:27:fb:
         be:27:56:25:26:a1:c3:36:f4:61:bf:7b:56:9e:59:37:ea:23:
         c7:19:bf:1e:d5:a6:51:4b:d6:bb:e7:48:85:f4:06:10:09:cf:
         c8:d6:5d:32:f9:98:6e:58:bf:ed:52:30:50:29:ef:85:0e:80:
         bb:f5:26:cc:ee:83:a8:66:42:14:80:7d:54:46:26:5a:cc:2c:
         89:d5:c0:7a:98:d1:55:02:db:a1:1a:93:c9:fc:60:49:8f:65:
         1b:9f:19:f5:5a:37:07:45:d0:e7:d5:c9:59:8b:1b:30:e8:71:
         3c:54:38:ef:e7:8b:ae:49:58:c9:67:f1:88:7e:25:7b:82:a5:
         78:51:18:55:1c:05:be:46:b4:96:ef:e1:52:17:95:00:a2:ff:
         19:2c:e5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org