Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS216227.roa
File:                     AS216227.roa (raw, json)
Hash identifier:          /sNuXKphtGlHMpNOEiHsQ8xE1izH4CQ4RGxHXEw1Moo=
Subject key identifier:   D6:81:03:7C:FC:11:05:0A:1D:F0:00:D8:52:8E:35:40:71:F0:AE:18
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       0A5080819A82B61B053232DAF4BB708C87FFBA32
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS216227.roa
Signing time:             Tue 13 Feb 2024 15:36:43 +0000
ROA not before:           Tue 13 Feb 2024 15:31:43 +0000
ROA not after:            Tue 11 Feb 2025 15:36:43 +0000
asID:                     216227
IP address blocks:        94.24.109.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Apr 2024 19:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:50:80:81:9a:82:b6:1b:05:32:32:da:f4:bb:70:8c:87:ff:ba:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Feb 13 15:31:43 2024 GMT
            Not After : Feb 11 15:36:43 2025 GMT
        Subject: CN=D681037CFC11050A1DF000D8528E354071F0AE18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:36:ba:5a:bb:05:80:e8:ff:7d:e4:42:5f:
                    b2:54:74:07:dd:b2:18:db:e8:50:e0:13:d6:6b:6c:
                    49:42:f1:ff:77:0f:3c:fa:92:41:b1:fd:90:f5:f2:
                    9f:86:f7:03:36:9c:e3:36:ed:8c:a8:cb:c0:49:27:
                    9e:fe:fe:b3:78:c7:f5:df:59:b4:be:ff:e9:2a:0f:
                    54:a3:b0:af:30:ec:59:2a:ef:23:c9:82:05:83:88:
                    c7:07:a8:b4:ba:80:ef:42:2b:48:56:6d:40:fd:2c:
                    0b:d3:55:80:92:e6:f7:a8:d6:e1:33:a9:73:ac:6e:
                    93:50:7c:ab:c7:32:d3:ce:16:92:e6:ca:a7:0c:f4:
                    e2:99:a6:9a:f1:e4:02:9d:e6:1a:fd:2a:5d:f0:16:
                    ac:44:80:70:01:3d:ea:75:54:7d:a3:21:92:9d:79:
                    8d:5d:26:56:42:b7:b0:7d:66:94:86:8e:3c:86:ce:
                    39:75:fd:c8:66:ec:46:c3:30:09:cd:50:0b:1f:44:
                    13:de:b2:23:8f:78:7f:4d:98:6d:a7:9b:8c:60:5e:
                    ed:28:14:61:ee:f3:e0:dc:0b:95:70:86:a1:80:43:
                    ab:7e:ec:8c:da:7f:bf:b3:a4:bb:82:87:fb:09:45:
                    a9:9c:c5:ec:c6:d8:52:2a:ff:53:d4:7e:79:a5:6f:
                    00:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:81:03:7C:FC:11:05:0A:1D:F0:00:D8:52:8E:35:40:71:F0:AE:18
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS216227.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.24.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:41:bc:02:02:81:95:29:a4:2d:12:c8:8b:20:9a:3a:dc:be:
         e2:07:8a:d9:1a:43:eb:c5:b2:2d:5a:b7:32:7c:27:d3:6e:f5:
         5e:72:ae:12:49:87:ce:c4:bb:c6:db:d8:73:82:e7:b0:21:fb:
         92:00:eb:58:1c:1b:d5:f4:5d:6a:63:93:fc:1b:9e:61:a0:5b:
         25:a3:1b:2e:31:fe:68:7c:02:e8:f3:35:a8:82:a3:36:b3:18:
         da:32:ad:60:4f:ff:bb:8c:c3:08:f0:1c:75:69:c5:f0:54:8b:
         7d:62:7e:53:72:4b:86:45:6e:91:c0:d0:44:4b:34:25:f2:75:
         7f:89:3c:62:49:93:bf:f3:96:ea:57:5a:41:a7:bf:cb:72:c0:
         66:c3:86:8c:dd:1c:69:82:d3:4e:8a:97:05:49:4b:50:c7:37:
         fa:30:de:49:43:9f:62:c9:e5:fa:4e:d5:ce:18:17:ea:81:87:
         87:75:92:6a:f9:d4:79:cd:1a:12:3d:23:91:8d:84:02:f0:19:
         08:fa:31:1e:9b:da:56:ca:01:a7:6c:87:c9:4a:51:63:f8:85:
         d1:be:19:47:d1:29:8a:f3:25:10:b8:7a:8c:b8:65:a1:94:0f:
         38:01:c9:41:1a:59:a3:27:fa:7d:39:55:bd:5f:16:c7:85:a3:
         83:eb:3c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 22:46:42 2024 by rpki-client on console-ams.rpki-client.org