Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210761.roa
File:                     AS210761.roa (raw, json)
Hash identifier:          qGfUKKNuPgmlUZaGMjNu9Jbuq913H9LUI+hxI9kAkcg=
Subject key identifier:   12:60:C1:65:43:78:FE:B4:0D:E5:E2:52:7F:89:F1:E5:D0:D0:BE:E6
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       40A49660D813AFBE3090248842F40216AC46BAC0
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210761.roa
Signing time:             Tue 03 Jan 2023 02:07:15 +0000
ROA not before:           Tue 03 Jan 2023 02:02:15 +0000
ROA not after:            Tue 02 Jan 2024 02:07:15 +0000
asID:                     210761
IP address blocks:        2a06:a005:2d1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a4:96:60:d8:13:af:be:30:90:24:88:42:f4:02:16:ac:46:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan  3 02:02:15 2023 GMT
            Not After : Jan  2 02:07:15 2024 GMT
        Subject: CN=1260C1654378FEB40DE5E2527F89F1E5D0D0BEE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0a:d3:75:d0:14:da:93:d2:1b:0a:8f:df:85:
                    80:e7:a4:a7:f9:47:96:db:9d:a9:69:14:b1:61:52:
                    21:9c:30:fc:b3:97:25:11:62:2e:6c:f6:aa:bd:ae:
                    b4:98:bc:93:4b:98:67:8b:ea:53:8b:66:48:96:50:
                    e7:9d:b4:f5:1c:e5:78:5d:b6:ee:f9:98:66:b0:bb:
                    8d:e7:d6:9b:d5:4b:a6:27:22:78:75:e6:e3:4f:a2:
                    fc:7a:3e:4a:96:fc:23:83:56:6c:60:ad:2a:e5:db:
                    64:0a:5f:81:06:04:9f:7d:8c:47:16:59:f0:94:c9:
                    d3:be:26:65:c3:89:c3:be:cb:86:6c:83:c5:2e:87:
                    8e:2b:2a:db:64:52:1d:66:8e:fe:b0:7d:3d:cd:f9:
                    1c:20:59:15:47:98:34:84:46:89:62:3c:b2:f1:b2:
                    30:29:df:c9:d7:c7:1e:c9:2b:23:c5:92:b2:9a:ed:
                    bd:17:f2:87:28:d8:46:ee:4a:6b:6f:7d:0c:ba:07:
                    c9:80:06:f0:95:67:39:7b:0a:d4:d1:76:a3:3f:51:
                    b3:90:38:82:8b:15:a6:d0:71:e2:c2:97:13:63:12:
                    65:88:bf:0b:ce:bd:30:06:af:a9:e7:c2:32:9e:12:
                    0f:cb:be:dd:1c:cb:a9:63:41:ee:73:33:98:10:bd:
                    95:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:60:C1:65:43:78:FE:B4:0D:E5:E2:52:7F:89:F1:E5:D0:D0:BE:E6
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210761.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2d1::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:82:d8:8c:83:05:36:84:6d:88:db:b7:2f:56:78:1f:de:dd:
         e4:ac:a9:73:20:66:d1:05:0e:b6:e3:40:8a:30:82:13:55:94:
         bb:3d:23:5d:a5:b4:5c:73:18:44:d5:68:f3:22:8e:52:6e:73:
         cc:1d:ce:56:37:60:d5:72:5c:19:84:f7:cb:c4:94:1d:b0:9f:
         4d:9c:0a:64:8b:fd:06:29:58:39:24:3b:c7:d7:9a:e7:56:20:
         53:09:a4:30:0e:8b:17:9f:f6:a8:fd:60:35:85:d0:5a:a5:06:
         9e:d6:07:45:05:3b:1b:cc:c1:3d:75:5d:8e:91:ad:11:98:bb:
         98:0e:84:1a:7a:09:15:db:35:f9:c4:63:57:fa:85:d6:69:b1:
         94:ee:e2:cf:3b:5b:c6:38:b0:17:7f:75:c3:de:01:a3:a8:4a:
         02:f5:c4:4e:a9:a5:d8:5b:2b:56:2e:a7:8b:f6:27:a7:34:7f:
         de:af:5d:39:d2:d6:4f:3d:a1:1d:46:fa:ff:3b:55:36:33:c8:
         77:1b:b3:78:1b:0a:f0:cd:e6:3f:94:0f:fe:db:20:97:9f:1c:
         cf:11:d6:6a:8f:c5:d2:bf:20:b3:f7:9d:dd:50:a1:47:08:8d:
         60:91:c4:fd:71:ff:b7:9f:1c:36:f2:92:b7:a3:66:4e:57:d6:
         d8:50:0b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:24 2023 by rpki-client on console-fra.rpki-client.org