Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS397730.roa
File:                     AS397730.roa (raw, json)
Hash identifier:          TorEX1Vw+iMrDne0KDEOB8RUKoV/BJQjWddYJMiJ8tE=
Subject key identifier:   95:7F:57:92:4A:2E:75:FD:81:30:51:03:34:C2:4E:40:AE:9A:51:37
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       1D51396AD6994791F70D03A4379DD4AE28DD393B
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS397730.roa
Signing time:             Thu 23 Jan 2025 22:30:10 +0000
ROA not before:           Thu 23 Jan 2025 22:25:10 +0000
ROA not after:            Thu 22 Jan 2026 22:30:10 +0000
asID:                     397730
IP address blocks:        194.58.65.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 07 Feb 2025 18:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:51:39:6a:d6:99:47:91:f7:0d:03:a4:37:9d:d4:ae:28:dd:39:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan 23 22:25:10 2025 GMT
            Not After : Jan 22 22:30:10 2026 GMT
        Subject: CN=957F57924A2E75FD8130510334C24E40AE9A5137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:22:0b:7d:be:52:bc:e1:f5:14:08:d6:30:ea:
                    f2:e9:de:fe:1c:c0:8d:06:da:95:02:2d:8e:2d:d0:
                    aa:00:c8:ac:f8:4e:08:d9:29:58:4b:aa:9f:f8:73:
                    04:d1:12:5d:14:9a:06:4d:1d:54:69:cb:1f:75:77:
                    38:8e:9f:f9:cf:7a:63:c0:7d:89:e8:03:8a:b7:77:
                    ab:c4:9a:33:65:65:a6:ca:01:89:67:cf:19:6d:d9:
                    03:3d:a6:5c:c2:ee:79:8f:20:b8:b1:ed:4e:52:ec:
                    46:69:37:74:57:60:9f:e0:90:0c:63:0b:27:f3:1a:
                    58:aa:15:d3:45:08:2d:d6:8c:06:e6:24:ac:8d:90:
                    4c:41:6a:78:6e:8f:37:5e:6a:54:b8:91:7d:76:0a:
                    74:76:c0:37:62:e8:e8:38:69:9c:30:22:2a:23:b8:
                    57:96:21:ac:bd:23:8e:19:ad:6a:54:0d:f2:2b:a2:
                    3d:fd:cf:4f:10:38:a4:e8:2c:4d:8b:f2:5c:8f:1f:
                    6a:c7:aa:21:b3:45:a9:7f:4b:19:bb:6d:7c:c8:02:
                    85:5f:f5:99:c8:9b:a9:c1:2b:1d:a7:d8:e5:7f:f9:
                    57:0f:c0:dd:3a:9c:71:c4:5f:cf:a9:43:8b:14:6a:
                    87:c9:68:d9:36:d9:e6:01:8f:9e:5b:b8:7b:bd:4c:
                    2b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7F:57:92:4A:2E:75:FD:81:30:51:03:34:C2:4E:40:AE:9A:51:37
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS397730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.58.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:97:ce:6a:cf:39:92:9c:a8:cb:8c:c3:86:e5:83:24:5e:20:
         08:d4:cf:04:9d:e8:fb:03:84:ad:a0:14:08:e1:bb:e1:78:c6:
         6f:56:13:c2:1b:95:56:30:f1:83:59:75:da:83:7d:7e:b4:72:
         53:4a:5e:19:8a:15:d1:73:ad:fd:2d:91:1b:42:e8:97:4c:26:
         76:58:f7:ea:09:95:7e:1f:81:15:32:26:dd:2f:5f:a6:ca:2f:
         82:48:b1:f8:a5:c1:2f:d5:00:1d:22:c5:d2:fc:5e:6e:6b:9d:
         61:73:ea:19:a9:60:5d:38:cb:91:4e:36:df:9d:f7:61:15:cc:
         06:33:49:78:97:37:e3:ad:d2:8d:03:e5:24:da:6b:f4:a7:ff:
         fc:78:00:e0:38:57:27:70:38:f3:15:a6:7d:7c:25:b0:7d:41:
         dc:3f:99:1c:fe:2f:bb:70:01:76:da:6c:bb:89:a2:b6:a6:67:
         09:90:fb:1d:7f:0d:3e:a1:44:34:a5:72:28:37:21:c3:fb:d3:
         2b:24:8a:6f:fb:12:d6:bb:cb:e9:33:67:a0:01:35:e9:4d:16:
         f8:0a:4b:3a:23:a5:92:33:02:ac:34:f7:d9:57:93:90:91:6a:
         61:80:c2:5e:20:c8:ca:5c:64:07:be:93:17:a9:bd:63:d9:ff:
         71:da:05:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:13:30 2025 by rpki-client