Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS396319.roa
File:                     AS396319.roa (raw, json)
Hash identifier:          uGygo06VVHuDBmyBOms1TmTc2KVD8xrLphQdql2tb0k=
Subject key identifier:   8A:46:78:F7:A1:2C:40:16:90:20:B2:C8:45:34:38:37:14:46:A7:9F
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       1AF20D5C0467A47E00FB60DAD4FC82C9020B1A7C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS396319.roa
Signing time:             Tue 05 Dec 2023 02:44:11 +0000
ROA not before:           Tue 05 Dec 2023 02:39:11 +0000
ROA not after:            Tue 03 Dec 2024 02:44:11 +0000
asID:                     396319
IP address blocks:        185.195.238.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 18 Dec 2023 07:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f2:0d:5c:04:67:a4:7e:00:fb:60:da:d4:fc:82:c9:02:0b:1a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 02:39:11 2023 GMT
            Not After : Dec  3 02:44:11 2024 GMT
        Subject: CN=8A4678F7A12C40169020B2C8453438371446A79F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b9:96:a2:72:76:ae:9d:73:ca:d3:d2:c0:8a:
                    c0:53:af:bb:40:dc:5c:2d:01:66:ba:cf:39:06:46:
                    6d:f2:19:96:70:ec:a9:da:0d:96:7d:20:1d:92:46:
                    5a:b0:60:2d:4c:c8:de:d9:02:b5:ca:c3:6f:04:7e:
                    0e:00:6b:05:59:d8:a3:41:29:de:50:6d:56:75:11:
                    6f:50:a8:92:c2:c2:ce:b0:ee:03:5d:52:0e:b4:ff:
                    9c:a8:af:49:e7:6c:c0:53:2d:0a:4e:a6:d7:8f:19:
                    e9:00:83:48:2a:cf:6a:b7:26:9d:ea:5e:31:9a:b9:
                    68:28:7b:f3:1e:97:63:c9:9f:6d:ca:50:27:3d:58:
                    bf:e9:42:84:ce:14:f5:5e:40:5c:38:b0:89:5d:a2:
                    b3:4e:33:c1:0f:29:40:af:34:6e:2a:d0:69:13:95:
                    38:cd:13:3f:fe:87:e4:56:2b:ca:76:2d:10:4e:d8:
                    fd:80:ce:fa:76:17:6a:09:29:ea:1e:39:39:23:4e:
                    43:01:64:22:f5:4e:5d:07:4f:11:3d:35:c9:70:38:
                    c6:ec:99:b7:68:6f:59:b5:3f:1a:6d:47:33:fe:12:
                    ca:dc:c1:21:e0:8b:da:88:3f:28:1a:37:51:5a:83:
                    2b:54:d6:60:72:b5:2c:28:bf:d6:c5:e8:49:8a:7d:
                    41:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:46:78:F7:A1:2C:40:16:90:20:B2:C8:45:34:38:37:14:46:A7:9F
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS396319.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.195.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:1f:5e:68:05:fa:95:ef:09:cd:34:d2:46:e0:02:93:e5:7f:
         28:bd:8d:82:86:8b:4d:97:4d:15:a3:f3:b9:24:77:15:4b:e0:
         22:19:f4:a4:c5:67:e1:f0:b9:ba:23:f0:35:5f:bc:91:70:f4:
         d8:05:f0:e6:d9:76:6a:b0:00:d6:0f:3e:b3:4a:cc:b4:95:4a:
         d7:f2:bc:c5:51:d1:a4:c4:d1:71:b1:33:46:f8:b3:b4:d2:cf:
         71:32:c5:e1:02:ee:78:41:3c:d9:cf:f5:05:c8:8d:a7:99:a5:
         57:c4:0e:c7:96:c2:ed:b8:d6:99:b8:35:16:86:7e:f8:df:2c:
         a7:65:e0:8c:3d:5d:f1:23:eb:5a:3c:f9:3b:13:2b:68:16:8b:
         62:8e:a5:1f:c2:9e:86:4a:59:a6:5a:ef:c8:78:3d:7b:85:46:
         98:7f:71:a3:aa:9b:70:1f:df:c1:a2:7c:18:36:60:bd:4b:67:
         0c:d5:88:d8:50:ce:ab:99:0d:22:0f:cf:c6:58:d3:1c:f0:a0:
         cb:d1:37:7a:ae:ea:17:80:6f:45:5f:4b:e0:86:b3:0f:f1:9f:
         a8:03:36:b6:48:15:66:d1:28:ca:86:59:2e:10:b3:1e:aa:a5:
         f1:b5:b1:5f:0a:5b:8e:e3:95:34:9d:2a:bc:61:f0:1f:cb:97:
         3d:4f:98:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org