Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215580.roa
File:                     AS215580.roa (raw, json)
Hash identifier:          4eubGvfd3XNvzdlfJto0xWB2sS/JYCob9MkXgrNNpEE=
Subject key identifier:   BB:FF:DF:F8:83:9B:7B:17:38:7E:E3:EA:40:F2:C2:A6:A1:92:14:B1
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       547F51DF8CC06AF6E95D5427F374671CF7BED4D8
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215580.roa
Signing time:             Tue 09 Jul 2024 12:05:04 +0000
ROA not before:           Tue 09 Jul 2024 12:00:04 +0000
ROA not after:            Tue 08 Jul 2025 12:05:04 +0000
asID:                     215580
IP address blocks:        198.23.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 11 Aug 2024 05:25:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7f:51:df:8c:c0:6a:f6:e9:5d:54:27:f3:74:67:1c:f7:be:d4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul  9 12:00:04 2024 GMT
            Not After : Jul  8 12:05:04 2025 GMT
        Subject: CN=BBFFDFF8839B7B17387EE3EA40F2C2A6A19214B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6f:c4:e4:f8:06:1a:1d:ae:14:fd:f5:4a:0f:
                    4b:0f:8c:7e:56:2c:78:bd:2c:c4:56:a5:8e:69:85:
                    a8:45:b8:b4:4f:d3:94:3b:33:34:6f:ff:08:01:ed:
                    da:8e:a2:9e:20:bd:33:a3:82:74:8b:c4:bc:3d:80:
                    fc:5d:6d:d3:e2:41:b3:30:df:35:dc:0d:b2:26:7c:
                    af:41:da:8f:5f:b5:05:aa:fa:7b:a5:ea:4b:cc:f6:
                    40:6d:95:e7:fe:b4:dd:04:97:51:c3:45:a2:41:8c:
                    17:bd:b4:db:07:0a:56:ce:28:19:bb:84:52:11:43:
                    c2:21:07:50:d6:b8:95:8b:53:69:98:8d:35:20:27:
                    21:59:fa:5a:0b:a4:79:7f:38:2e:58:29:29:95:25:
                    09:85:53:9e:ce:0d:99:65:6c:fd:15:83:ae:40:09:
                    c6:ba:b0:f1:51:fc:7d:22:c8:57:b6:76:12:92:1f:
                    16:96:e6:a2:c4:fc:19:fa:33:5a:4f:42:28:49:53:
                    e3:4c:ae:4d:88:95:6a:23:e4:58:4a:02:e4:f7:4f:
                    62:7a:64:5d:79:1f:a7:f6:32:78:f8:f9:5f:e5:f5:
                    96:6a:03:dc:61:b1:03:88:82:66:30:e2:70:f9:24:
                    a3:f2:78:a4:a3:c4:bf:b9:5e:97:89:50:b2:99:ad:
                    1c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FF:DF:F8:83:9B:7B:17:38:7E:E3:EA:40:F2:C2:A6:A1:92:14:B1
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215580.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.23.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:e7:14:5a:e8:c4:4c:15:f5:a7:18:3f:c4:60:34:1d:fc:39:
         df:06:61:a3:a8:b8:f0:67:9a:0b:8f:bc:f5:9a:06:79:fd:25:
         0f:04:1f:64:78:20:25:89:5e:da:e3:9b:22:a9:04:bc:e0:53:
         04:70:94:27:28:03:dd:73:58:15:ac:45:b9:ec:66:ee:9a:68:
         a0:9c:af:9d:cc:57:93:02:00:ee:54:d9:45:00:23:24:1b:23:
         ae:9e:8e:8e:bc:ea:39:53:fd:56:2b:a6:9e:39:0b:b7:24:8d:
         b3:53:d7:94:30:2e:ad:79:00:ef:91:fb:1a:01:ce:6c:f2:a1:
         c7:8a:77:d5:92:63:e4:66:91:e1:ed:17:4d:13:c1:32:0b:3b:
         dd:58:11:14:f7:0d:c5:b8:0a:31:e2:35:ed:bc:c9:a5:5a:ec:
         8e:c4:19:be:b4:10:c7:22:11:1f:ec:c2:8a:df:ef:b0:63:99:
         4e:d0:39:78:d2:52:04:f1:04:3c:6e:4e:00:68:33:b7:9d:e8:
         74:61:4e:70:91:b8:b6:44:ac:35:89:e1:a5:01:d4:43:3a:e7:
         03:d3:fb:77:f6:82:a5:83:9c:68:31:67:73:36:f8:f7:85:06:
         6f:7c:b0:97:1a:d3:bb:bd:cf:4c:54:eb:4a:c6:9b:5a:90:57:
         10:e7:ce:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 08:03:48 2024 by rpki-client on console-ams.rpki-client.org