Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200581.roa
File:                     AS200581.roa (raw, json)
Hash identifier:          qsYoALB/yNlHq96pFCIOABlmubFOi7h7n+BVKAjw2P4=
Subject key identifier:   8D:E0:F1:AB:AC:9A:0D:72:67:4B:9F:D0:A0:77:90:38:E8:99:0C:1B
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       7006ACD25AB638F9616A6FB71B6783369733F445
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200581.roa
Signing time:             Tue 05 Nov 2024 03:40:10 +0000
ROA not before:           Tue 05 Nov 2024 03:35:10 +0000
ROA not after:            Tue 04 Nov 2025 03:40:10 +0000
asID:                     200581
IP address blocks:        2a06:a005:2290::/44 maxlen: 48
                          2a06:a005:2790::/44 maxlen: 48
                          2a06:a005:27a0::/44 maxlen: 48
                          2a06:a005:27b0::/44 maxlen: 48
                          2a06:a005:27c0::/44 maxlen: 48
Validation:               Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:06:ac:d2:5a:b6:38:f9:61:6a:6f:b7:1b:67:83:36:97:33:f4:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:10 2024 GMT
            Not After : Nov  4 03:40:10 2025 GMT
        Subject: CN=8DE0F1ABAC9A0D72674B9FD0A0779038E8990C1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a0:a8:dd:ac:e4:00:0e:f8:22:49:10:a1:97:
                    ec:cb:04:02:85:c4:86:79:cf:09:d2:0d:3b:31:27:
                    b9:3a:0f:13:6d:e5:7a:c3:fa:2a:39:a9:0a:d4:5c:
                    75:df:ad:29:77:00:8e:60:04:68:c7:00:c5:bc:6b:
                    28:ef:0e:dd:78:c2:1b:c2:09:d1:9d:46:dd:05:85:
                    50:2e:7b:70:ff:60:7a:23:3f:08:ef:c3:bd:33:3a:
                    43:6f:19:ad:25:a4:b6:5c:3d:b8:4f:21:d2:34:cb:
                    ce:26:80:87:88:c7:b2:e0:63:0d:0f:14:80:62:3f:
                    82:d1:24:63:ac:16:7b:dd:ef:df:80:cf:4b:51:96:
                    48:f8:c1:53:34:0a:4a:79:fb:b7:c7:b0:4f:cc:e4:
                    ff:a1:f3:9f:07:cc:40:b4:01:1e:1b:93:89:63:88:
                    17:75:b7:12:81:c8:88:60:48:47:be:2b:2c:3f:8f:
                    0d:92:d8:2a:e4:eb:23:9d:d2:1b:54:2e:98:62:30:
                    2b:d5:a9:ae:c5:6c:aa:99:cc:40:85:3a:4a:96:01:
                    10:5b:d1:d4:cd:b5:af:99:33:11:67:54:71:3b:34:
                    65:11:89:5e:27:da:3a:d5:ce:d2:c8:fd:f3:55:54:
                    e8:4a:ad:15:0f:e2:c9:e8:23:2e:fc:87:59:f2:21:
                    44:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E0:F1:AB:AC:9A:0D:72:67:4B:9F:D0:A0:77:90:38:E8:99:0C:1B
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200581.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2290::/44
                  2a06:a005:2790::-2a06:a005:27cf:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         66:44:2b:5c:f5:46:c6:23:1b:af:5e:6f:98:24:5c:ac:2a:45:
         d7:17:30:1c:d9:ea:a5:4c:21:2a:00:7d:b0:75:cf:4a:28:56:
         87:93:f1:bd:f3:67:ea:12:ac:9a:69:b3:98:f3:c0:f9:01:fa:
         1e:35:64:da:57:de:13:78:7c:56:95:94:79:6e:c6:ca:77:28:
         66:c3:d5:59:72:31:b7:36:53:4b:d3:a9:da:5a:ef:1c:7a:a9:
         89:11:25:05:07:ba:37:5f:77:ab:bd:98:ba:33:0b:5e:bf:2c:
         b3:b5:06:b4:c4:1e:11:07:e2:07:77:70:20:22:b4:01:70:b8:
         94:45:c3:df:99:23:12:79:df:14:ce:36:fa:38:1c:51:17:8b:
         42:8c:2e:dc:13:0b:f5:ee:74:51:07:78:d5:80:de:66:0a:04:
         1e:d2:ca:cd:fb:2d:2a:76:e7:2f:3c:84:8e:67:9a:e0:bd:ab:
         f9:4b:05:4b:25:dc:14:ad:52:e4:be:ee:90:6a:22:9a:2a:67:
         e3:9c:37:14:bb:54:0e:49:d6:5b:1d:40:10:1d:1f:64:63:f6:
         54:6e:99:91:66:42:be:76:b1:0d:0f:8b:20:c3:0c:44:77:7d:
         f0:b5:57:35:ca:ee:11:cc:70:68:ab:e3:cb:59:b4:77:10:49:
         8f:99:be:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:09 2025 by rpki-client