Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212235.roa
File:                     AS212235.roa (raw, json)
Hash identifier:          PCGZHsDaeNpI+oTWqXcvGehhqFdBAXxSr2BiM07L5qY=
Subject key identifier:   6D:78:31:25:83:80:FE:36:E2:6F:FE:97:CB:A2:5B:3D:2E:14:BD:7A
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       75A34F12B160892F37E8AE5934162D2E6254195B
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212235.roa
Signing time:             Thu 24 Aug 2023 17:23:22 +0000
ROA not before:           Thu 24 Aug 2023 17:18:22 +0000
ROA not after:            Thu 22 Aug 2024 17:23:22 +0000
asID:                     212235
IP address blocks:        140.99.62.0/24 maxlen: 24
                          140.99.64.0/24 maxlen: 24
                          140.99.65.0/24 maxlen: 24
                          140.99.67.0/24 maxlen: 24
                          140.99.68.0/24 maxlen: 24
                          140.99.72.0/24 maxlen: 24
                          140.99.74.0/24 maxlen: 24
                          140.99.76.0/24 maxlen: 24
                          140.99.78.0/24 maxlen: 24
                          140.99.80.0/24 maxlen: 24
                          140.99.82.0/24 maxlen: 24
                          140.99.89.0/24 maxlen: 24
                          140.99.90.0/24 maxlen: 24
                          140.99.93.0/24 maxlen: 24
                          140.99.100.0/24 maxlen: 24
                          140.99.105.0/24 maxlen: 24
                          140.99.106.0/24 maxlen: 24
                          140.99.107.0/24 maxlen: 24
                          140.99.108.0/24 maxlen: 24
                          140.99.109.0/24 maxlen: 24
                          140.99.110.0/24 maxlen: 24
                          140.99.111.0/24 maxlen: 24
                          140.99.113.0/24 maxlen: 24
                          140.99.121.0/24 maxlen: 24
                          140.99.125.0/24 maxlen: 24
                          140.99.136.0/24 maxlen: 24
                          140.99.137.0/24 maxlen: 24
                          140.99.138.0/24 maxlen: 24
                          140.99.139.0/24 maxlen: 24
                          140.99.213.0/24 maxlen: 24
                          140.99.228.0/24 maxlen: 24
                          140.99.229.0/24 maxlen: 24
                          140.99.230.0/24 maxlen: 24
                          140.99.231.0/24 maxlen: 24
                          140.99.238.0/24 maxlen: 24
                          140.99.239.0/24 maxlen: 24
                          140.99.240.0/24 maxlen: 24
                          140.99.242.0/24 maxlen: 24
                          140.99.246.0/24 maxlen: 24
                          140.99.247.0/24 maxlen: 24
                          140.99.249.0/24 maxlen: 24
                          140.99.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a3:4f:12:b1:60:89:2f:37:e8:ae:59:34:16:2d:2e:62:54:19:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Aug 24 17:18:22 2023 GMT
            Not After : Aug 22 17:23:22 2024 GMT
        Subject: CN=6D7831258380FE36E26FFE97CBA25B3D2E14BD7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:63:4d:33:fb:95:7e:7e:48:b1:09:41:3d:b2:
                    ac:81:f7:64:af:da:58:9b:c3:15:a4:9b:f5:7c:76:
                    c6:de:ff:e3:a6:b2:b3:5d:80:ed:03:b7:f1:2d:79:
                    d8:5e:99:01:43:fc:98:ec:90:74:1e:58:75:da:5e:
                    64:04:5b:4e:66:08:83:75:93:80:0d:0d:b0:27:a5:
                    0f:15:10:b0:de:f0:5b:bf:4d:f4:29:95:cd:5d:89:
                    39:62:d1:6a:09:bc:c0:7e:ea:40:27:79:9a:00:81:
                    e3:a2:c4:df:f8:2f:b0:a0:0f:32:92:16:c2:00:ba:
                    3b:83:48:63:bd:eb:43:a3:7d:aa:5c:72:eb:5f:3e:
                    e2:53:4a:66:86:51:2a:3f:21:e9:7e:75:ce:7f:d7:
                    45:3e:bd:d7:1a:47:d8:db:43:f5:ee:08:f0:89:6a:
                    3c:6f:9d:e2:ac:04:8e:05:d4:0b:3b:65:94:99:00:
                    6f:5e:1c:ed:1a:4e:a5:df:eb:60:4a:2d:f8:27:ef:
                    4d:fd:de:17:a9:cf:87:c2:26:6d:8b:c1:35:d5:8d:
                    13:46:c1:37:2d:33:ae:26:37:92:c6:b9:90:e9:9c:
                    2f:5b:c2:47:9d:8e:35:fe:ea:2f:05:16:23:f8:65:
                    00:da:3f:ec:cb:52:ee:14:82:56:3e:8e:48:dd:0f:
                    aa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:78:31:25:83:80:FE:36:E2:6F:FE:97:CB:A2:5B:3D:2E:14:BD:7A
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.62.0/24
                  140.99.64.0/23
                  140.99.67.0-140.99.68.255
                  140.99.72.0/24
                  140.99.74.0/24
                  140.99.76.0/24
                  140.99.78.0/24
                  140.99.80.0/24
                  140.99.82.0/24
                  140.99.89.0-140.99.90.255
                  140.99.93.0/24
                  140.99.100.0/24
                  140.99.105.0-140.99.111.255
                  140.99.113.0/24
                  140.99.121.0/24
                  140.99.125.0/24
                  140.99.136.0/22
                  140.99.213.0/24
                  140.99.228.0/22
                  140.99.238.0-140.99.240.255
                  140.99.242.0/24
                  140.99.246.0/23
                  140.99.249.0/24
                  140.99.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:01:60:9d:62:94:9d:b5:fd:ad:02:ee:c3:91:41:bd:24:e6:
         06:31:de:47:84:a4:ff:73:86:b0:8c:2b:13:ca:00:21:96:0c:
         0d:1f:b0:83:b5:55:46:e7:5e:c5:cf:88:b5:2c:ae:6a:e6:c7:
         65:8d:bb:62:6e:77:bb:ff:e4:b6:e5:c1:65:04:5c:e4:6f:e3:
         48:3d:60:54:b4:4b:0d:0b:ed:21:7d:25:2b:0c:bf:f1:dc:8a:
         ea:40:a0:91:95:48:d3:22:9f:b0:e5:53:3e:8e:42:6b:80:1b:
         34:4e:4f:f4:af:1e:29:c4:b4:66:15:d0:b4:87:56:22:36:e9:
         f4:af:d2:7e:43:49:69:c3:aa:66:11:d4:c1:02:b4:08:73:09:
         d9:4f:83:21:fd:98:b7:81:62:14:6a:64:af:c6:01:aa:5e:ce:
         4a:8d:2f:3d:58:27:8e:d0:70:1b:cc:ad:3f:49:4c:e3:f6:8b:
         2d:56:16:d1:1e:4a:8a:2e:85:7c:46:07:c7:ab:aa:90:6f:0b:
         11:ac:22:a9:1c:9c:bb:02:94:60:13:f4:59:bc:da:fc:b1:e7:
         06:94:41:07:ae:bb:e7:40:75:e0:ca:28:e5:95:d5:b4:ba:b4:
         96:00:59:5b:2e:51:58:a2:0b:e3:f5:9d:9c:ab:f8:6f:78:26:
         9f:bb:7f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 29 08:59:26 2023 by rpki-client on console-ams.rpki-client.org