Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206804.roa
File:                     AS206804.roa (raw, json)
Hash identifier:          DNHAV4hg+QCzA5GYVanQ8syVhv538WnneNy0Ax3hEJU=
Subject key identifier:   A6:39:81:5E:7D:9B:23:88:74:EC:03:51:EB:78:F4:F1:6E:D4:1F:78
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       09FA2A842BB3669BF030268B117D03D3F9CC7A92
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206804.roa
Signing time:             Sat 12 Oct 2024 08:53:26 +0000
ROA not before:           Sat 12 Oct 2024 08:48:26 +0000
ROA not after:            Sat 11 Oct 2025 08:53:26 +0000
asID:                     206804
IP address blocks:        185.195.237.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 14 Oct 2024 05:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fa:2a:84:2b:b3:66:9b:f0:30:26:8b:11:7d:03:d3:f9:cc:7a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Oct 12 08:48:26 2024 GMT
            Not After : Oct 11 08:53:26 2025 GMT
        Subject: CN=A639815E7D9B238874EC0351EB78F4F16ED41F78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c5:ff:6b:b1:f1:bc:ed:db:c8:32:03:85:3f:
                    6d:05:59:61:9a:73:64:da:54:5a:88:5a:a5:aa:89:
                    dc:f2:f1:03:1f:20:1d:dd:a6:e7:26:7c:4d:10:84:
                    72:4d:bb:0a:6c:1f:e8:08:85:41:0b:2d:2a:83:1b:
                    39:8d:fc:49:c9:30:c1:37:02:b8:e1:47:59:43:87:
                    e7:5b:91:75:b5:cb:d8:6a:f1:0a:e8:69:12:f8:e9:
                    4b:cc:97:1f:5a:34:b1:f4:c6:48:93:2b:06:97:85:
                    d1:0f:05:48:32:a5:5a:41:4d:25:d6:c0:17:d4:a6:
                    e0:33:72:1e:02:01:e3:91:47:8b:07:32:4e:94:41:
                    1f:b3:27:20:8b:81:c9:dc:ad:a2:63:a1:ac:e9:10:
                    30:5e:62:ba:36:2d:fe:4d:6a:1d:f6:52:58:2f:e0:
                    20:b3:3d:da:7f:21:d7:03:45:db:82:e3:ee:f6:03:
                    2a:91:c2:3e:06:62:03:3c:f2:60:8b:24:4b:dc:16:
                    54:4c:3f:8f:3e:5a:c6:d3:7a:88:d6:d5:d8:21:71:
                    f3:fb:d9:70:7c:41:48:9b:e1:c7:fe:be:79:b4:69:
                    34:55:c4:f6:1b:ca:51:05:94:33:2f:b9:3a:c8:82:
                    93:7a:dd:e1:b1:2f:b6:ac:fe:be:80:45:ab:d4:17:
                    1a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:39:81:5E:7D:9B:23:88:74:EC:03:51:EB:78:F4:F1:6E:D4:1F:78
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206804.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.195.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:95:60:52:55:3f:e1:6a:0d:c0:d3:54:87:a6:db:f8:13:39:
         3b:dd:91:56:a3:96:65:fc:a2:b8:b4:bc:96:8f:56:d4:b5:43:
         b5:73:44:13:d4:b2:de:f2:63:17:cd:89:31:ff:82:5a:3b:9c:
         83:33:69:86:ec:f0:f1:88:62:4f:20:df:72:be:66:0f:c0:98:
         74:c4:43:73:ea:28:11:3d:e9:e4:3e:99:de:b5:3e:35:51:ec:
         0c:17:7b:53:f5:e7:b4:ab:13:da:63:88:2d:64:ef:90:e7:b8:
         cc:60:c9:bd:c3:fb:60:1e:af:09:fa:55:81:3d:bd:77:10:7c:
         33:b6:09:fb:a4:00:9a:6c:6c:5b:3b:d2:47:de:3d:a2:b8:7c:
         82:8f:d9:8f:5d:b1:cc:13:c9:4a:bc:35:f3:19:19:5e:b0:1c:
         90:a7:40:bb:db:48:dd:3d:e3:f2:9c:5b:65:bb:c8:76:7a:68:
         23:8a:82:7d:5a:0f:df:2a:28:50:76:d7:82:a8:15:4a:62:cd:
         1b:3d:f2:2d:ad:48:78:95:36:8d:19:40:65:06:2d:7f:26:ac:
         d8:8b:2d:9e:c5:e9:04:12:15:3c:b3:de:1d:b7:01:48:7b:8d:
         b4:03:55:27:37:4d:46:4a:0b:95:53:16:4d:6c:68:ca:68:ba:
         46:34:00:b6
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUCfoqhCuzZpvwMCaLEX0D0/nMepIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDEwMTIwODQ4MjZaFw0yNTEwMTEwODUzMjZaMDMxMTAvBgNV
BAMTKEE2Mzk4MTVFN0Q5QjIzODg3NEVDMDM1MUVCNzhGNEYxNkVENDFGNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoxf9rsfG87dvIMgOFP20FWWGa
c2TaVFqIWqWqidzy8QMfIB3dpucmfE0QhHJNuwpsH+gIhUELLSqDGzmN/EnJMME3
ArjhR1lDh+dbkXW1y9hq8QroaRL46UvMlx9aNLH0xkiTKwaXhdEPBUgypVpBTSXW
wBfUpuAzch4CAeORR4sHMk6UQR+zJyCLgcncraJjoazpEDBeYro2Lf5Nah32Ulgv
4CCzPdp/IdcDRduC4+72AyqRwj4GYgM88mCLJEvcFlRMP48+WsbTeojW1dghcfP7
2XB8QUib4cf+vnm0aTRVxPYbylEFlDMvuTrIgpN63eGxL7as/r6ARavUFxr9AgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUpjmBXn2bI4h07ANR63j08W7UH3gwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjA2ODA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAucPtMA0GCSqGSIb3DQEBCwUAA4IBAQCflWBSVT/h
ag3A01SHptv4Ezk73ZFWo5Zl/KK4tLyWj1bUtUO1c0QT1LLe8mMXzYkx/4JaO5yD
M2mG7PDxiGJPIN9yvmYPwJh0xENz6igRPenkPpnetT41UewMF3tT9ee0qxPaY4gt
ZO+Q57jMYMm9w/tgHq8J+lWBPb13EHwztgn7pACabGxbO9JH3j2iuHyCj9mPXbHM
E8lKvDXzGRlesByQp0C720jdPePynFtlu8h2emgjioJ9Wg/fKihQdteCqBVKYs0b
PfItrUh4lTaNGUBlBi1/JqzYiy2exekEEhU8s94dtwFIe420A1UnN01GSguVUxZN
bGjKaLpGNAC2
-----END CERTIFICATE-----
Generated at Mon Oct 14 07:27:47 2024 by rpki-client on console-ams.rpki-client.org