Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS139660.roa
File:                     AS139660.roa (raw, json)
Hash identifier:          jd7u1pPSDlf7NnSno5/3h3mIWzJEfE+hc8J6z58mkQk=
Subject key identifier:   72:E6:CA:DB:83:EE:9A:24:2B:FE:A0:15:95:7C:C2:44:BA:47:C1:A9
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       4C1F1471FC1A1497AF322C3DE1DEC759854EC031
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS139660.roa
Signing time:             Fri 09 Aug 2024 00:01:57 +0000
ROA not before:           Thu 08 Aug 2024 23:56:57 +0000
ROA not after:            Fri 08 Aug 2025 00:01:57 +0000
asID:                     139660
IP address blocks:        157.254.224.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 10 Nov 2024 10:51:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:1f:14:71:fc:1a:14:97:af:32:2c:3d:e1:de:c7:59:85:4e:c0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug  8 23:56:57 2024 GMT
            Not After : Aug  8 00:01:57 2025 GMT
        Subject: CN=72E6CADB83EE9A242BFEA015957CC244BA47C1A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:2a:0b:f4:58:e1:cd:08:58:c4:b7:6c:81:
                    9c:30:89:0c:aa:fa:91:01:66:1b:87:43:7f:23:eb:
                    5f:15:05:f1:e9:74:3b:36:b3:83:44:70:95:bd:f5:
                    bc:b8:e2:e8:21:9c:cb:fd:ef:7a:69:9b:8c:c0:27:
                    cb:3b:96:d0:13:6d:44:db:fb:e0:b0:2a:6d:24:5e:
                    8c:67:e5:21:8c:dc:66:4f:1a:cc:b6:2d:fe:b1:03:
                    f3:ad:0f:24:1d:bd:f4:a7:12:ea:ac:da:f9:89:41:
                    71:8e:bd:59:e7:87:e7:63:95:a4:74:c4:2a:86:45:
                    54:7a:2e:e2:7f:af:44:89:f7:eb:ed:a1:a8:b2:83:
                    15:d8:8b:ee:40:22:be:b0:7f:43:e6:45:43:19:4c:
                    f2:3e:53:de:15:d3:5f:35:87:70:5c:42:8b:a0:ad:
                    3b:bd:9a:3a:b4:44:7c:32:fa:ae:95:80:4d:26:b3:
                    c1:50:23:3a:49:2a:92:ea:76:38:2d:a5:4b:00:73:
                    bf:fa:92:e4:00:d3:60:06:b7:b1:4f:b5:98:1e:74:
                    30:85:3c:62:a5:1c:d1:6c:53:b4:87:8d:56:43:b9:
                    90:0f:66:ef:03:3e:39:42:68:98:13:c9:e0:87:1d:
                    5c:a1:a1:15:dd:95:9a:55:55:68:d5:7d:52:55:68:
                    95:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E6:CA:DB:83:EE:9A:24:2B:FE:A0:15:95:7C:C2:44:BA:47:C1:A9
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS139660.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:32:a1:3e:19:2c:9d:70:97:28:02:75:0d:8e:a5:21:cb:9a:
         bf:4d:01:ca:6f:10:37:f5:57:e8:6b:e1:05:b0:16:da:a4:2c:
         b8:e4:a2:26:2f:03:d4:25:ae:fb:17:6e:9f:20:6f:f3:63:d2:
         33:0d:a5:43:44:62:03:d3:b3:bd:1e:82:b2:e5:d0:45:4e:9e:
         53:1d:9a:e0:63:ff:02:06:f9:36:10:91:fc:85:92:95:15:86:
         1a:a5:a0:cb:07:a7:ed:ac:27:9e:02:69:9b:c9:49:a7:4a:85:
         82:f9:f5:47:dd:15:4d:24:af:20:02:56:6a:50:0e:37:09:61:
         ff:72:b1:33:20:fe:51:e3:85:2a:b8:65:0f:5b:f7:40:d5:5e:
         57:86:e7:74:76:b7:5c:4a:b2:96:ae:5c:03:1b:b6:e1:fc:db:
         e7:04:03:04:86:f6:55:54:04:62:03:b1:dd:64:be:2f:70:e6:
         d4:bd:18:ef:f0:2f:e0:3e:d1:a3:e4:61:6c:69:80:32:44:a0:
         c4:32:e6:a5:30:27:9b:1b:38:dc:f7:2b:63:55:fd:a2:da:09:
         4b:2c:74:2e:07:54:96:2c:d0:39:99:74:18:21:35:a9:1f:6d:
         96:81:9f:5b:20:3b:2f:27:28:21:8b:6e:57:66:43:59:ba:a2:
         a0:7a:a9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 14:05:03 2024 by rpki-client on console-fra.rpki-client.org