Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136312e3137322e302f32322d3232203d3e2035363530.roa
File:                     34372e3136312e3137322e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          TerQ2AIMrAeCUmm0VcpmoMGuO5PoyC2oPJnaJgDj33c=
Subject key identifier:   EE:F0:F4:95:54:29:0B:9B:C1:28:BE:F9:17:EB:90:8B:C2:5D:6E:FF
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       122FB264887533D18392177513E8F90D754F80C3
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136312e3137322e302f32322d3232203d3e2035363530.roa
Signing time:             Tue 19 Mar 2024 03:38:48 +0000
ROA not before:           Tue 19 Mar 2024 03:33:48 +0000
ROA not after:            Tue 18 Mar 2025 03:38:48 +0000
asID:                     5650
IP address blocks:        47.161.172.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2f:b2:64:88:75:33:d1:83:92:17:75:13:e8:f9:0d:75:4f:80:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Mar 19 03:33:48 2024 GMT
            Not After : Mar 18 03:38:48 2025 GMT
        Subject: CN=EEF0F49554290B9BC128BEF917EB908BC25D6EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:43:86:e8:53:d6:da:4a:02:e4:69:9e:80:4e:
                    a0:b3:4f:a7:02:4b:97:4f:6f:c7:1e:fd:d0:8e:af:
                    31:bd:fd:1a:f2:f0:82:af:8b:0e:c6:d5:06:ab:2f:
                    76:5b:c9:13:dc:c1:17:ec:01:7b:49:6d:6b:20:18:
                    2e:78:69:16:3f:55:ed:d8:93:33:a0:a4:e8:15:66:
                    15:2a:e8:4a:5a:12:f3:2b:58:59:a1:c6:7a:a1:51:
                    e2:e8:db:00:55:8c:ca:33:37:c7:90:a1:39:e8:42:
                    bb:bd:13:0b:31:a1:44:7a:d5:30:06:ac:d6:f3:da:
                    b3:34:4d:38:c7:3e:21:f7:70:de:b7:b8:9c:b5:ee:
                    d2:e0:62:dc:d2:e4:b0:6a:ec:ce:85:21:83:f0:41:
                    9e:6f:30:a0:d1:d4:9c:47:07:47:4e:7d:54:67:79:
                    63:01:44:c6:08:83:5d:65:fc:af:4a:52:3d:47:94:
                    2e:ad:36:d4:da:3d:c4:70:59:45:8a:1b:2c:2d:cd:
                    46:20:c6:a9:3b:ab:be:2d:95:c8:71:2d:66:fc:13:
                    7b:56:5f:7d:af:4b:81:61:90:5d:a0:9a:ef:4f:d2:
                    7a:5d:a5:57:02:15:34:ac:64:19:a4:1c:78:5e:27:
                    ee:3e:a4:dc:71:ee:f4:b7:61:ef:92:e7:4c:cf:9b:
                    a4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F0:F4:95:54:29:0B:9B:C1:28:BE:F9:17:EB:90:8B:C2:5D:6E:FF
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136312e3137322e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.161.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:27:6f:ed:99:38:94:8c:ed:02:3c:c3:8f:78:70:09:9b:e2:
         2e:11:e1:d7:1e:42:35:49:0c:8a:4f:2e:8e:6c:db:61:77:4a:
         ff:7f:e9:b5:9e:6e:fe:8f:eb:48:df:67:4f:9a:b0:99:10:5c:
         04:f2:3d:c6:75:ff:c3:cf:8b:fd:a4:14:5c:b7:ed:f7:bf:b5:
         2d:f8:43:8c:f4:c5:3c:2b:37:3d:9a:10:f7:35:8d:61:bc:e5:
         27:54:a3:d9:57:98:5c:36:4f:5d:73:31:19:14:b5:28:dd:15:
         a9:a3:f6:5d:25:30:64:a2:60:f5:0c:bb:3d:1c:39:99:1a:c9:
         06:0f:d8:cd:89:34:af:53:80:ce:58:cf:5f:a8:34:ee:53:34:
         6f:5b:f8:f2:17:8d:c1:55:df:90:59:7f:35:0e:ef:cc:b9:e7:
         8a:60:ce:69:b5:31:46:cc:61:13:b9:65:db:e0:81:bd:c5:0c:
         46:30:43:ff:98:35:95:a3:94:f6:6d:e7:c1:97:a7:78:5f:30:
         84:96:bb:37:2f:68:e3:a8:a8:1e:84:2c:7b:19:f9:fe:c2:36:
         40:f4:ac:46:22:30:ed:30:c4:10:1a:1b:71:92:a3:ee:d3:fe:
         5c:04:11:4c:20:a9:a7:b3:f7:01:ea:3f:0d:57:9b:48:63:6f:
         8d:a3:da:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:37 2024 by rpki-client on console-ams.rpki-client.org