Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215085.roa
File:                     AS215085.roa (raw, json)
Hash identifier:          VPuv+vfyyBKyxKHztHlGm+brZ1vsbupUT3NMlvfwa4c=
Subject key identifier:   C6:D9:A8:97:4E:43:FB:48:15:90:C9:F6:76:FE:6C:85:72:81:CB:37
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       1F016598030CE1C84D5C812D7C9BE4627E2D514C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215085.roa
Signing time:             Tue 04 Jun 2024 20:09:29 +0000
ROA not before:           Tue 04 Jun 2024 20:04:29 +0000
ROA not after:            Tue 03 Jun 2025 20:09:29 +0000
asID:                     215085
IP address blocks:        83.142.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 02 Sep 2024 07:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:01:65:98:03:0c:e1:c8:4d:5c:81:2d:7c:9b:e4:62:7e:2d:51:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jun  4 20:04:29 2024 GMT
            Not After : Jun  3 20:09:29 2025 GMT
        Subject: CN=C6D9A8974E43FB481590C9F676FE6C857281CB37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d7:4d:62:48:ed:36:f4:ac:a4:1d:82:dc:0f:
                    69:be:27:8c:b7:93:fe:80:63:1c:e0:a6:51:95:80:
                    66:9d:8a:6e:50:14:5d:ed:96:a2:06:7a:09:ef:c1:
                    8f:68:1f:a5:99:c3:b7:a8:fe:cd:d4:08:ba:a0:1f:
                    fe:4e:97:86:d0:43:16:ee:52:3a:c2:f3:a7:61:11:
                    73:6f:9e:8c:e7:64:97:0a:e4:e0:ad:12:c6:f2:8e:
                    13:b2:df:71:b0:de:63:4e:22:c4:5e:e6:22:13:aa:
                    06:84:fc:5a:40:3b:a1:8a:a8:ee:55:9c:58:43:6a:
                    e0:b4:88:1e:06:80:9d:59:8d:ae:76:39:c3:41:d8:
                    31:e2:26:49:20:77:8b:3a:21:de:fb:82:f9:77:c1:
                    00:8e:8f:02:b1:65:19:8b:63:c8:48:19:12:9e:d4:
                    d1:0b:c3:97:ee:db:e8:90:c4:03:d2:c4:c9:a2:80:
                    f6:ee:51:52:53:68:d8:c3:be:85:02:ce:82:45:a0:
                    e5:f4:c8:d9:01:ad:66:01:e0:64:bf:d7:35:97:c6:
                    ab:20:51:af:3b:1c:fa:74:07:69:d7:0d:bc:a6:ce:
                    f2:6d:79:0c:1e:bc:2d:64:3b:3a:bb:c6:a1:d3:a2:
                    2a:d4:fb:0c:10:48:2f:ba:bd:62:80:da:ef:7e:0c:
                    49:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D9:A8:97:4E:43:FB:48:15:90:C9:F6:76:FE:6C:85:72:81:CB:37
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215085.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.142.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:a4:ab:2e:c5:e7:a8:35:f9:f1:e4:06:a5:4e:ca:d8:0a:ea:
         c2:a7:e2:13:e3:59:f1:d9:4e:2f:15:94:3c:d7:6b:5b:d7:ce:
         9f:c1:c4:61:17:58:86:31:26:d1:6e:25:28:21:50:1a:a2:f0:
         f9:88:54:29:d3:1b:b8:75:92:92:01:95:1c:e8:46:2e:04:ff:
         dc:c1:c0:16:48:ec:8d:5c:59:66:32:34:79:b1:07:07:74:5c:
         b5:9f:a7:e7:e9:21:68:9e:e4:16:bf:b2:fc:08:c9:9e:c7:81:
         82:11:0b:3c:07:e4:cc:0b:bf:70:d1:4b:7f:f0:f1:56:77:19:
         b9:bd:b0:87:56:9e:c2:dc:07:5b:03:8d:cb:c5:9b:44:18:c5:
         b4:ab:a1:3f:25:9b:6b:76:14:6b:29:69:14:07:55:36:7b:82:
         b8:9f:6a:a5:9e:d5:00:1d:53:e9:f2:94:f4:23:d3:e5:47:8e:
         5d:30:16:03:97:83:f1:4e:97:18:4f:90:59:03:8a:06:a2:69:
         db:97:2c:c3:c0:e7:ab:72:95:d9:52:43:d0:7e:42:5b:33:93:
         2c:34:2f:70:5c:1c:8f:7a:bc:61:85:0e:d9:d4:a3:bd:d5:f5:
         9d:92:74:ae:96:06:ec:26:2e:36:e3:20:dc:e1:5f:06:47:20:
         ee:94:46:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 10:21:46 2024 by rpki-client on console-ams.rpki-client.org