Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135382e302f32342d3234203d3e2035363530.roa
File:                     34372e3136302e3135382e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          AitjYDyjV69wyZ2CaqVl+oHCccsXtA2eljHglNfQiUU=
Subject key identifier:   01:40:96:22:16:54:30:05:8C:DC:94:40:21:73:72:54:D5:C2:34:44
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       197B8FCD426174851BF72A38DCDC4C4C98F5E19F
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135382e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:26:27 +0000
ROA not before:           Thu 02 Nov 2023 11:21:27 +0000
ROA not after:            Thu 31 Oct 2024 11:26:27 +0000
asID:                     5650
IP address blocks:        47.160.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:7b:8f:cd:42:61:74:85:1b:f7:2a:38:dc:dc:4c:4c:98:f5:e1:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Nov  2 11:21:27 2023 GMT
            Not After : Oct 31 11:26:27 2024 GMT
        Subject: CN=01409622165430058CDC944021737254D5C23444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c6:69:72:ee:d6:9a:33:37:56:3a:7e:07:30:
                    2a:5c:95:1f:5f:25:62:e3:8f:98:47:eb:19:08:c9:
                    a1:a7:ef:cc:32:4f:29:7a:42:03:7c:65:18:80:0f:
                    c6:57:9b:9a:71:4f:d7:a4:3d:18:ac:13:60:f8:12:
                    30:9e:a0:42:25:bb:ad:a5:cf:6d:98:fe:07:6c:51:
                    bf:b9:9a:4d:9f:2e:d3:8c:98:6b:7b:be:31:22:33:
                    ef:b3:ac:c5:77:c4:06:9b:4d:64:d6:75:4e:39:a8:
                    2d:43:a3:8a:57:5f:b4:d2:7f:f6:c7:33:65:dc:28:
                    1f:bb:17:16:dc:e7:1e:b0:1b:6d:16:e2:40:6c:a6:
                    2c:48:6f:b8:df:d5:92:89:cf:d9:29:48:0e:74:ab:
                    09:f1:3b:d4:a5:72:de:85:65:34:cd:93:ac:8d:c6:
                    94:5b:08:5c:81:f6:d7:68:af:b4:8d:e5:9d:30:dc:
                    0b:c5:40:2b:40:d5:1e:3c:94:6c:9d:31:ae:2f:0e:
                    b8:17:97:44:0a:92:a4:18:94:fd:3e:8c:81:9c:92:
                    fe:e5:1b:a8:fc:85:36:47:6a:43:2d:a6:15:08:46:
                    80:cc:ca:34:d7:76:3f:63:0a:2d:ad:87:b3:19:f0:
                    9f:d2:61:91:d7:82:21:60:b3:98:e0:4a:d2:d8:31:
                    78:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:40:96:22:16:54:30:05:8C:DC:94:40:21:73:72:54:D5:C2:34:44
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135382e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.160.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:1e:11:f2:c6:e9:49:b3:95:27:99:84:68:80:de:49:33:e7:
         7b:b6:dc:2b:fd:7f:c2:a1:ab:d3:e8:19:d8:9a:19:49:5c:3e:
         b5:f2:dd:a0:3b:a4:71:bb:76:b1:18:50:ec:2e:8c:52:3f:9f:
         c4:7c:4a:49:64:e9:43:ec:1c:1b:90:cc:ac:0c:72:72:94:a9:
         d5:1b:7a:24:3d:20:0b:04:de:f5:97:3c:a7:b5:c8:69:ac:09:
         72:d2:d8:54:c1:3b:86:7a:f3:4c:b6:9f:0b:42:b3:29:8b:01:
         68:f9:51:03:65:2f:2d:03:e3:a9:8b:5e:02:f4:ab:67:5d:56:
         77:0b:c1:ab:fb:fd:f9:32:e8:e2:22:4f:7a:9c:ca:85:94:47:
         75:a6:2f:2b:54:25:a6:53:f8:eb:d9:ca:e8:13:b6:ad:69:66:
         59:50:d7:84:06:06:f3:fd:21:b4:c4:a5:9d:ec:83:a4:fd:94:
         cc:17:57:71:36:c4:16:69:1e:01:f4:5b:cd:25:e6:fa:95:85:
         37:59:b1:2a:bb:ee:48:94:f6:c8:b3:58:6b:b0:a5:a5:6b:3b:
         73:3c:f7:48:01:83:b2:0c:91:ee:9e:17:d7:66:08:d3:ec:b3:
         44:1a:80:c8:fd:50:8b:d8:54:41:1c:af:d7:27:de:d2:9a:0a:
         b7:ed:d4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org