Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200242.roa
File:                     AS200242.roa (raw, json)
Hash identifier:          cdiKmKpbehdv+BekMvhxrVExMvgg+RKpdWlHHSbdj2M=
Subject key identifier:   2C:A0:CD:D2:57:0F:8E:48:67:01:88:1E:9D:EA:2F:69:DE:AE:D7:2C
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       5727DC3F0712BF653DF2951A23BC4BA216A29C41
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200242.roa
Signing time:             Thu 23 Mar 2023 02:43:07 +0000
ROA not before:           Thu 23 Mar 2023 02:38:07 +0000
ROA not after:            Thu 21 Mar 2024 02:43:07 +0000
asID:                     200242
IP address blocks:        2a05:dfc2::/31 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:27:dc:3f:07:12:bf:65:3d:f2:95:1a:23:bc:4b:a2:16:a2:9c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Mar 23 02:38:07 2023 GMT
            Not After : Mar 21 02:43:07 2024 GMT
        Subject: CN=2CA0CDD2570F8E486701881E9DEA2F69DEAED72C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1d:62:5e:56:bb:0b:3d:15:47:4a:91:5f:88:
                    35:88:cd:4d:a8:39:99:e3:11:74:75:a7:f0:9d:ae:
                    1c:d1:e2:f0:de:37:07:5b:d8:3c:65:fd:b5:bb:ba:
                    8f:83:0d:bf:b6:67:1d:43:01:94:a9:4e:b8:d9:f6:
                    db:20:47:bf:f1:aa:6b:4b:e2:89:e1:41:54:b2:50:
                    f7:15:b2:64:3d:73:e4:a1:78:08:66:ec:22:d0:22:
                    6d:35:f3:ce:4b:47:31:28:02:c2:b9:bb:a9:c3:70:
                    60:4c:99:cc:9c:a3:12:22:f0:e1:60:89:55:2d:da:
                    73:12:d5:dc:eb:3f:73:f3:71:85:ba:6f:f1:fe:ee:
                    3c:b9:b8:64:b6:46:a0:ad:ae:71:83:f0:ea:e5:a1:
                    06:a4:65:bf:cc:75:f8:8c:28:a6:47:4a:a6:0a:1a:
                    fd:0b:18:13:02:3f:d4:e1:ca:e5:1d:ec:5f:3a:24:
                    71:e9:6b:2a:29:28:83:fc:fc:b1:68:20:81:88:78:
                    c9:3c:38:91:d1:ca:ce:90:99:8e:79:98:97:42:77:
                    59:4e:34:e3:a2:ff:ff:94:ef:36:89:9c:05:fb:d2:
                    d5:dc:d0:06:e2:7f:4f:73:85:0c:71:2c:71:4c:17:
                    2f:73:45:f7:b6:e0:60:2d:32:0b:c3:c4:17:94:22:
                    c6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A0:CD:D2:57:0F:8E:48:67:01:88:1E:9D:EA:2F:69:DE:AE:D7:2C
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc2::/31

    Signature Algorithm: sha256WithRSAEncryption
         76:7b:f3:4d:b6:6c:5c:c3:8e:3f:ef:9c:37:60:83:74:73:67:
         10:d4:f2:4f:2f:65:43:db:f0:f9:3e:3b:24:a7:0c:d6:ab:df:
         17:b5:5e:2c:25:90:e3:5c:2e:f6:67:20:e4:ec:a8:1f:a6:68:
         d4:d2:15:31:9b:bf:08:98:dc:5b:b3:12:31:c3:70:d4:ec:97:
         b8:d5:ca:12:32:83:50:5a:50:3f:46:7a:9a:f6:0a:7a:f9:5b:
         bb:7d:eb:5a:c7:a1:e8:0c:d7:b0:d5:4b:8d:d1:7b:d7:9c:bf:
         90:54:2a:7a:2d:e2:85:4d:13:0f:fb:80:ee:11:9d:0a:76:5c:
         98:9c:38:68:b3:de:9d:6c:47:a6:fa:d4:a3:dd:95:25:e3:bf:
         b6:f4:46:a1:2b:b3:cb:35:39:57:bc:69:f8:4d:91:ce:90:f0:
         3b:e8:4e:f3:67:2c:71:20:e7:b2:43:5b:ae:79:1d:e1:13:d5:
         e8:a8:c5:fd:75:a2:50:a3:c5:2b:33:a9:2a:d6:1d:3c:10:fe:
         45:c9:a8:fd:c1:11:d8:b1:4a:ea:1a:62:8e:49:61:20:60:37:
         0a:54:e5:87:97:33:56:f5:c9:4a:08:cf:de:e2:19:10:cf:cf:
         fc:36:94:18:ee:80:44:ec:2b:83:4a:82:8a:3f:5d:65:82:a9:
         c1:8e:60:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:24 2023 by rpki-client on console-fra.rpki-client.org