Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS174.roa
File:                     AS174.roa (raw, json)
Hash identifier:          sWwZQqO9q2MjO+5kaD2yM7oQSFxs6TsqxfPBtMDz7IM=
Subject key identifier:   D0:22:62:82:39:11:FA:C1:0F:1D:7A:F2:E3:12:FD:EB:6E:F8:83:9C
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       2B86E7DAF97AE8F8BB4D125DD19BECC2C4ADB433
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS174.roa
Signing time:             Thu 27 Jun 2024 20:40:11 +0000
ROA not before:           Thu 27 Jun 2024 20:35:11 +0000
ROA not after:            Thu 26 Jun 2025 20:40:11 +0000
asID:                     174
IP address blocks:        2a09:54c0::/32 maxlen: 48
                          2a0a:6046::/32 maxlen: 48

Validation:               Failed, certificate revoked on Sun 04 Aug 2024 19:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:86:e7:da:f9:7a:e8:f8:bb:4d:12:5d:d1:9b:ec:c2:c4:ad:b4:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jun 27 20:35:11 2024 GMT
            Not After : Jun 26 20:40:11 2025 GMT
        Subject: CN=D02262823911FAC10F1D7AF2E312FDEB6EF8839C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d8:26:ef:56:0a:e0:ec:14:e4:4a:d8:16:b7:
                    f1:ba:34:cd:36:94:0a:64:3b:7b:ec:f2:16:e7:33:
                    3b:14:60:94:ee:43:06:9e:72:b4:87:d0:90:0e:c6:
                    f0:63:99:e1:a5:3a:23:17:16:77:50:72:11:15:d7:
                    ba:64:c1:dd:6b:11:c7:db:c0:32:02:ee:c1:75:a3:
                    71:20:4a:23:bf:81:94:ed:ea:9b:23:80:e3:70:e4:
                    e5:5b:62:1d:37:9c:ff:d3:7c:7a:37:2b:f6:63:28:
                    a3:0f:8a:1c:ea:53:80:51:26:df:21:b9:e4:51:22:
                    4e:f2:15:04:32:1b:d4:26:6c:05:e4:42:04:bd:d2:
                    5a:26:f6:53:2e:d2:3b:d6:e8:c0:b3:4f:42:47:0d:
                    68:c8:14:59:c0:30:f3:2a:70:9e:c5:df:1e:23:f0:
                    b8:2d:0c:4d:b1:29:98:6c:d9:0b:d4:56:eb:fd:29:
                    56:a2:c9:43:31:1b:6c:a7:25:2a:cd:ae:67:14:e5:
                    96:9e:29:f2:ed:42:7e:77:12:f5:54:09:83:b4:65:
                    cd:4c:c1:77:f8:49:d2:e5:1d:12:e1:50:55:8c:f1:
                    8e:19:f1:22:68:20:3b:0e:20:3c:97:a8:c9:32:3e:
                    5c:c8:21:16:b3:59:7c:cb:dc:e2:7e:e6:20:7e:1e:
                    69:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:22:62:82:39:11:FA:C1:0F:1D:7A:F2:E3:12:FD:EB:6E:F8:83:9C
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS174.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c0::/32
                  2a0a:6046::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:87:7c:2e:9c:24:a5:38:15:15:ee:21:cd:4d:72:83:df:91:
         a6:10:ee:65:7c:db:5b:78:a8:b9:8d:5a:15:70:69:da:86:f2:
         65:a4:f8:9b:86:56:e7:e7:db:81:da:83:f2:fe:d2:75:6c:07:
         86:ca:a4:37:d0:ba:e7:79:aa:c9:94:e0:7c:2d:2b:10:9c:41:
         74:fc:7e:fc:a9:60:f1:53:44:bb:9d:de:c8:de:37:3b:26:50:
         39:12:a6:c9:73:4b:be:47:d9:05:45:b1:33:9c:39:c5:e6:43:
         87:44:b2:66:e0:f7:e2:1d:71:6f:fe:76:98:36:b9:15:d7:5e:
         6c:fd:b6:a1:3e:d3:37:03:c1:59:0b:b1:a8:29:7c:af:9b:86:
         7c:c2:de:a8:09:f0:03:f6:15:6f:b4:7c:ec:92:97:b2:e6:b7:
         b3:42:7b:2f:cc:5e:63:6a:43:86:96:c0:20:7c:ac:e9:f8:34:
         f1:0e:52:2b:38:90:41:82:9b:b8:36:a4:ba:b2:a1:f6:92:08:
         d4:c9:5d:4b:1d:a1:07:91:7b:04:33:cf:d2:a9:b4:1e:fa:90:
         20:a2:d4:22:1a:c8:d2:91:b7:df:21:25:40:20:60:b9:97:8b:
         99:75:17:0a:0a:20:41:6d:8f:ec:52:0f:d5:81:ed:60:be:24:
         f4:a7:55:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 22:04:16 2024 by rpki-client on console-ams.rpki-client.org