Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS26006.roa
File:                     AS26006.roa (raw, json)
Hash identifier:          LYp7i8JkzJwRsV1vod0qDsLPxapsIc9yWPP79yA8xOE=
Subject key identifier:   A9:5C:46:05:24:E9:E9:34:EC:07:AB:86:95:86:E3:96:63:A0:8D:E9
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       6ABFE3A899CCAA6C09903D8B0EC8D5FE7649EDC4
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS26006.roa
Signing time:             Mon 04 Nov 2024 18:17:37 +0000
ROA not before:           Mon 04 Nov 2024 18:12:37 +0000
ROA not after:            Mon 03 Nov 2025 18:17:37 +0000
asID:                     26006
IP address blocks:        2a06:1287::/32 maxlen: 48
Validation:               Failed, certificate revoked on Mon 11 Nov 2024 01:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:bf:e3:a8:99:cc:aa:6c:09:90:3d:8b:0e:c8:d5:fe:76:49:ed:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  4 18:12:37 2024 GMT
            Not After : Nov  3 18:17:37 2025 GMT
        Subject: CN=A95C460524E9E934EC07AB869586E39663A08DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:88:88:e3:ff:47:27:73:e0:81:86:e7:b4:b7:
                    8e:51:5d:66:c2:ea:95:1a:9f:c4:07:59:e2:a7:09:
                    84:20:45:91:0b:7b:ff:92:76:b3:d1:cd:a7:de:42:
                    ed:6a:b9:af:7d:e1:77:87:72:71:bb:66:c4:09:b2:
                    ae:2b:e1:77:85:01:e9:df:82:0f:d7:56:5e:54:70:
                    06:31:e7:b2:fa:d9:ca:79:22:a2:e4:c6:ed:f9:b1:
                    d1:a0:47:ac:c9:78:65:4b:e6:44:cb:0a:92:f9:cc:
                    88:e7:be:08:84:6f:39:66:4e:ff:1b:2d:03:51:47:
                    5b:08:2e:f4:90:a0:18:0d:7d:6a:0e:9d:c1:d1:37:
                    cd:25:15:3e:39:0d:83:fd:8d:c7:f9:20:b0:63:f4:
                    d0:e4:b5:a2:65:f6:33:8f:d3:86:87:37:72:c0:de:
                    6e:d7:1b:e9:b1:f9:4a:ea:6c:0f:b0:7d:65:19:49:
                    97:f7:9b:9a:0f:20:17:45:6e:40:68:f3:9f:58:12:
                    34:2e:2a:ce:77:2e:35:a8:76:34:06:9f:19:88:6e:
                    9e:38:03:3b:c1:8d:8b:cb:22:f7:19:cb:7a:80:91:
                    e7:e5:af:c7:98:c4:b8:e1:d8:93:66:f2:f1:c5:e4:
                    c7:7e:13:f5:fe:92:cd:61:83:7c:df:bb:70:92:96:
                    fa:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5C:46:05:24:E9:E9:34:EC:07:AB:86:95:86:E3:96:63:A0:8D:E9
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS26006.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:ae:cc:9f:53:21:18:6a:4e:e1:e7:d8:8f:72:fd:b3:24:c4:
         32:47:4d:b3:95:cd:2b:4a:1f:85:94:2e:f7:c1:2c:fc:f1:83:
         46:b0:a1:bf:e4:1c:9c:08:30:5c:62:df:99:62:31:41:c9:cf:
         aa:55:ee:f1:da:76:19:60:55:a2:1e:3d:88:2b:5f:bd:a9:dd:
         95:37:8f:c7:d8:55:6b:37:95:b9:f6:42:2d:b9:f1:99:4b:36:
         93:10:e7:1b:f9:44:fb:af:27:e2:a8:bc:ae:8f:27:a7:c7:44:
         21:a7:15:c3:d6:ae:59:6e:66:b1:c7:dd:11:27:54:1b:4c:3d:
         ac:27:52:e7:16:4a:77:41:e6:a7:ec:b3:aa:41:7e:b4:8e:67:
         35:01:3a:7e:9d:4b:72:d3:ae:73:a5:c5:70:47:db:51:28:b6:
         36:25:60:f1:4e:27:8a:87:5f:8c:39:65:9d:93:f3:52:0f:59:
         0e:65:89:1c:b8:9c:97:ad:c0:30:ce:cf:7e:e3:c0:59:81:46:
         69:3f:e1:aa:46:72:1a:f7:57:1f:e1:71:9d:d6:3a:01:66:a3:
         d2:1f:bb:6d:dc:fb:94:7b:cf:dd:6b:1c:d6:62:68:63:b7:f0:
         0c:9e:72:8d:e3:77:19:22:21:eb:a9:5e:f3:a3:39:ce:d9:4e:
         7f:90:14:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:47:33 2025 by rpki-client