Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS137425.roa
File:                     AS137425.roa (raw, json)
Hash identifier:          J6F+/eRrmrdHzaVqG95xaVw6w9uJMGc1TQF6yhWSrjA=
Subject key identifier:   B6:BF:B3:3B:57:7C:EA:5E:0E:D1:ED:EA:9D:9B:54:DD:5A:1B:6D:90
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       5688BD4A5704AF383570E5E1F7772C7B8BB78B
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS137425.roa
Signing time:             Tue 05 Nov 2024 03:40:07 +0000
ROA not before:           Tue 05 Nov 2024 03:35:07 +0000
ROA not after:            Tue 04 Nov 2025 03:40:07 +0000
asID:                     137425
IP address blocks:        2a06:a005:4d8::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:88:bd:4a:57:04:af:38:35:70:e5:e1:f7:77:2c:7b:8b:b7:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:07 2024 GMT
            Not After : Nov  4 03:40:07 2025 GMT
        Subject: CN=B6BFB33B577CEA5E0ED1EDEA9D9B54DD5A1B6D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cf:c8:8d:8b:5e:f6:5c:6f:ae:4d:2e:df:30:
                    f4:dc:69:38:9d:8b:b8:83:39:82:a7:92:8f:f3:00:
                    69:8c:65:a6:f7:6c:8c:52:ca:fc:b2:fc:dd:be:7a:
                    ad:d6:99:9f:dd:c9:03:93:ec:b2:46:46:93:83:c6:
                    74:16:1f:ef:4e:f6:1b:43:b3:03:bb:a0:cb:1b:62:
                    36:72:60:bb:a1:2a:82:9a:e1:86:05:55:fe:e9:a8:
                    0e:ff:cd:19:25:15:8c:80:09:7b:81:da:f1:a3:e5:
                    a2:0f:23:50:4d:0e:c4:0e:08:78:76:f6:11:ed:d8:
                    e4:7a:c2:32:74:db:ad:4e:00:78:45:c2:69:35:b7:
                    fb:80:36:a9:60:6a:42:a1:c4:ee:3d:a9:d5:ee:57:
                    23:5a:69:7c:e6:78:2d:54:03:33:78:14:44:11:8e:
                    b8:76:d7:63:7e:7d:58:a9:c9:e2:c4:3f:7d:d0:57:
                    10:6e:70:f1:ce:c3:28:79:1a:e0:5d:b5:1a:a7:b0:
                    b5:81:ce:2b:11:d1:21:c9:a7:d3:7d:32:d4:c1:e0:
                    79:14:36:b1:e4:f9:75:74:22:bf:7d:e8:e1:08:68:
                    42:86:aa:1d:ab:fb:8f:cd:53:94:3b:0b:77:a3:01:
                    74:fd:2a:89:3d:62:31:d7:b5:7e:7a:0a:3d:3a:be:
                    33:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BF:B3:3B:57:7C:EA:5E:0E:D1:ED:EA:9D:9B:54:DD:5A:1B:6D:90
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS137425.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4d8::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:0c:34:3a:8d:48:90:d2:d5:62:fe:78:ae:4e:2a:6e:ed:f8:
         d6:40:a6:10:36:d9:d9:91:77:18:36:4a:98:ba:fe:69:99:44:
         5e:42:ac:e4:34:13:c9:2e:b9:3c:55:15:09:04:b9:e8:d2:15:
         4f:80:77:23:b6:c4:0f:6d:99:8a:70:e7:02:3d:ec:56:af:38:
         68:90:db:c9:d5:c9:9c:ac:c1:78:6e:12:64:b3:02:ab:ce:d8:
         d5:f4:cb:b6:a8:d1:df:be:01:c1:bb:77:fe:05:d2:88:e8:13:
         92:a5:1f:6b:e4:73:6d:d9:c6:58:43:95:60:c4:fe:73:8d:ad:
         36:fe:c2:c8:00:ce:79:77:d5:c2:0c:39:18:77:9a:66:b2:6d:
         68:8f:9e:55:c3:89:fd:33:59:df:ba:dd:af:22:90:21:c6:cd:
         e3:3d:c9:06:c7:d4:5c:68:41:33:10:c4:c7:c5:b8:33:f5:90:
         30:3c:0c:9c:46:2b:b7:60:cf:44:ee:16:d6:bb:72:dd:ed:8a:
         43:e2:59:90:81:e1:8c:86:a1:2e:ae:bd:33:b9:cc:da:db:90:
         48:d6:9d:49:9b:92:69:4a:43:d3:78:1b:95:f2:3b:af:f0:12:
         40:8b:3a:30:2a:86:a0:87:61:d3:d7:4a:3b:2f:11:ad:3a:6e:
         5a:db:48:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:42 2025 by rpki-client