Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202518.roa
File:                     AS202518.roa (raw, json)
Hash identifier:          Y9OiWQ9l13aSt6U9+spzxtfQRnrv8m9B86G2/Dkb7tQ=
Subject key identifier:   B4:9E:20:DF:30:26:8A:B5:4E:8A:CE:0F:DA:79:54:60:06:8C:76:99
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       590EFD623D524D283D5BA5FA20DA4F27629C3859
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202518.roa
Signing time:             Tue 05 Nov 2024 03:40:02 +0000
ROA not before:           Tue 05 Nov 2024 03:35:02 +0000
ROA not after:            Tue 04 Nov 2025 03:40:02 +0000
asID:                     202518
IP address blocks:        2a06:a005:1504::/48 maxlen: 48
                          2a06:a005:1d50::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0e:fd:62:3d:52:4d:28:3d:5b:a5:fa:20:da:4f:27:62:9c:38:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:02 2024 GMT
            Not After : Nov  4 03:40:02 2025 GMT
        Subject: CN=B49E20DF30268AB54E8ACE0FDA795460068C7699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6d:c6:1b:3f:10:af:4c:18:91:4b:e6:23:8a:
                    f2:32:25:b1:e0:25:08:48:24:95:d0:67:1a:74:41:
                    63:e0:c4:55:db:18:14:7a:f2:71:9c:9e:bf:26:fe:
                    1c:21:31:02:85:09:3e:5d:9b:cc:0b:72:b5:fd:59:
                    c1:d0:80:84:a2:fc:96:d6:f5:45:a5:25:f6:7e:69:
                    7d:ca:52:6e:ca:c4:28:ec:68:06:a3:54:ac:7c:69:
                    2f:65:d2:5f:74:d9:70:ce:e4:9a:fa:bd:af:6c:07:
                    b9:dc:7e:e3:96:53:a4:71:21:f6:77:49:90:2a:3d:
                    2d:e3:20:5a:10:05:48:ac:a5:e6:19:6b:fc:7f:ed:
                    1e:72:6e:ac:0d:23:12:fb:6c:c2:09:e8:cd:43:1c:
                    43:2f:6e:ca:71:90:2c:b3:bd:41:f9:dd:4c:de:f4:
                    a9:24:9b:60:9a:61:cf:90:8e:af:98:1e:e3:44:f0:
                    2a:2a:a7:74:2f:a0:a4:c3:82:e4:03:20:67:53:a5:
                    54:ff:3d:a5:3e:1d:da:ac:24:b8:52:0e:3a:49:4a:
                    f8:66:32:17:80:b2:c5:73:62:68:75:8f:9a:7e:22:
                    d3:d6:69:c1:21:25:d6:73:35:d9:85:f4:7b:bf:99:
                    12:d4:87:1e:06:11:c5:6f:8b:2a:a4:8c:74:fa:25:
                    c7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9E:20:DF:30:26:8A:B5:4E:8A:CE:0F:DA:79:54:60:06:8C:76:99
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202518.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1504::/48
                  2a06:a005:1d50::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:2f:a7:a7:ad:ed:1e:2b:27:fc:34:de:3e:80:be:85:be:97:
         9d:15:b9:41:65:e4:99:03:37:d1:b1:46:03:c4:4b:7c:df:e1:
         76:eb:30:a9:e8:b0:e7:9a:b8:3c:e4:f0:56:61:3e:24:e4:fd:
         8d:92:06:dc:85:26:83:e0:cd:30:f9:59:5a:e1:49:3e:b4:ec:
         f0:f7:9d:a7:ee:bb:2d:96:0c:9c:01:2a:28:3e:54:43:91:38:
         5d:31:cc:0d:07:8f:49:2b:bd:4c:69:4d:c3:27:30:f2:73:19:
         a0:4f:6b:8b:6e:c1:3b:9a:da:63:68:e4:49:1f:52:d5:59:c1:
         9f:09:7e:61:d0:bb:cc:a9:a3:52:e7:7c:10:a5:6f:e3:67:c0:
         4f:41:bb:0c:d2:7b:c0:62:15:8a:18:56:74:6f:c3:43:4a:3f:
         65:32:aa:14:5b:90:50:7c:f6:4d:36:3f:5c:b0:4b:1b:77:29:
         2c:f1:10:8d:fd:30:31:b6:df:23:31:f4:d1:e3:9e:6d:f7:4b:
         b8:1a:b2:43:4c:af:90:51:c5:f1:42:d5:84:1f:97:1e:62:2a:
         1c:c5:c7:ac:c0:16:3e:2e:73:0a:82:13:9e:d1:83:15:b5:7e:
         ee:b4:bf:ba:a3:72:ab:46:80:f6:a8:81:c8:21:db:31:75:db:
         b3:23:e6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:29 2025 by rpki-client