Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215580.roa
File:                     AS215580.roa (raw, json)
Hash identifier:          lPTZ/UIhdaWmOoY6lOK6eMhFnalzy7cFMSwSpe7T3KE=
Subject key identifier:   07:19:A4:B8:E4:4F:5E:26:66:74:ED:2C:38:8F:13:C1:F3:87:E7:F3
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       0D58B16514619ADD33A657F81ABE82AB9312657F
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215580.roa
Signing time:             Sat 17 Aug 2024 08:48:44 +0000
ROA not before:           Sat 17 Aug 2024 08:43:44 +0000
ROA not after:            Sat 16 Aug 2025 08:48:44 +0000
asID:                     215580
IP address blocks:        2a09:54c4::/32 maxlen: 48

Validation:               Failed, certificate revoked on Sun 18 Aug 2024 20:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:58:b1:65:14:61:9a:dd:33:a6:57:f8:1a:be:82:ab:93:12:65:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Aug 17 08:43:44 2024 GMT
            Not After : Aug 16 08:48:44 2025 GMT
        Subject: CN=0719A4B8E44F5E266674ED2C388F13C1F387E7F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dd:a0:05:e1:82:9b:54:c0:34:c4:de:3d:2e:
                    2f:ec:3b:a6:6a:65:a5:12:db:03:cb:ed:41:23:d3:
                    a5:3c:2f:ca:ac:5d:c2:58:86:9a:4c:b0:14:7f:a6:
                    c2:7f:8b:fd:e6:15:b8:38:f4:e2:bb:81:5e:04:78:
                    97:02:48:65:d1:8c:24:8d:3b:79:90:54:5d:a3:4f:
                    27:74:fe:49:4a:49:95:e8:58:6c:6c:bb:d4:0e:c5:
                    b8:46:be:19:a2:fe:e2:58:d3:26:d9:03:97:97:64:
                    02:4b:09:3b:ec:1e:6a:0d:48:30:b7:4a:b5:5c:f2:
                    6b:e3:01:ef:6c:b7:fb:03:c2:4b:71:34:c2:41:7e:
                    31:34:55:be:9a:b1:3c:b4:6e:17:b9:ee:04:23:b1:
                    3c:a6:22:4d:9e:ba:67:e3:82:5d:61:91:0b:ac:00:
                    8c:85:c5:82:64:0b:16:03:a0:2b:5c:d5:9f:c0:47:
                    da:0f:ca:7d:28:95:38:3d:a1:d4:c8:00:b4:ab:b1:
                    30:4c:0b:81:01:fe:94:7c:b6:ad:9f:73:37:c3:46:
                    de:7e:2e:99:03:9f:42:2b:c2:25:5b:71:1d:eb:e6:
                    bf:ab:08:72:8c:26:ab:76:28:ab:35:a1:33:2b:32:
                    01:0d:f0:6b:9b:40:ad:3c:be:53:bb:b1:cf:c3:19:
                    57:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:19:A4:B8:E4:4F:5E:26:66:74:ED:2C:38:8F:13:C1:F3:87:E7:F3
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215580.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:25:66:47:75:81:89:f4:3b:b1:ca:27:47:b8:05:66:81:58:
         20:a2:8f:e3:e8:93:ee:0b:7c:88:3e:93:d2:d8:60:b9:81:de:
         03:64:e3:d3:34:94:c1:f0:7e:08:37:63:e8:4d:aa:6f:35:02:
         e1:f8:7b:de:13:51:02:0d:69:08:7f:f9:2c:ea:88:5a:85:32:
         37:77:3e:76:d6:f2:29:dd:3e:dc:95:72:5f:4c:01:ac:a1:e9:
         65:c0:80:e4:11:24:56:02:cc:69:3d:35:a8:09:05:cd:0a:a6:
         01:7c:83:63:8e:01:ae:e7:08:e9:16:e3:9e:e6:ca:be:d6:ab:
         ab:01:1e:73:cd:ec:22:84:62:9a:ee:5a:ba:8f:a1:a3:c2:43:
         2a:fe:ee:be:e7:bc:28:21:f5:ab:94:b5:da:35:46:52:7c:1a:
         34:8c:cb:36:a4:fa:31:85:0c:11:d0:09:89:6f:7a:66:24:93:
         10:7d:8c:d2:a0:c0:a9:02:b7:5d:59:1d:94:13:91:2e:7f:08:
         e8:23:36:bd:9e:5f:6d:f8:8f:ff:be:af:a1:84:99:32:70:98:
         d7:2a:73:40:0a:f9:a7:d6:03:52:88:da:1d:ca:60:8a:b8:33:
         81:8c:08:5b:e7:e8:40:6c:10:3e:8e:09:c4:14:d1:a0:d5:86:
         7b:ea:a4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 18 22:02:31 2024 by rpki-client on console-fra.rpki-client.org