Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205794.roa
File:                     AS205794.roa (raw, json)
Hash identifier:          RGH7ztnfGULvvFCg0Da4iGGDwr6K9pXvl7BlqoPNtdg=
Subject key identifier:   97:52:7F:27:61:57:3B:74:80:A6:60:7E:81:48:C7:F9:85:A7:85:9A
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       359D4F318CEA6F7577770037C1F52E2E8A9DD0B6
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205794.roa
Signing time:             Tue 05 Nov 2024 03:40:00 +0000
ROA not before:           Tue 05 Nov 2024 03:35:00 +0000
ROA not after:            Tue 04 Nov 2025 03:40:00 +0000
asID:                     205794
IP address blocks:        2a06:a005:c50::/44 maxlen: 48
Validation:               Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9d:4f:31:8c:ea:6f:75:77:77:00:37:c1:f5:2e:2e:8a:9d:d0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:00 2024 GMT
            Not After : Nov  4 03:40:00 2025 GMT
        Subject: CN=97527F2761573B7480A6607E8148C7F985A7859A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:2b:e0:db:de:78:f2:c1:98:4e:e6:71:29:
                    1f:66:a2:b4:91:a5:eb:25:04:6f:06:dd:5f:aa:08:
                    9a:c8:86:ae:b4:c4:17:fd:84:6d:ff:53:41:2f:06:
                    e0:18:88:27:a7:5c:13:1c:45:63:23:2b:f1:e6:51:
                    ce:b6:4a:f6:01:55:ed:e2:ff:41:7e:18:86:90:d0:
                    05:d1:ad:79:aa:f2:de:26:14:fa:58:e8:21:fe:8b:
                    a8:ab:66:7a:18:d0:33:93:2c:f8:a9:0e:64:54:d8:
                    e6:e1:79:90:0d:66:96:ed:8b:8f:97:cb:db:9d:03:
                    ab:55:4f:c5:ab:2b:a9:45:d9:12:cf:db:5c:eb:b9:
                    01:10:cb:98:1f:d6:e2:dc:1d:ee:2c:99:6b:42:f7:
                    e6:20:7f:8a:a4:24:51:59:8e:d7:c0:98:e0:f3:cf:
                    83:89:91:1d:fd:ee:f2:35:97:d9:b3:ce:d0:c3:74:
                    65:d1:a4:8e:86:7c:dc:98:b1:39:c8:8a:04:92:b6:
                    b6:a1:e3:bb:ed:1b:4d:a2:e5:78:a9:d1:c9:f0:e8:
                    62:48:e2:e0:ee:8e:39:a3:90:ec:46:37:53:fd:f1:
                    07:fd:f1:a0:3c:85:09:28:75:53:69:da:15:56:0e:
                    e3:15:60:82:9f:45:a7:8d:5c:49:bb:58:45:f8:a6:
                    1e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:52:7F:27:61:57:3B:74:80:A6:60:7E:81:48:C7:F9:85:A7:85:9A
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205794.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:c50::/44

    Signature Algorithm: sha256WithRSAEncryption
         4f:67:86:d2:5c:b1:5b:74:e9:41:00:ae:35:c7:3c:31:40:76:
         33:38:78:29:8b:a0:5a:8e:17:79:61:0c:17:61:ce:a5:ce:6b:
         78:26:2d:a2:dc:aa:29:9c:26:02:a4:2c:c9:47:df:56:0c:75:
         a6:24:5b:e3:d7:8d:3b:1d:4a:cf:ca:43:d3:9a:52:50:4f:d5:
         b3:72:b9:77:21:66:81:52:d3:57:9a:97:e1:ff:c8:d5:25:1b:
         18:ef:b7:dc:c6:a1:02:7f:19:d4:ae:68:a3:c3:91:fa:e8:7c:
         bb:f5:ca:69:be:74:9c:46:85:c2:02:cd:ad:6f:2a:dc:3f:93:
         09:1f:8a:69:54:bc:a8:a2:0b:2a:19:f7:4e:07:ab:e9:5b:ff:
         70:15:5c:28:9b:71:61:3f:48:b5:26:1d:c7:d9:0c:93:51:03:
         45:b7:e3:95:61:3e:43:67:06:a1:39:7e:d8:c4:71:ab:49:2d:
         0d:cf:7f:b4:29:5a:01:1c:81:47:4f:1c:bd:d4:b1:cb:f5:10:
         8f:7d:fd:a4:42:ba:ed:17:a0:64:d5:a9:34:b6:e5:54:ce:d6:
         6d:4e:1f:a9:9a:9f:5f:b1:ad:01:8f:63:f7:44:1e:60:3f:94:
         f1:d5:12:73:7f:05:ec:7f:fa:96:d9:62:38:99:a0:a3:87:75:
         d5:7b:94:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:46:09 2025 by rpki-client