Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215085.roa
File:                     AS215085.roa (raw, json)
Hash identifier:          vBXtL/SNVD7WP0hXyjSoiS9XiSMZSwGJanRtYWlPMtU=
Subject key identifier:   AF:7E:03:AA:10:8A:55:BD:18:C5:C9:2A:F3:C0:3E:8D:69:41:A6:69
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       44F9FD965D9C05DC27AD2445B72EB367E33FDF65
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215085.roa
Signing time:             Mon 02 Sep 2024 07:47:52 +0000
ROA not before:           Mon 02 Sep 2024 07:42:52 +0000
ROA not after:            Mon 01 Sep 2025 07:47:52 +0000
asID:                     215085
IP address blocks:        83.142.31.0/24 maxlen: 24
                          2a06:9f41::/32 maxlen: 48

Validation:               Failed, certificate revoked on Mon 02 Sep 2024 09:09:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f9:fd:96:5d:9c:05:dc:27:ad:24:45:b7:2e:b3:67:e3:3f:df:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Sep  2 07:42:52 2024 GMT
            Not After : Sep  1 07:47:52 2025 GMT
        Subject: CN=AF7E03AA108A55BD18C5C92AF3C03E8D6941A669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6f:0f:c7:5f:3a:26:e2:4f:c2:aa:9f:20:64:
                    a4:9f:ac:06:9a:cd:7f:08:48:d8:a1:53:db:b7:19:
                    d9:e8:59:63:f0:b7:e9:5b:44:10:ca:67:2a:bf:99:
                    8b:92:b8:2a:95:1e:8a:38:72:d6:bd:6a:bf:b0:14:
                    3e:a0:bf:b0:74:21:2e:d2:76:79:30:92:44:2f:0d:
                    71:00:03:11:55:f0:36:4b:49:99:67:5e:bc:fe:c6:
                    82:da:69:c5:f3:51:7c:49:9b:5e:01:9c:d2:90:ae:
                    f1:0c:37:43:29:9b:80:da:a7:5e:dc:4c:de:3d:52:
                    05:5f:65:55:f3:29:72:a8:54:9f:41:54:6f:ac:bb:
                    0c:7c:42:62:54:d0:f4:0f:33:b4:d6:a4:1f:0e:40:
                    16:d0:b0:fd:5a:70:e8:dc:56:e1:22:bd:80:23:77:
                    4b:47:f9:ec:04:b2:0c:92:41:79:29:a4:ef:cf:81:
                    46:19:3e:8a:20:76:53:e1:dd:25:79:10:90:fb:1c:
                    71:fc:ff:80:ca:14:c8:1d:20:4f:c9:18:c7:ab:76:
                    9d:c6:d2:43:44:3e:2e:7d:f0:ea:08:78:bd:50:bc:
                    fb:27:f7:5b:cb:28:c3:d3:3d:fd:7a:dc:ef:cc:32:
                    b9:e8:14:c7:60:f7:b3:cd:58:6d:d3:26:da:55:88:
                    77:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7E:03:AA:10:8A:55:BD:18:C5:C9:2A:F3:C0:3E:8D:69:41:A6:69
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215085.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.142.31.0/24
                IPv6:
                  2a06:9f41::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:e1:fd:89:39:93:f3:af:71:fb:66:73:23:ae:ea:a3:f0:ae:
         23:25:be:56:39:99:27:0b:34:56:01:a7:12:96:c5:5e:38:10:
         7a:e8:83:8e:13:20:5b:89:ff:63:8e:74:e1:26:4c:e4:95:9e:
         23:b0:22:70:28:e6:ce:78:85:48:e2:4b:4f:88:66:e3:24:6c:
         89:98:61:00:7c:78:52:02:59:d3:9e:8f:a4:cd:cc:88:fc:67:
         f2:fc:95:75:76:1e:38:99:f4:9c:e7:9a:8b:f6:37:48:4f:3a:
         ca:79:ac:1c:a1:8a:a3:ce:8d:7d:4d:9e:c7:fe:fb:55:7b:5f:
         59:ff:12:d8:8d:ef:46:5c:fc:88:0c:eb:97:52:05:0c:81:d5:
         b1:97:ac:0c:31:7d:c8:6c:ed:7f:6a:49:d2:bc:ca:06:27:c9:
         e8:de:9e:1a:3b:88:2c:66:bf:c1:0f:84:a8:a5:ee:8f:9d:b9:
         13:e2:92:72:13:a8:59:e5:a3:32:22:18:c7:22:61:fb:6b:0f:
         2d:73:db:da:fd:12:9d:19:cd:6d:17:41:52:c0:53:2d:31:ac:
         a0:55:8c:40:f1:56:72:90:9f:22:8c:f2:15:85:af:80:d6:70:
         28:c4:d2:ac:38:56:9f:78:ca:ea:e2:e5:ef:28:ff:aa:55:a2:
         ce:f8:08:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----