Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135392e302f32342d3234203d3e2035363530.roa
File:                     34372e3136302e3135392e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          8T0PxxD7hgA/3XIJGcgr0hsd/KTmyR4+sOEefWFXw2A=
Subject key identifier:   0B:2F:60:5C:7B:20:29:C5:F0:46:9A:FA:1C:8F:0B:0C:90:00:86:B9
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       49A16AFCA19B8ECC947ABA077CC76B13E7C31379
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135392e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:26:42 +0000
ROA not before:           Thu 02 Nov 2023 11:21:42 +0000
ROA not after:            Thu 31 Oct 2024 11:26:42 +0000
asID:                     5650
IP address blocks:        47.160.159.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a1:6a:fc:a1:9b:8e:cc:94:7a:ba:07:7c:c7:6b:13:e7:c3:13:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Nov  2 11:21:42 2023 GMT
            Not After : Oct 31 11:26:42 2024 GMT
        Subject: CN=0B2F605C7B2029C5F0469AFA1C8F0B0C900086B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f8:71:a3:d0:9f:31:4c:4c:39:e4:b4:8b:71:
                    f6:65:c2:3f:9f:7a:1a:68:d2:67:0c:f9:fc:ee:6b:
                    45:cc:25:95:3d:a6:34:b2:57:f9:d0:bd:81:71:b3:
                    fb:44:68:51:f2:5c:f0:66:56:38:c8:23:5f:e6:f6:
                    ee:95:7e:b5:f6:7f:40:94:a6:3d:54:e0:ce:7a:dc:
                    b8:41:9e:7b:4d:73:19:b1:1c:72:f0:35:21:93:1a:
                    4c:71:d4:4b:c6:33:16:f2:e9:a9:f4:11:a1:4d:f4:
                    c0:a9:65:0c:62:f6:f1:8d:17:29:fd:46:40:fc:f1:
                    bb:3d:f1:01:56:74:50:80:3c:23:6d:32:e7:ca:84:
                    07:40:52:f0:de:9b:90:e6:c2:3a:5d:fd:48:92:0e:
                    25:e9:8b:9b:c8:df:c3:0b:c7:a9:7b:79:6d:dc:46:
                    b2:32:17:12:35:a2:b8:aa:93:84:c1:92:23:4b:df:
                    00:3b:88:68:e3:db:18:0a:ae:1c:7a:d2:ef:4a:61:
                    d9:fd:11:84:a3:24:71:9a:48:a1:f9:9c:4d:5c:9a:
                    b7:34:70:5d:e3:21:76:f2:9b:46:a8:75:a0:90:0b:
                    84:5a:c3:fa:c6:85:cc:bf:a1:5d:14:1c:1c:17:af:
                    f9:4e:ff:15:5f:15:de:d9:7d:0d:38:e2:ba:b4:7e:
                    30:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2F:60:5C:7B:20:29:C5:F0:46:9A:FA:1C:8F:0B:0C:90:00:86:B9
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135392e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.160.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:d0:30:62:0f:e2:f2:f4:cf:74:aa:d1:90:33:69:aa:40:11:
         e3:4d:4c:f8:6f:0a:a5:4a:4b:ae:06:2a:7a:58:de:23:26:4b:
         66:77:a7:98:db:06:b9:77:ec:a4:d9:b4:08:d8:22:18:ff:09:
         9e:7c:59:7a:88:ce:7f:7d:55:fd:f4:2e:8e:56:a1:f7:fd:ef:
         48:07:0a:cf:01:52:a7:dd:c2:93:03:82:65:bc:d1:f7:f7:b5:
         b8:1e:c8:fd:87:55:07:5a:2b:66:3a:62:0a:00:48:a0:33:b9:
         69:20:bc:cb:bb:f3:62:3a:00:da:a7:77:6e:ce:d7:dc:48:72:
         3a:b7:84:42:1c:8f:61:c6:94:cf:78:d6:05:38:50:34:9f:24:
         d5:ab:31:de:fc:0e:b6:54:53:dc:b4:b9:b3:cb:54:c6:30:b7:
         ca:12:5d:c3:2a:bf:82:5e:db:bb:46:6b:a0:23:94:8f:9d:4b:
         cb:62:9b:bc:29:08:18:74:89:ce:90:20:0b:8f:de:ff:b7:e2:
         57:60:4d:7d:5b:47:be:5c:26:aa:4f:dd:9e:cb:a9:8d:0b:1a:
         13:1c:91:26:c5:a7:54:7f:fc:65:a3:96:72:32:4f:9f:44:39:
         cc:82:02:0e:4c:6c:ce:1a:a9:b5:f7:b8:1b:35:fa:c1:73:63:
         67:67:9f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org