Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139859.roa
File:                     AS139859.roa (raw, json)
Hash identifier:          y5n29FDhcVyFKUhfQr5y29fhJ/LxQWjEORuwyvQzfHk=
Subject key identifier:   BE:E5:D5:F2:F0:1F:FF:77:02:66:D3:CB:B4:C6:71:74:EE:5D:84:47
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       607593BD4B2186FCE274BD04A106FD2DD871FB63
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139859.roa
Signing time:             Tue 05 Nov 2024 03:40:01 +0000
ROA not before:           Tue 05 Nov 2024 03:35:01 +0000
ROA not after:            Tue 04 Nov 2025 03:40:01 +0000
asID:                     139859
IP address blocks:        2a06:a005:1c::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:75:93:bd:4b:21:86:fc:e2:74:bd:04:a1:06:fd:2d:d8:71:fb:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:01 2024 GMT
            Not After : Nov  4 03:40:01 2025 GMT
        Subject: CN=BEE5D5F2F01FFF770266D3CBB4C67174EE5D8447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cd:f0:29:da:65:4a:07:ed:f8:b4:c6:81:46:
                    2d:dc:71:68:f9:2c:48:c9:56:83:d4:d7:63:4b:22:
                    39:db:4d:77:ed:e5:6f:ce:eb:1e:93:27:7f:84:3d:
                    08:09:00:bf:1c:ea:b0:0c:01:6e:65:8f:4b:b5:59:
                    5b:99:ed:e6:2c:e8:ac:a4:52:e3:83:07:4b:33:1e:
                    46:75:16:01:2c:ef:3b:1e:fe:e2:7a:bc:ab:64:e4:
                    f4:be:7b:ac:81:b6:cf:8c:50:40:75:91:1c:67:28:
                    69:ca:06:80:99:ff:69:f3:c8:8b:73:2d:98:b0:ef:
                    70:05:f2:4c:8d:dd:ea:63:3e:0d:8a:39:40:8c:5a:
                    f4:8b:32:27:95:80:14:14:79:74:12:4a:2e:d1:e2:
                    20:0f:84:ae:a2:3a:95:05:2c:97:c6:77:c7:e1:3a:
                    1a:59:da:5e:f8:7b:89:5d:b6:c7:e9:91:eb:d4:8b:
                    26:a5:33:89:ff:b3:d4:e3:6f:d2:ec:5c:31:a0:e1:
                    ff:67:e9:ef:82:1d:31:f3:6a:d6:44:e0:8b:7e:ee:
                    35:e0:6e:81:46:da:0d:06:03:e4:72:2c:bc:dc:ee:
                    31:45:0e:a2:86:40:72:1f:78:85:fb:e0:0e:ed:d3:
                    38:14:c4:17:29:cc:88:8f:d1:ff:55:82:b0:62:bd:
                    42:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E5:D5:F2:F0:1F:FF:77:02:66:D3:CB:B4:C6:71:74:EE:5D:84:47
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139859.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1c::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:49:c3:75:f7:0a:0b:27:e4:a7:19:b0:0a:58:50:c0:d4:b9:
         55:ab:64:0b:7e:a2:b7:9a:67:ea:f8:a6:df:d7:84:1d:a8:d8:
         be:3f:eb:f8:fd:1f:be:30:b9:35:a6:a9:ca:9f:cf:9c:cd:6b:
         36:c9:24:da:82:ad:a8:0e:9f:47:d6:52:51:16:9e:67:34:cd:
         1c:97:0f:4c:ec:f4:2e:2e:7c:e1:46:be:fd:f6:ba:3e:00:6c:
         44:1f:c9:ee:df:ef:6d:d4:c3:cb:61:08:1d:29:3f:e8:0b:35:
         26:d9:ed:a1:6a:9a:f7:0c:57:1c:4c:08:85:de:dc:18:35:dd:
         6a:87:92:1f:44:1b:62:b0:82:4b:d9:85:22:1d:88:f5:6d:fe:
         10:d3:13:f1:49:53:20:81:92:d7:0d:ae:63:61:80:ea:53:dd:
         e2:3d:1c:bd:dd:00:4b:34:2e:fa:b3:39:53:b3:17:dd:25:8b:
         d9:f3:11:be:99:66:1c:6f:eb:53:9a:92:41:97:ed:47:54:4a:
         ea:e2:9a:cf:ed:9c:24:45:eb:89:2a:c6:46:2b:58:49:80:86:
         57:5d:64:78:00:70:a4:ab:0c:e0:50:4a:21:40:ff:9f:08:25:
         13:b2:32:7c:68:50:c5:42:1b:b9:16:69:00:fd:27:65:3c:f2:
         c9:06:c3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:43 2025 by rpki-client