Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e34342e302f32332d3233203d3e2035363530.roa
File:                     34372e3138312e34342e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          jkfLFzdsn7pztVTKpxt4Xb9rmffoqqXZGx6+tweQmo8=
Subject key identifier:   CF:46:A2:63:02:75:C7:10:59:C8:13:A1:5D:8D:CD:43:8F:E1:29:28
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       6A3D2011C502093EA230AF213F5F9C24B871FC82
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e34342e302f32332d3233203d3e2035363530.roa
Signing time:             Tue 13 Feb 2024 05:10:18 +0000
ROA not before:           Tue 13 Feb 2024 05:05:18 +0000
ROA not after:            Tue 11 Feb 2025 05:10:18 +0000
asID:                     5650
IP address blocks:        47.181.44.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:3d:20:11:c5:02:09:3e:a2:30:af:21:3f:5f:9c:24:b8:71:fc:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Feb 13 05:05:18 2024 GMT
            Not After : Feb 11 05:10:18 2025 GMT
        Subject: CN=CF46A2630275C71059C813A15D8DCD438FE12928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d8:db:11:87:10:be:59:e3:da:57:a8:c2:f1:
                    00:40:d0:46:78:14:0d:10:4c:61:9f:02:69:d1:47:
                    77:ed:98:56:da:f5:4f:79:74:f2:c3:8b:59:c8:69:
                    63:b9:05:73:4d:b2:6b:83:6d:41:d5:08:5d:8f:b2:
                    23:44:5c:0c:6b:df:13:db:a7:b5:83:d7:db:92:8b:
                    ac:89:05:51:50:9d:c8:1c:49:52:ab:3f:09:27:9a:
                    41:10:dd:73:22:b2:e6:e1:60:e8:ba:06:be:27:1d:
                    b2:de:b1:44:03:64:a2:45:c2:81:ca:59:56:7b:fc:
                    82:23:e5:3e:cc:89:cf:71:b6:d1:bd:72:78:0d:b3:
                    30:3f:d7:f6:f3:38:3b:b4:30:f8:06:1c:07:61:fe:
                    78:84:f5:da:c8:b8:81:66:14:b5:59:52:a2:42:1d:
                    82:b3:75:89:09:9a:33:22:bf:51:a2:9d:72:d1:ed:
                    f7:0c:c8:32:58:8d:fc:76:fc:2e:5f:a3:26:51:f9:
                    68:a8:a7:b3:4a:00:98:22:5a:c3:57:3c:4e:26:78:
                    02:0d:14:a5:5d:5e:10:9a:cd:1a:1f:bf:57:6d:5d:
                    31:d2:e1:6c:a3:48:ba:97:c3:f9:85:a0:b3:7e:1e:
                    98:66:7a:12:9a:89:50:fb:1b:68:3b:7a:e3:5c:c1:
                    93:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:46:A2:63:02:75:C7:10:59:C8:13:A1:5D:8D:CD:43:8F:E1:29:28
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e34342e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.181.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:0b:20:e1:52:0a:e7:ec:0e:91:bc:b8:ce:bb:13:cd:37:58:
         3e:5e:d6:ed:6b:e2:cb:7e:2a:2c:e4:0a:5d:b9:fc:06:f7:05:
         29:ff:13:4b:c4:ed:95:1f:f2:7e:91:0e:a0:03:ab:9a:08:e7:
         1b:74:ea:3c:6f:a6:5b:4c:79:1c:fb:a9:24:8b:ed:21:f1:26:
         13:8f:15:b8:51:d3:7d:9a:14:3d:6b:db:b6:f6:33:17:68:4e:
         fe:2e:97:1a:fc:27:63:51:b5:76:8b:43:26:fe:cf:27:6c:cd:
         66:cf:a6:87:b5:47:6b:c5:33:df:90:26:31:07:f4:c9:9a:3e:
         76:d2:1e:55:e8:a7:cd:b5:5d:ed:25:22:a4:06:86:7d:5c:c0:
         86:af:79:42:4b:dc:c2:5c:69:90:2e:be:fd:08:0d:9a:a8:3e:
         25:e1:e9:ff:e1:0f:81:26:b5:4c:9d:7f:92:eb:79:85:8d:5f:
         ef:38:b6:7c:3b:c0:a2:35:46:2a:28:f6:d0:7a:4a:b1:05:c1:
         6b:da:cf:64:04:b9:45:54:7e:7b:0b:a3:01:9f:b6:e5:be:77:
         dc:a1:c0:77:35:dc:e9:1b:bf:c8:77:b0:35:21:9e:3b:92:90:
         ee:e3:13:c7:01:a1:6d:e3:c4:1b:79:67:86:f3:a5:ff:74:84:
         2e:00:97:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:37 2024 by rpki-client on console-ams.rpki-client.org