Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200954.roa
File:                     AS200954.roa (raw, json)
Hash identifier:          pTP4J9+Jr8bPv5Q8Tj1GQWWY7f4lh6Jw9iRQTkBZTCc=
Subject key identifier:   2A:12:21:33:3B:31:AC:C5:84:38:AF:81:8D:D4:0A:BF:A8:8B:D0:C2
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       4B4189D8B12342DBFE8BEC22278CA3B1EB3A4666
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200954.roa
Signing time:             Thu 05 Dec 2024 11:40:12 +0000
ROA not before:           Thu 05 Dec 2024 11:35:12 +0000
ROA not after:            Thu 04 Dec 2025 11:40:12 +0000
asID:                     200954
IP address blocks:        2a06:a005:2100::/44 maxlen: 48
Validation:               Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:41:89:d8:b1:23:42:db:fe:8b:ec:22:27:8c:a3:b1:eb:3a:46:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 11:35:12 2024 GMT
            Not After : Dec  4 11:40:12 2025 GMT
        Subject: CN=2A1221333B31ACC58438AF818DD40ABFA88BD0C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:9f:14:af:90:93:7f:65:32:2d:bb:f9:68:a7:
                    ae:f2:fd:16:3e:ef:1d:2d:1c:f9:fb:b9:7a:cf:64:
                    4f:4b:99:c0:91:b7:1c:83:b3:24:35:d8:9d:4e:67:
                    47:7b:a1:33:8c:1e:a3:12:21:23:9a:1c:0f:c0:6e:
                    f0:95:4d:8a:2c:ab:f4:89:3d:ee:c5:38:52:1f:3a:
                    7f:b4:f9:54:f4:7d:d6:fc:c4:e0:05:d9:e4:83:a6:
                    7a:d7:69:cb:3f:af:88:79:a7:ec:29:e4:e1:45:9b:
                    72:38:52:41:dd:e0:b2:69:4d:2b:06:91:61:0e:81:
                    af:a9:1a:42:f5:c3:14:94:7a:bd:3d:cf:3a:fd:34:
                    85:db:fe:37:d5:81:5b:fa:fc:1a:5b:95:20:2d:ab:
                    fc:a5:fc:15:ce:3e:d7:57:74:a6:67:fe:31:f7:6f:
                    d0:9c:65:7f:a0:41:22:99:dd:50:9b:4e:a5:20:fe:
                    2a:5c:ee:f5:e0:f4:e7:c6:d9:9d:82:45:32:52:3f:
                    34:e8:5c:bb:05:ba:a1:ed:52:48:d0:e5:39:ea:46:
                    8d:95:bc:53:a2:c2:93:db:a3:98:13:60:7a:08:30:
                    30:52:62:9c:e1:bd:99:cd:80:52:a5:a8:ce:22:43:
                    b9:8c:cc:af:d3:5d:07:ac:9d:e9:52:75:ce:1e:f9:
                    71:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:12:21:33:3B:31:AC:C5:84:38:AF:81:8D:D4:0A:BF:A8:8B:D0:C2
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200954.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2100::/44

    Signature Algorithm: sha256WithRSAEncryption
         24:98:81:7e:df:90:3b:a4:dc:c6:4a:4b:6e:a3:40:a8:25:e1:
         19:85:3f:8e:37:50:83:e6:af:7b:7e:87:34:a0:8f:7d:84:99:
         c0:ae:ef:24:d2:38:d6:63:65:2d:c0:af:35:4b:78:06:69:ab:
         e0:44:7f:3c:0c:13:84:4d:76:2f:f2:35:0c:a3:52:f1:4e:db:
         ba:23:0c:5c:b7:f7:96:6f:b9:90:94:1e:83:6c:6d:59:fd:e5:
         08:8a:e3:0c:5d:3d:10:6f:96:22:89:64:d9:09:73:c3:a8:ca:
         96:19:f3:13:40:8d:3c:36:ce:9e:40:25:f0:9c:8d:13:83:d1:
         fc:dc:d5:e1:c5:21:16:b4:42:9e:0b:02:fa:76:3b:1f:2f:cf:
         cd:6c:22:95:e9:c5:37:1e:29:e4:cc:43:fe:fe:97:7c:28:22:
         ab:3c:e4:cf:c7:0c:99:94:ca:34:2a:96:85:03:e2:4e:03:9a:
         89:4f:d4:58:20:c3:f1:ef:dc:6e:94:d6:5f:b0:9f:fa:26:31:
         ff:b5:30:a7:53:58:cd:fe:ca:84:63:a6:fa:8c:33:4e:a6:5d:
         c9:dd:e3:6d:f3:5a:43:f1:9e:48:47:1b:2f:d9:c8:9c:02:49:
         25:63:66:b9:72:fd:e8:bf:ed:44:25:7f:b5:e6:97:dd:47:e3:
         6e:59:ef:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:15:04 2025 by rpki-client