Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210836.roa
File:                     AS210836.roa (raw, json)
Hash identifier:          BSUh8opy3EGXNQYRiCvOpeYrzNTcayknWCcSVfHEypY=
Subject key identifier:   D8:59:C0:87:79:BA:DB:F6:37:62:98:25:3C:D1:CE:F5:C8:A1:9A:87
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       10F568F23D5DDCEC59520F1E1E72F5F0D3B1822C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210836.roa
Signing time:             Tue 05 Nov 2024 03:40:08 +0000
ROA not before:           Tue 05 Nov 2024 03:35:08 +0000
ROA not after:            Tue 04 Nov 2025 03:40:08 +0000
asID:                     210836
IP address blocks:        2a06:a005:5bc::/46 maxlen: 48
Validation:               Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f5:68:f2:3d:5d:dc:ec:59:52:0f:1e:1e:72:f5:f0:d3:b1:82:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:08 2024 GMT
            Not After : Nov  4 03:40:08 2025 GMT
        Subject: CN=D859C08779BADBF6376298253CD1CEF5C8A19A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:25:2a:22:2b:45:b5:f9:63:2d:ad:01:b8:2f:
                    00:19:d3:97:1d:5f:83:3d:cd:15:31:e1:55:21:c9:
                    be:14:52:0a:c7:b3:f1:c1:6d:65:c8:15:0c:4a:4d:
                    1b:6d:64:c7:60:dc:56:f1:dd:ff:cc:27:7e:aa:de:
                    10:47:1d:3a:55:74:60:67:9f:61:a1:f9:3e:a4:b2:
                    8b:67:94:b3:a0:5d:1b:8d:5a:40:92:35:4c:93:e5:
                    5b:f4:e8:f0:92:e0:7e:bd:f3:7e:88:9f:8e:29:c3:
                    74:74:6a:43:51:c9:d0:69:49:82:31:3c:d5:c1:05:
                    d5:ad:cb:cc:0a:bd:d8:3a:8a:7c:1a:31:50:76:a9:
                    b9:e0:50:fb:14:c4:20:4a:d6:15:30:fd:ab:35:a5:
                    50:bb:00:15:e0:5f:66:b9:19:99:f4:3e:4b:b3:88:
                    82:10:b9:e2:ad:25:17:8f:25:25:74:60:f1:18:48:
                    aa:4c:a0:02:5b:30:75:ff:35:cb:ab:00:72:5d:05:
                    84:e5:f9:6e:c0:0d:79:18:a2:d7:30:e3:fe:65:72:
                    73:be:81:07:2f:4a:19:52:de:55:92:30:ea:d7:75:
                    89:07:20:3c:95:99:69:ee:d0:cd:86:06:5d:7f:8e:
                    08:7c:06:93:0a:bc:17:d5:75:76:e0:af:8d:60:3c:
                    49:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:59:C0:87:79:BA:DB:F6:37:62:98:25:3C:D1:CE:F5:C8:A1:9A:87
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5bc::/46

    Signature Algorithm: sha256WithRSAEncryption
         ae:e4:4a:6a:8c:c5:d6:f1:3f:1a:cf:d6:04:12:49:dc:50:ec:
         a1:a4:7d:c8:74:c5:37:87:46:fd:77:6a:24:18:28:bf:4b:2c:
         16:8d:6b:ad:ff:51:ef:fa:12:37:eb:b4:71:ac:a2:e0:fb:22:
         5d:9f:99:36:1a:4b:8e:34:f9:56:3e:ed:bd:25:54:3f:3e:d0:
         c2:56:86:26:a9:c2:c5:8d:f0:ca:d4:f5:ed:19:be:2e:90:21:
         01:dd:ae:ea:95:37:a2:80:38:27:0e:16:81:80:66:47:8d:54:
         a7:bd:4f:a6:97:c4:3b:d0:db:a6:2c:25:cd:ca:e5:bf:2e:00:
         3d:26:74:a6:0d:19:89:ed:3d:f1:f0:23:53:31:3b:db:2b:7e:
         20:7d:95:3c:48:03:27:d7:b4:36:42:0b:08:06:d9:5a:96:43:
         f4:74:f1:ce:1f:e5:e4:b3:38:87:46:cd:6b:4b:e8:2c:e0:7b:
         b7:9a:5b:03:a8:fd:ad:5e:33:b8:3f:17:2e:05:9f:75:4e:51:
         87:0a:d5:98:12:c6:15:5d:28:c7:26:81:ce:ba:2a:f6:ed:be:
         0e:a4:7c:b3:0f:db:b8:05:f0:f8:11:d3:d9:a8:a2:7d:4f:81:
         70:1c:f9:80:a6:e1:d6:54:61:be:02:4b:46:c3:10:47:3a:d7:
         9b:5d:5b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:46:06 2025 by rpki-client